Waddlo Privacy Policy

Effective October 15, 2026 · Last updated October 29, 2026

Waddlo is a walking game for families and friends. You walk, your steps move your hero along a shared road, and you hatch and raise dragons together. This policy explains what the app collects, how and why, who helps us run it, how long we keep it, and how to delete it.

The short version. We collect only what the game needs. Your step count is used to run the game and, in our own dashboard, to check the game is working. It's never used for advertising or marketing, never sold, and never shared except with the providers who run Waddlo. We never sell your data, never use it for advertising, and there are no ads, ad networks or trackers in Waddlo. You can delete your account and everything in it from inside the app.

What we collect and how

Step counts, from Apple Health. Only if you allow it, through Apple's Health permission screen. Waddlo reads your step count, and only daily step totals leave your phone. It reads no other health data and never writes to Apple Health.
Your account. When you start, we create a random account ID. If you choose Sign in with Apple, Apple gives us an ID and, if you allow it, an email address, which may be a private relay address. You can play as a guest with no email at all.
What you type and choose. Your name as your family sees it, your hero's name and look, your dragons' names, your Camp's decorations, and the groups you create or join.
Game progress. Levels, dragons, eggs, items, chests, race and boss results. The app sends these as you play.
Reports. If you report a player or a group, we keep who sent the report, who or what it was about, the name as it was then, and any reason you give, so we can review it.
A notification token. Only if you allow notifications. Apple issues it so we can send you notifications.
Basic usage events. Things like "opened the app", "synced steps" or "viewed results", and the game actions you take (for example hatching, merging or decorating), with the time. The app sends these so we can tell whether the game works.
Server logs. Our server briefly logs requests (time, address, and which part of the game was used) to keep the service running and fix errors.

We don't collect your location, contacts, photos, microphone, advertising identifier, or any health data other than step counts.

How we use it

To run the game: move your hero, hatch eggs, run the daily race, post results at 9 pm, run the weekly boss, and keep your progress.
To show your group what the game shows: see "Who can see what" below.
To send the notifications you allowed, like "results are in".
To find and fix problems and to see which parts of the game people use, using only our own usage events and our own dashboard (which shows each player's daily step totals to us, the people who run Waddlo).

Step counts and other health and fitness data are never used for advertising, marketing or data mining, and never shared with anyone for those purposes.

Who can see what

People in your groups see your name, your hero and its look, your dragons, your daily step totals, your place in the race, the items you use on them, your Camp (its decorations and your party dragons), and the cheers you send. Nobody outside your groups and your friends sees any of it, except that anyone with your group's invite link sees the group's name, emoji and how many people are in it. We never make your data public.

Friends you add (both of you have to say yes) see your name, your hero and its look, your walked steps on the road, and your Camp. They don't see your groups or who is in them, and they can't use items on you. Anyone with your friend link or code sees your name. You can remove or block a friend at any time.

Who helps us run Waddlo

We use a small number of service providers. They store or process data only on our behalf, to run Waddlo:

Supabase: our database and sign-in, in the United States.
Railway: hosts the game server, in the United States.
Apple: Sign in with Apple and push notification delivery.

Each of these providers is bound by its own terms and privacy commitments to protect your data at least as well as this policy describes, and to use it only to provide its service to us. We don't use third-party analytics, advertising or tracking SDKs.

We don't sell, rent or trade your data. We would only share it if the law requires it (for example, a valid court order), to protect someone's safety, or as part of a merger or sale of Waddlo. In a sale, this policy would continue to apply, and we would tell you first.

How long we keep it

Your account and game data: for as long as your account exists.
When you delete your account: we delete it from our database right away. Database backups are overwritten within 30 days.
Server logs: kept for up to 30 days.
Guest accounts live on the phone that created them. If you delete the app without adding an Apple ID, you lose access to that guest account, so delete your account in the app first if you want its data removed.

Your choices: revoking consent and deleting your data

Delete your account and data: in the app, go to Hero tab → Settings → Delete account. This permanently removes your account, hero, dragons, step history, items and group memberships. Groups you were in keep working for the other members, and past results show you as missing.
Stop sharing steps: iPhone Settings → Health → Data Access & Devices → Waddlo. New steps stop syncing straight away. Step totals already sent stay with your account until you delete it.
Stop notifications: iPhone Settings → Notifications → Waddlo.
Get a copy, correct or delete by email: write to us at the address below, and we'll respond within 30 days.

Depending on where you live (for example California, Washington, or the EU and UK), you may have legal rights to access, correct, delete or move your data, and to withdraw consent. We give these rights to everyone, wherever you live. We never sell personal data or use it for targeted advertising.

Consumer health data

Your step counts may count as consumer health data under some state laws, such as Washington's My Health My Data Act. We collect it only with your Apple Health permission and only to provide the game you asked for. It's shared only with the service providers listed above, to run Waddlo. We never sell it. You can withdraw consent or delete it at any time, as described above.

Security

Data travels over encrypted connections (HTTPS), access to our database is restricted, and every request is tied to your signed-in account. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

Children

Waddlo is made for families, but accounts are for people 13 and older. We don't knowingly collect personal data from children under 13. If you think a child under 13 has given us personal data without a parent's consent, contact us and we'll delete it.

Where your data is stored

Waddlo's servers are in the United States. If you use Waddlo from outside the US, your data is transferred to and stored there.

Changes

If we change this policy, we'll update the dates above. For meaningful changes, we'll also tell you in the app before they take effect.

Questions or requests? Email [email protected].

Support