Wanderkit Privacy Policy
- Wanderkit works without an account. Everything you save stays on your phone unless you choose to back it up.
- Backup is optional and off until you sign in with Apple or Google. Then a copy of your saved data is kept under your account on Firebase (Google Cloud).
- No ads, no analytics, no tracking. We never sell your data. Two companies handle some of it for us: Firebase (Google) stores the backup, and Expo delivers app updates (see “App updates”).
- Delete my data in Settings removes everything saved on the phone and, if you are signed in, your account and the backups of every Hyperfocused Apps app under it (one account backs up all of them).
What Wanderkit saves on your phone
Wanderkit is a collection of small tools, and each tool keeps what you put into it: trip names, dates and places you type, packing items, expenses and the names of the people you split them with, votes and game scores. All of this is stored in the app’s own storage on your phone. We cannot see it, and it does not leave the phone unless you turn on the backup described below.
You can clear a single tool from its own settings, or clear everything with Delete my data (Settings → Your data). Deleting the app from your phone also deletes everything it saved there.
Usage stats on your phone
Wanderkit keeps simple usage stats for you to look at in Settings → Your stats: which tools you open, roughly how long each is on screen, when you last used it and on which days you used the app. The launcher’s “recent” order and the open count on a tool’s detail sheet come from the same record; the app keeps no other. They are kept only in the app’s own storage on your phone, as one small total per tool per day. They are never sent to us or to anyone else, they are not part of the optional backup, and no analytics service is involved. You can turn them off with Keep usage stats (nothing is recorded while it is off), remove them with Clear stats, and Delete my data or deleting the app removes them too.
Optional backup
Settings → Your data lets you sign in with Apple or Google. Until you do, nothing is backed up and no account exists. When you sign in:
- What is stored: the saved data of each tool (the items listed above), the sign-in’s email address (Apple lets you share a private relay address instead) and a user id that Firebase assigns. We use these only to keep your backup and to recognise you on a new phone. Firebase also keeps the IP address and device type of your sign-ins for security.
- Where: in a Firebase project owned by Hyperfocused Apps, on Google Cloud servers in the United States. Google acts as our processor and does not use your data for its own purposes. Firebase’s security rules allow only your signed-in account to read or write your backup.
- How it works: the phone keeps its copy and pushes changes to the backup a few seconds after you make them. Signing in on another phone with the same account merges the two, newer changes winning. The same account works across all Hyperfocused Apps apps.
- Signing out stops the backup. Your phone keeps its data, and the cloud copy stays until you delete it.
- Values over about 900 KB stay on the phone and are not backed up.
We use your backup for nothing else: not for advertising, profiling, analytics or contacting you.
When Wanderkit uses the network
Wanderkit ships everything it needs inside the app and downloads no content. It uses the network in two cases: each time it starts, it asks Expo’s update server whether a fix is available (see “App updates”); and it connects to our Firebase backend only once you turn on the optional backup. Nothing you save is sent anywhere while you are signed out.
App updates
Wanderkit can receive small fixes between App Store releases. They are delivered by Expo (650 Industries, Inc., United States; its service is called EAS Update), acting as our processor. To find out whether a fix is available, the app sends a request to Expo’s update server (u.expo.dev).
Wanderkit asks each time it starts, and again when you come back to it after it has been open for six hours or more.
That request carries:
- A random install ID. The app creates it on the phone the first time it asks for an update and keeps it in the app’s own settings on the phone, so it is the same in every request until Wanderkit is deleted. It is not your name, email, account, phone number or the advertising identifier, and we never combine it with anything else we hold. It lets Expo count how many installs received an update.
- Which build is asking: that it is the iOS app, the build’s runtime version (a code for the app’s native parts), the update channel the build listens to, the ID of the update it is running and of the one it shipped with, and the IDs of any updates that recently failed to start on that phone.
- What iOS adds to every request an app makes: a User-Agent line that names the app, its build number and the versions of the system’s networking parts (which reveal the iOS version), and the languages the phone is set to (Accept-Language).
- Like any internet request, it shows Expo the phone’s IP address while it is served.
It carries none of your saved data and nothing about how you use Wanderkit. The update system can also attach the text of an error that stopped the app from starting; Wanderkit is set up to send that field empty.
If a fix is available, the app downloads it from Expo with the same details and uses it the next time it opens. What we can see in Expo’s dashboard is totals: how many installs run each update and how many failed to start it. We cannot see who they are. Expo keeps this under its own privacy policy. There is no switch for update checks in the app; they do not happen while the phone is offline.
What we do not do
- No advertising and no ad networks.
- No analytics or crash-reporting SDKs. We do not measure how you use the app: the usage stats described above are kept by the app on your phone, for you, and never reach us.
- No tracking across apps or websites, and no advertising identifier.
- No selling, renting or sharing of your data. Two third parties handle some of it for us, and only as described on this page: Google’s Firebase, as the storage provider for the optional backup; and Expo, which delivers app updates and receives a random install ID and the build’s details when the app asks for one (see “App updates”).
- No access to your contacts, photos, location, microphone or camera. Wanderkit asks for no such permission.
Purchases
Wanderkit currently has no in-app purchases. If paid features are ever added, they will be sold through Apple’s App Store. Apple handles the payment and we never receive your card or billing details; Apple shares with us only what is needed to unlock what you bought.
Children
Wanderkit is not directed at children under 13 (or the age of digital consent where you live), and we do not knowingly collect personal information from them. The optional backup can only be turned on by signing in with an Apple or Google account. If you believe a child has signed in, email Hyperfocusedengineer@gmail.com and we will delete the account and its backup.
Deleting your data and your rights
Delete my data (Settings → Your data, hold to confirm) deletes, in this order: the cloud backup, your sign-in account with us, and every tool’s saved data and reminders on the phone. Because one account backs up all Hyperfocused Apps apps, deleting from Wanderkit also deletes the backups of every other Hyperfocused Apps app kept under that account, along with the account itself; those apps keep the data on their phones and simply stop backing up. You will be asked to confirm with Apple or Google first; for an Apple sign-in we also ask Apple to revoke the sign-in. This cannot be undone. If a step fails, the app says so and you can try again to finish. Signed out, it clears the phone only; sign in first to remove a cloud backup too.
Wherever you live, you can also ask us to show you, correct, export or delete any data we hold about you by emailing Hyperfocusedengineer@gmail.com. We answer from the same address, usually within a few days, and we will ask you to confirm the request from the email address of your backup account. There is no charge.
- If you are in the European Economic Area, the United Kingdom or Switzerland (GDPR): we process backup data because you asked us to (your consent, which you withdraw by signing out or deleting). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. The data is stored in the United States under Google Cloud’s standard contractual clauses.
- If you are in California (CCPA/CPRA): we do not sell or share your personal information, we have no financial incentive programmes, and we do not use sensitive personal information for anything beyond keeping your backup. You may request what we hold, ask for it to be deleted, and you will not be treated differently for doing so.
Retention
Data on your phone stays until you delete it or the app. A backup stays under your account until you delete it. Apple and Google keep their own records of your sign-in under their own privacy policies.
Security
Every connection to Firebase uses HTTPS. The backup is protected by Firebase security rules that only let your own signed-in account read or change it; we have no admin tooling that browses user backups. No system is perfectly secure, and the app is designed so the phone is always the primary copy of your data.
Changes to this policy
If Wanderkit ever starts collecting something new, we will update this page, change the dates at the top and, for anything material, tell you in the app before it takes effect.
Contact
Hyperfocused Apps is the trade name of Harsha Hassan Somashekara, an individual developer established in India, who is the data controller for Wanderkit. Questions, data requests and anything else about privacy:
Hyperfocusedengineer@gmail.com