Privacy Policy

Last updated July 30, 2026.

Wanderhearts ("the App") is built to collect as little about you as possible. This policy explains what we handle and why. "We", "us", and "our" mean 1672772 Ontario Ltd., an Ontario, Canada corporation, which is the data controller for this policy. A live copy is hosted at wanderhearts.app/privacy and linked from the App Store and Google Play listings.

The short version

No account, no email, no name required. We don't sell your data or use your health data for advertising. Most data stays on your device; anything on our servers is tied only to a random, anonymous device identifier.

What we collect

• Step & activity data: The App reads your step count from Apple Health (HealthKit) or Android Health Connect only with your permission, and uses it on your device to run the game (earn currency, set companion moods). We do not sell your health data, use it for advertising, or share it with third parties. Apple and Google prohibit such use and so do we.
• Game progress: Your collection, currency, settings, and consent timestamp are stored on your device and may be backed up to our servers under a random, anonymous device identifier (no name, email, or account).
• Purchases: Handled by the Apple App Store / Google Play, who are the sellers of record. We receive confirmation that a purchase occurred (to grant in-game items), not your payment-card details.
• Crash & error reports: If the App has an error, we send a report to our own servers (tied only to the random device identifier) so we can fix it, and — while it remains enabled — also to Sentry (Functional Software, Inc.), a processor we are phasing out. A report contains technical details (device model, OS version, app version, error stack trace). It does not include your name, email, or health data; Sentry runs with personal-data collection off. See sentry.io/privacy.
• Friends (optional): If you use Friends, we store the display name and weekly step count you choose to share, and the companion you choose to show — tied to your random device identifier — and share them with the friends you add, so you can compare weekly steps and send gifts/waves. You add a friend via a link you control, and you can remove a friend at any time (which deletes the connection for both of you). Never shared with advertisers.
• Messages (optional): If you message a friend, we store the text and stickers you send, tied to your and the recipient's random device identifiers, so the conversation can be delivered and shown to both of you. Messages are text and stickers only — links and images are stripped on our servers and never delivered. You can block a friend (which hides the thread and stops messages both ways) or report a message to us for review. We may retain a reported message to handle the report and keep the service safe. Never shared with advertisers, and never used for ads.
• Notifications (optional): If you allow notifications, we store a push token from Apple's or Google's push service so a friend's gift/wave can reach you. It contains no personal information; turn notifications off any time in your device settings.
• Analytics: We record a small set of anonymous product events (e.g. app opens, summons, daily-goal completions, purchases) to our own servers, tied only to the random device identifier, to understand how the game is used. Not shared with third parties; never includes health data.
• Ads: The App shows ads via Google AdMob (Google Mobile Ads SDK). We request non-personalized ads only, but the SDK still collects a device advertising identifier to serve ads and limit fraud. See Google's privacy policy and AdMob data disclosure. We do not send your health or step data to any ad network.

What we do NOT do

• No selling of personal or health data, ever.
• No requirement to create an account or provide an email.
• No use of Health data for anything except running the game on your device.

Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: your consent (health/step access and push notifications — which you can withdraw at any time in settings); performance of a contract (providing the game, cloud backup, and Friends you ask for); and our legitimate interests in a limited, privacy-protective way (keeping the App secure, fixing crashes, and understanding anonymous, aggregate usage).

HealthKit / Health Connect specifics

Per Apple and Google platform rules, health and fitness data obtained through HealthKit / Health Connect is used solely to provide App features, is never used for advertising or sold, and is never shared with third parties for their own use.

Where your data is processed

We operate from Canada and use reputable hosting/infrastructure providers that may process data on servers located in Canada, the United States, or other countries. Where required, we rely on appropriate safeguards for cross-border transfers (such as the EU Standard Contractual Clauses). By using the App you understand your data may be processed outside your country.

How we protect data

We use industry-standard measures (encryption in transit, access controls, and data minimization). No system is perfectly secure, but because we hold no names, emails, or payment details, the impact of any incident is inherently limited.

Data retention & deletion

On-device data is removed when you delete the App or use "Reset all progress" in Settings (which also clears the anonymous cloud backup tied to that device). Removing a friend deletes that connection on our servers for both of you. Messages are stored until you or the recipient deletes the App / resets progress, or you ask us to remove them (reported messages may be kept longer to handle the report). Crash reports are retained for up to 90 days. To request deletion of any server-side data (cloud backup, friend connections, shared profile, messages, crash reports), email your transfer code to hello@wanderhearts.app and we will delete it.

Children

The App is intended for adults (18+) — it contains simulated gambling (gacha) and optional purchases. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or the minimum age of digital consent where you live). If you believe a minor has provided us data, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict/object to the processing of your personal data, and to withdraw consent at any time. We do not sell or "share" personal information as those terms are defined under California law (CCPA/CPRA), so there is nothing to opt out of. If you are in Canada, you have rights of access and correction under PIPEDA. To exercise any right, email hello@wanderhearts.app (include your transfer code so we can locate your server-side data). You may also complain to your local data-protection authority (e.g. the Office of the Privacy Commissioner of Canada, your EU/EEA supervisory authority, or the UK ICO).

Changes & contact

We may update this policy; material changes will be surfaced in the App or on our website.

• Email: hello@wanderhearts.app
• Controller: 1672772 Ontario Ltd., 8 Eglinton Avenue East, Unit 601, Toronto, Ontario, M4P 0C1, Canada.