This Privacy Policy explains how Wandercoon ("Wandercoon", "we", "us" or "our") collects, uses and protects your information when you use the Wandercoon mobile application (the "App") and this website. We built Wandercoon to be private by design: most of your data never leaves your device, we never sell your data, and we never run advertising.
Wandercoon is published by Adam ALET EI (see the "Editor and Contact" section below). We are the data controller for the personal data described in this policy.
1. Information We Collect
Data stored only on your device
By default, Wandercoon is offline-first. The following data is created and stored locally on your device, in the App's private storage, and is transmitted to our servers only if you create an account, under the conditions described below:
- A local player identifier and creation timestamp.
- Your daily step totals, one per day and per step source, plus the technical markers needed to compute them (for example, on Android, the last value read from the step sensor). The App does not keep raw step samples. (Your daily totals are backed up to your account only if you create one and give your consent, as described below.)
- Your health and motion permission status, and your onboarding choices (such as your daily goal).
- Your in-game progress, unlocked cosmetics and equipped outfit (backed up to your account only if you create one).
Depending on your system settings, this local data may be included in your device backups (iCloud or Google), which are handled by Apple or Google.
The reminders the App may send you are local notifications, scheduled on your device: no remote notification service is used and no notification token is sent to us.
Health and step data
With your explicit permission, the App reads your step count, and nothing else, from the sources you turn on:
- On iOS: Apple Health (HealthKit), from which we read your daily step total — steps entered manually in the Health app are excluded; and the iPhone's pedometer (Core Motion, "Motion & Fitness" permission), which only counts steps measured by the phone.
- On Android: Health Connect, from which we read your daily step total as Health Connect computes it from the apps you have connected to it (this total may include steps recorded or entered in those apps); and the phone's step sensor, which only counts steps measured by the device.
On Android, the App also looks at Health Connect's step records to count how many apps write steps there; nothing from them is kept. We do not read any other category of health data and never access any location data. The data read from these sources stays on your device; only daily totals may be backed up to your account, as described below. If you create an account and give your consent to cloud sync, the aggregated per-day step tally (one total per day and source) is backed up to your account so your step history survives a reinstall or device change — raw samples are never included. You can revoke this permission at any time in your system settings.
Account data (optional, opt-in)
Creating an account is optional. If you choose to create one to back up and sync your progress across devices, we collect:
- Your email address (verified through a one-time code) and an account identifier.
- An optional username you may set.
- Your derived game progress — for example the total number of Apples earned and spent, your experience and level, which worlds and chapters you have completed, the steps credited in the game each day, your daily goal and its history, your quests, your collectibles, the cosmetics you have unlocked, your equipped outfit, and the titles, badges and card decorations you have chosen.
We never upload the detailed data read from your step sources. With your consent, we back up the aggregated per-day step tally (one total per day and source) to your account, in addition to the derived progress described above, so your step history can be restored on a new device.
Public profile (Travelers feed)
The "Travelers" tab shows a public feed of players. Appearing in it is optional and off by default: it requires an account, a traveler name, and turning on the "Appear in the travelers feed" option yourself. While this option is on, the following information is public — visible in particular to every user of the App, including those without an account — and your name can be found through search: your traveler name, your avatar (outfit and fur color), your lifetime steps and your steps over the last 7 days (steps credited in the game), your level and experience points, your title, your card decorations, your badges (with their stars), and whether you are a Wandercoon+ subscriber, along with a random technical identifier attached to your profile. Your email address and your daily step totals never appear there. You can turn the option off at any time, and you then disappear from the feed.
If you report another traveler's name or hide a traveler, we record that report or that hide with your account identifier, so we can moderate names and stop showing you the travelers you hid.
Translation reports
From the App, you can report a translation that seems wrong, with or without an account. The report stores only: the App's language, its version, the platform, the screen concerned if you specify it, the optional message you write (500 characters at most) and the date it was sent. No account or device identifier is stored with the report. Please do not include personal information in it.
Purchase data
Wandercoon+ subscriptions and purchases are processed by Apple or Google. We do not see or store your payment-card details. We use RevenueCat to manage entitlements: it stores a purchase identifier and whether your premium access is active, which we link to your account once you sign in. The underlying transaction is handled by the App Store or Google Play under their own terms.
Diagnostic data
To keep the App stable, we use Sentry to collect crash reports and error diagnostics (such as error messages, stack traces, a technical log of the App's latest actions and basic device/OS information). These reports help us fix bugs and are not used to identify or profile you.
2. How We Use Your Information
- To run the core game loop — turning your steps into in-game progress and rewards.
- To back up your progress and sync it across your devices, if you have created an account.
- To show your public profile in the Travelers feed, if you turned it on, and to moderate reported names.
- To fix reported translations.
- To produce aggregated internal statistics about how the App is used (for example the number of active players or of steps walked in total), from synced account data; these statistics are neither published individually nor shared.
- To provide and manage Wandercoon+ premium access and purchases.
- To diagnose crashes, fix bugs and improve performance and reliability.
- To respond to your support requests.
- To comply with our legal obligations.
3. Legal Bases for Processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR: your consent for reading health and motion data, for cloud account sync and for showing your public profile (which you can withdraw at any time); the performance of a contract to deliver the App and any premium features you purchase; and our legitimate interests in keeping the App secure, stable and free of fraud (for diagnostics and name moderation), in improving its translations, and in measuring its use in aggregate.
4. Third-Party Services
We rely on a small number of trusted providers, each acting under their own privacy policy:
- Supabase — account authentication, cloud storage of your derived progress and daily step totals (with your consent), the Travelers feed and translation reports (hosted in the European Union). Privacy policy.
- RevenueCat — subscription and purchase management. Privacy policy.
- Apple — App Store distribution, HealthKit and in-app purchases on iOS. Privacy policy.
- Google — Google Play distribution, Health Connect and in-app purchases on Android. Privacy policy.
- Sentry — crash and error reporting. Privacy policy.
5. Data Sharing
We do not sell your personal data, and we never share it for advertising. We share data only with the service providers listed above, strictly to operate the App, and where required by law. Only your public profile information, if you turned it on, is visible to other users.
6. Data Storage and Security
Account data is stored on Supabase infrastructure located in the European Union and protected with row-level security, so that each account can only access its own data — with the sole exception of the public profile information described above, readable by everyone when you choose to appear in the Travelers feed. Data in transit is encrypted using HTTPS/TLS. While no method of transmission or storage is completely secure, we take reasonable measures to protect your information.
7. International Data Transfers
Your account and derived progress data is hosted in the European Union (Supabase, EU region). Some of our processors operate outside the European Economic Area (EEA) — for example this website is hosted by Vercel (United States), and Sentry and RevenueCat may process data in the United States. Where personal data is transferred to a third country, we rely on a valid GDPR Chapter V transfer mechanism — Standard Contractual Clauses and/or an adequacy decision — so that your data keeps an equivalent level of protection.
8. Data Retention
Data stored locally on your device remains until you delete it or uninstall the App. Account data is retained for as long as your account is active. If you delete your account, the associated data (including your public profile, your reports and your hides) is deleted from our systems. Translation reports are not linked to any account; they are kept for as long as they are useful to improve translations. After an account is deleted, residual copies in encrypted backups are purged within 30 days, and a minimal record (account identifier and deletion date) is kept only to re-apply the deletion if a backup is restored. Diagnostic data is retained only for the limited period needed to investigate and fix issues.
9. Your Rights
Subject to applicable law, you have the right to access, correct, export and delete your personal data, and to withdraw consent or object to certain processing. To exercise these rights, contact us at adam@resend.wandercoon.com. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority — in France, the CNIL.
10. Children's Privacy
Wandercoon is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of Wandercoon after changes take effect means you accept the updated policy.
12. Editor and Contact
Wandercoon is published by Adam ALET EI, a sole proprietorship registered in France (SIRET 830 658 597 00026), based in Paris, France. Director of publication: Adam Alet.
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (vercel.com).
For any question about this policy or your personal data, contact us at adam@resend.wandercoon.com.