Privacy Policy
Walnut locks the apps you pick and lets you build a 3D object, one sealed session at a time. It does that on your iPhone. There is no account, no ads and no tracking. This page says exactly what stays on your phone, what little leaves it, and who receives it.
In short
- Walnut never sees what you do inside your apps, and the list of apps you lock never leaves your iPhone.
- There is no sign-up. We don’t ask for your name, email or phone number.
- Walnut sends usage events (for example “a seal started”) and your subscription status under a random install ID made on your phone. That ID connects your Walnut data, but it is not your name, email, Apple ID or advertising ID.
- We don’t sell data, share it for advertising, or track you across other companies’ apps and websites.
- On your iPhone
- Screen Time
- What is sent
- Who receives it
- Never collected
- Keeping and deleting
- Children
- Your rights
- Contact
What stays on your iPhone
Your sessions, pieces, objects, streak, recoveries, chosen skin and settings are stored on your iPhone, inside Walnut and its extensions (the shield you see on a locked app, and the Screen Time monitor). They are not uploaded and not backed up to our servers. We have no servers that hold them.
Settings › Delete all data removes them from your iPhone. Deleting Walnut removes them too, along with every lock.
Screen Time
Walnut uses Apple’s Screen Time frameworks (Family Controls, Managed Settings and Device Activity) to lock the apps you choose. When you pick apps, Apple gives Walnut opaque tokens, not app names, and nothing about what you do in those apps. Walnut cannot read your messages, feeds, browsing or usage history. The tokens stay on your iPhone and are never sent to us or anyone else.
You can turn off Walnut’s Screen Time access at any time in the iOS Settings app. Walnut then tells you that your apps aren’t locked.
What is sent, and why
Usage events (analytics)
To learn which parts of Walnut help and where people get stuck, Walnut sends short usage events, such as: onboarding step viewed, seal started (with its length in minutes), seal completed, seal broken early or undone, piece placed, object completed, paywall viewed (and what opened it), a tip completed, and Screen Time access granted or lost. Along with them go your plan (free, trial or Pro), skin, current object and streak.
Each event carries:
- A random install ID that Walnut creates when it is installed. Every event and your subscription status carry the same ID, so this data is linked to that ID (pseudonymous), though not to your name or email. It is not your Apple ID, not the advertising identifier (IDFA) and not Apple’s vendor identifier (IDFV).
- Basic device facts: iOS version, iPhone model, Walnut version, language and country (coarse location).
Your IP address is not stored, and city, region and mobile carrier are turned off. Country is kept because Walnut is built for a few markets and we need to know where it is used.
Delete all data keeps the install ID, so a reset isn’t counted as a new install. The ID is kept in your iPhone’s Keychain, so it can stay the same even if you delete Walnut and install it again. It is not synced through iCloud Keychain. If you restore an iPhone backup (iCloud or computer) to a new iPhone, the same ID comes with it; a new iPhone set up without a backup gets a new ID. Restore purchases usually finds your subscription under the same ID; with a new ID, RevenueCat connects your subscription to it.
Subscription status
If you start a trial or subscribe, Apple handles the payment. Walnut checks your subscription status (which plan, trial or paid, renewal and expiry dates, and purchase history) through RevenueCat, using the same random ID. Without it Pro could not be turned on, restored or kept in sync. The same subscription events (trial started, renewed, cancelled) are shared with our analytics under that ID.
Support email
If you write to us, we receive your email address and what you write. “Something wrong? Tell us” in Walnut adds a few lines to your message: Walnut version, iOS version, iPhone model and plan. You can see and delete those lines before you send. Nothing else is attached, and never the apps you lock. We use your message only to answer it.
Who receives it
| Service | What | Why |
|---|---|---|
| Amplitude | Usage events, random install ID, device facts, country | Product analytics |
| RevenueCat | Subscription status and purchase history, random install ID | Turning Pro on, restoring and syncing it |
| Apple | Payment, your Apple ID | App Store purchases. We never see your card details |
These companies process the data on our behalf and may store it in the United States. We don’t sell or rent data, and we don’t share it with advertisers or data brokers. We would disclose it only if the law required us to.
What Walnut never collects
- Your name, email, phone number or contacts (unless you email us).
- The apps you lock, or anything you do inside any app.
- Your precise location, photos, camera, microphone or health data.
- The advertising identifier (IDFA). Walnut never asks to track you.
- Your answers in onboarding. They shape the intro on your phone and stay there.
This website sets no cookies and runs no analytics or trackers.
Keeping and deleting
Data on your iPhone stays until you use Delete all data or delete Walnut; the random ID is the exception and stays in the Keychain, as described above. Usage events are kept only as long as they help us improve Walnut, and are then deleted or aggregated. Subscription records are kept as long as RevenueCat and Apple need them for billing, refunds and tax.
To ask us to delete what Walnut has sent, email akin.kircitech@gmail.com. The data is stored under the random install ID, not your name or email, so we may need your help to find it; a subscription can usually be matched through its purchase details. Deleting Walnut stops all collection. The ID can stay in your iPhone’s Keychain after Walnut is deleted (it is not synced to iCloud), so if you install Walnut again on the same iPhone it may use the same ID.
Children
Walnut is not directed at children under 13, and we don’t knowingly collect data from them. If you believe a child has sent us personal information, email us and we will delete it.
Your rights
Depending on where you live (for example under the GDPR in the UK and EU, or the CCPA in California), you can ask to access, correct, delete or receive a copy of your data, and object to or restrict its use. We use data for analytics on the basis of our legitimate interest in improving Walnut, and for subscriptions to provide the service you bought. We don’t sell or “share” personal information as the CCPA defines those terms. Email us to use any of these rights; you can also complain to your local data protection authority.
Changes
If this policy changes, we will update this page and its date. If a change matters to how your data is used, we will say so in the app before it applies.
Contact
Walnut is made by Kircitech. Questions about privacy: akin.kircitech@gmail.com.