Privacy Policy

1. Who we are (data controller)

The data controller is AxentSoftware SAS, CS 48756, 58 rue de Monceau, 75380 Paris 8e CEDEX, France (RCS Paris 940 581 234).

For any privacy request, contact us at contact@axentsoftware.com.

2. Data we collect

We collect only what is needed to run Kiwalk and credit your rewards:

• Account data: email address, a confirmation that you are 18 or older, and language preference.
• Activity data: daily step counts and daily walking distance read from Apple Health or Health Connect, and derived figures such as calories and streaks.
• Reward data: your Kiwi balance, conversions, missions and surveys completed, challenges, referrals, and redemption history.
• Device & technical data: device model, operating-system version, app version, a device attestation token used to prevent fraud, and IP address.
• Support data: the content of messages you send us.

We do not ask for your real name, postal address or payment card details on the free tier. Optional in-app purchases are processed by the app stores or by Stripe, which receive the payment data directly. We never store your full card number.

3. Health & activity data is never sold

Your step, distance and activity data is processed for one purpose: to count your steps and credit your Kiwis, and to show you your own statistics. We never sell health or activity data to advertisers or data brokers, and we never share it for their advertising purposes.

4. Why we process it (legal bases)

Under the GDPR, our legal basis depends on the data and the context:

• Performance of our contract with you (running your account, crediting and redeeming Kiwis).
• Your consent (reading Health/Health Connect data, optional advertising, push notifications).
• Our legitimate interests (preventing fraud, securing the service, improving the app).
• Compliance with our legal obligations.

5. How long we keep your data

We keep your personal data only as long as necessary for the purposes described here. Account and reward data is kept while your account is active and for a limited period afterwards to meet legal, accounting and anti-fraud obligations, then deleted or anonymised. You can delete your account and associated data at any time from the app settings.

6. Sharing with processors and partners

We share data only with service providers acting on our behalf under a written contract, each bound to protect it:

• Hosting and infrastructure (Hetzner Online GmbH, Cloudflare, Inc.).
• Advertising and offer partners (e.g. AppLovin) for the optional videos, offers and surveys you choose to engage with, governed by a separate consent.
• Device attestation and anti-fraud providers (Apple App Attest, Google Play Integrity).
• Payment providers (the app stores and Stripe) for optional purchases.
• Reward and voucher providers, to deliver the gift cards and vouchers you redeem.

Using your personal information for our own internal research and development is not considered a "sale" of your information.

7. Cookies and log files

The kiwalk.app website uses only the strictly necessary cookies required to serve the site. Like all hosting providers, our servers keep standard log files (IP address, browser type, date and time, pages requested) to analyse trends, administer the site and keep it secure. The Kiwalk app itself does not use advertising cookies; any advertising consent inside the app is requested separately.

8. International transfers

Some of our providers (for example Cloudflare and the app stores) are based outside the European Economic Area. When data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

9. Age restriction

Kiwalk is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it promptly.

10. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

• access, update or delete the information we hold about you;
• rectify inaccurate data;
• object to, or request restriction of, our processing;
• data portability;
• withdraw your consent at any time.

You can exercise most of these rights directly from the app settings, or by emailing contact@axentsoftware.com. You also have the right to lodge a complaint with the French data-protection authority (CNIL, www.cnil.fr).

11. California residents (CCPA)

If you are a California resident, you are granted specific rights regarding your personal information: the right to know what we collect and why, the right to request deletion, the right to non-discrimination for exercising your rights, and the right to limit the use of sensitive information. We do not sell your personal information.

To exercise these rights, contact us at contact@axentsoftware.com. We will verify your identity before responding, using only the information needed for that purpose.

12. Contact & complaints

For any question, request or complaint about how we handle your data, email us at contact@axentsoftware.com. We would rather hear from you first, but you may also contact the CNIL.