WalkCoinsGet the app
← Back to WalkCoins

Privacy Policy

Last updated: 7 October 2026 · Governed by the DPDP Act, 2023

This Privacy Policy explains how Brandmongo Services Private Limited ("WalkCoins", "we") collects, uses, shares, and protects your personal data when you use the WalkCoins mobile app and website. We process personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. The one thing to know first

Your step and activity data is used only to award you coins. It is never used for advertising, ad targeting, or profiling, and is never sold or shared with data brokers. We maintain a strict technical separation (a "firewall") between the systems that read your step data and the systems that serve ads. This is a design commitment and, for HealthKit / Health Connect data, a platform policy requirement.

2. Data we collect

  • Account data: your mobile number (verified by OTP), and a device identifier used for security and one-account-per-device enforcement.
  • Activity data:step counts and related motion/activity data read from your device's motion sensor, Apple HealthKit (iOS), or Health Connect (Android), strictly to calculate coins and to detect fraud.
  • Rewards data: your coin ledger, redemptions, and the details needed to fulfil a reward (e.g. the mobile number you choose to recharge).
  • Device & integrity data: device model, OS version, and attestation signals (Google Play Integrity / Apple App Attest) used solely to prevent fraud and abuse.
  • Advertising ID:the ads in the app are shown by Google AdMob, which receives your device's advertising ID (on iPhone, only if you allow tracking when the app asks) and basic device information to show and measure ads and to stop ad fraud.
  • Usage & diagnostics: app events and crash logs to keep the app working and to improve it.

3. How we use your data

  • To count your steps and credit coins at the published rate.
  • To operate rewards, redemptions, streaks, and leagues.
  • To show ads that keep WalkCoins free, and to credit the Sparks a watched video earns.
  • To detect and prevent fraud, spoofed steps, and abuse.
  • To provide support and respond to grievances.
  • To comply with legal obligations.

We do not use your health/activity data to serve or target advertising, and we do not perform behavioural profiling for advertising.

4. Consent

We collect and process your personal data based on your free, specific, informed, and unambiguous consent, obtained at sign-up and when you grant motion/health permissions. You may withdraw consent at any time in the app; withdrawing certain consents (like activity access) may stop coin earning. Where the law requires it, Google's consent form asks before personalised ads are shown. On iPhone you choose whether to allow tracking; on any phone you can reset or delete your advertising ID in the phone's settings.

5. Sharing

We share the minimum necessary data with:

  • Licensed rewards partners to fulfil the specific reward you redeem (e.g. a recharge or voucher aggregator).
  • Infrastructure and analytics processors (e.g. cloud hosting, crash reporting) bound by data-processing terms.
  • Google AdMob, our ad partner, as described in section 2. It never receives your steps, health data, or phone number.
  • Authorities where required by law.

We never sell your personal data.

6. Age & children

WalkCoins is intended only for users aged 18 and above. We do not knowingly onboard anyone under 18, and we do not perform behavioural tracking or targeted advertising to minors. If we learn an account belongs to a minor, we will disable it.

7. Retention

We keep your data only as long as needed to provide the service and meet legal requirements, after which it is deleted or anonymised. You can delete your account and data at any time (see Data Deletion).

8. Your rights

Under the DPDP Act you may request access, correction, and erasure of your personal data, nominate a representative, and lodge a grievance. Exercise these in-app or via our Grievance Officer (see Contact).

9. Security

We use encryption in transit and at rest, access controls, and device attestation. No system is perfectly secure, but we take reasonable safeguards appropriate to the sensitivity of the data.

10. Changes

We will notify you of material changes to this policy in-app and update the date above.

11. Contact

Questions? Email [email protected] or reach our Grievance Officer via the Contact page.