Wayvora Privacy Policy

1. Introduction

Wayvora is a run and walk tracker with game modes, developed and published by FrostWeb Studios (“we,” “us,” or “our”), a company based in Florida, United States. It records your route with GPS while you run or walk, and layers scenarios on top, such as being chased by zombies or collecting checkpoints, to make the workout a game.

This policy describes what Wayvora collects, why, who receives it, and the choices you have. It is specific to the Wayvora app and supplements the general FrostWeb Studios Privacy Policy. Where the two differ for Wayvora, this policy applies. Wayvora does not use FrostWeb Identity accounts; the account you use in the app is your Google sign-in, described below.

By using Wayvora you agree to this policy. If you do not agree, please do not use the app. This policy is governed by the laws of the State of Florida, United States.

2. Information We Collect

2.1 Account Information

Wayvora signs you in with your Google account. When you tap Continue with Google, Google sends us your display name, email address, and Google account identifier. We never see your Google password. We then create a Wayvora user ID, a join date, and a six-character friend code derived from that user ID. You can change your display name in the app at any time.

2.2 Location

Location is the core of the app. Wayvora uses your device’s precise GPS position:

• During a run or walk, from the moment you start the countdown until you finish or cancel, to draw your route, measure distance and pace, and drive the game scenarios. On Android the app keeps a visible notification while tracking so that GPS continues with the screen off.
• On the run setup screen, to show your position on the map and, if you ask for one, to plan a loop route that starts and ends where you are.

Wayvora does not collect your location when no run is set up or in progress, and it does not request “always” or background location permission. Each completed run stores a simplified copy of its route (at most 200 points) both on your device and in your cloud account.

2.3 Activity and Game Data

For each run or walk, Wayvora records the activity type, distance, duration, average pace, per-kilometer splits, the scenario and difficulty you chose, whether you survived, and the points you earned. From this history the app derives your XP and level, achievements, daily and weekly streaks, daily challenge results, and your points balance. The in-app shop records which cosmetics you have bought with points and which are equipped. Points are virtual; Wayvora has no real-money purchases.

2.4 Friends and Sharing

If you add friends by friend code, Wayvora stores the list of players you follow. If you choose to share a run as a ghost, Wayvora stores a copy of that run (route, distance, time, date, activity type, and your display name) under a share code. If you complete a daily challenge, Wayvora stores your name, time, and distance on that day’s leaderboard.

2.5 Diagnostics

If the app crashes, a crash report is sent automatically to Firebase Crashlytics. It contains the stack trace, device model, operating system version, app version, memory and storage state at the time of the crash, and a random installation identifier. It does not contain your name, email, location, or runs. The app also saves a short crash summary on your device and, on the next launch, offers to email it to us; nothing is sent unless you choose to send it.

2.6 Feedback

The Feedback option in Settings opens your email app with a message addressed to [email protected] that pre-fills the app version and your device model. We receive whatever you choose to send.

2.7 What Wayvora Does Not Collect

• No advertising identifier, and no advertising or tracking SDKs.
• No contacts, photos, files, or calendar.
• No microphone input. Scenario audio is played, never recorded.
• No health data from Health Connect, Google Fit, or Apple Health.
• No payment or card information.
• No location while the app is idle.

2.8 Stored Only on Your Device

Some settings never leave your phone: battery-saver mode, weekly distance targets, the record of which permissions you have answered, the snapshot that lets an interrupted run resume after the app is killed, and the local crash summary.

3. How We Use Your Information

• To run the app: track your route, compute stats, and play the scenarios.
• To keep your history: sync runs and progress to your account so they survive a new phone or a reinstall.
• Social features you opt into: leaderboards, friends, ghost sharing, and racing a friend’s ghost.
• To fix problems: investigate crashes and respond to feedback.
• To meet legal obligations and protect the rights and safety of our users and the public.

We do not use your data for advertising, we do not build marketing profiles, and we do not sell it.

4. Who Receives Your Data

4.1 Service Providers

Wayvora’s backend is Google Firebase, operated by Google LLC. Firebase Authentication handles your Google sign-in, Cloud Firestore stores your account and runs, and Firebase Crashlytics receives crash reports. These services process data on our behalf under Google’s terms and are hosted on Google’s infrastructure, which may be located in the United States or other countries where Google operates. On Android, position fixes come from Google Play services’ location provider, which is part of the operating system.

4.2 Map and Routing Servers

Wayvora uses free, community-run OpenStreetMap services rather than a commercial map provider. They receive limited data directly from your device, without your name or account:

• OpenFreeMap (tiles.openfreemap.org) serves the map imagery. Each map tile request reveals your IP address and the area of the map being displayed, which is the area around you during a run.
• FOSSGIS e.V. Valhalla (valhalla1.openstreetmap.de) plans loop routes. When you ask for a loop, or the app re-plans one because you have left it, your current coordinates and target distance are sent along with a request header identifying the Wayvora app.

Both are operated in Germany and have their own privacy practices. If you never plan a loop route, no request is made to Valhalla.

4.3 Other Wayvora Users

• Leaderboards: if you complete a daily challenge, your display name, time, and distance appear on that day’s leaderboard to other signed-in players.
• Friend code: anyone who has your friend code can see your display name and follow you. Following is one-way and does not reveal your runs or location.
• Ghost sharing: when you share a run as a ghost, anyone who enters its code can see the full route, including where it started and ended, along with your display name, distance, time, and the date. Think before sharing a run that starts at your home.

4.4 Legal and Safety

We may disclose information if required by law or legal process, or when we believe it is necessary to protect the rights, property, or safety of FrostWeb Studios, our users, or the public. If FrostWeb Studios is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction under the same protections.

4.5 No Sale, No Advertising

We do not sell personal data, share it with data brokers, or share it with advertising networks. Wayvora contains no ads.

5. App Permissions

Wayvora asks for the following permissions on Android, each for one purpose:

• Location (precise): GPS tracking during runs and map positioning. Without it, the app runs in a simulation mode so you can try the scenarios, but no real route is recorded.
• Notifications (Android 13 and later): the live tracking notification that shows your distance and time and keeps GPS running with the screen off.
• Vibration: haptic feedback when a zombie bites or you collect a checkpoint.
• Internet and network state: account sync, map imagery, and route planning.
• Foreground service: lets the tracking notification and GPS continue while the app is in the background.

Wayvora does not request background or “always” location, camera, microphone, contacts, storage, or activity-recognition permissions.

6. Data Retention

• Account, runs, progress, friends, ghosts, and leaderboard entries are kept until you delete your account or ask us to remove specific items. We do not currently delete accounts for inactivity.
• Data on your device is kept until you sign out, delete your account, or uninstall the app. Signing out clears local history, which is restored from your account when you sign back in.
• Crash reports are deleted by Crashlytics after 90 days.
• The resume snapshot for an interrupted run is discarded after 30 minutes.
• Emails you send us are kept only as long as needed to handle them and keep a record that they were handled.

7. Your Choices and Rights

• Delete your account and data: in the app, open Settings and tap Delete account, or follow the steps on the Wayvora account deletion page. Deletion removes everything listed in section 2 from our systems.
• Access or export your data: email [email protected] from your sign-in address and we will send you a copy of the data we hold.
• Correct your name: change it in Settings at any time.
• Limit location use: deny or revoke the location permission in your device settings. The app keeps working in simulation mode.
• Stay off leaderboards: leaderboard entries are only created when you complete a daily challenge run. Skip the daily challenge to stay off the board, or ask us to remove an entry.
• Share less: ghost sharing is always your explicit choice, and you can ask us to withdraw a shared ghost at any time.

Depending on where you live, you may have additional rights, including the rights described for Florida residents and international users in the FrostWeb Studios Privacy Policy. To exercise any of them, contact us at the address below. We respond within 30 days.

8. Data Security

All traffic between the app and our servers, the map servers, and the routing server is encrypted with HTTPS. Your account data in Cloud Firestore is protected by security rules that allow only your own sign-in to read or change it; leaderboards, friend codes, and shared ghosts are readable only by signed-in Wayvora users. We never receive or store your Google password. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your data.

9. Children’s Privacy

Wayvora is not intended for children under 13, and a Google account is required to use it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created a Wayvora account, contact us at [email protected] and we will delete it.

10. Changes to This Policy

We may update this policy as Wayvora gains features. Changes are posted on this page with a new effective date, and the app links to the current version from its Settings screen. Material changes will be announced in the app before they take effect.