Privacy policy
Last updated 29 September 2026
The short version
Khatwa needs your steps to give you points, and a name so other walkers know who you are. It keeps daily step totals, not a record of your movements. Your location never leaves your phone. We do not sell anything about you to anyone.
What we hold
Your name, which is required, and your email address if you sign in with email. If you sign in with Apple or Google we receive what they pass on — with Apple’s Hide My Email that is a forwarding address, not your real one.
Anything else on your profile is optional: city, date of birth, gender, a photo.
Daily step totals, one number per day, taken from Apple Health or Health Connect once you allow it. We do not receive moment-by-moment movement, a route, or anywhere you have been.
Your points: what you earned, what you spent, and the vouchers you bought and used.
The groups you belong to, and anything you write in group chat.
Your location stays on your phone
If you allow it, Khatwa shows how far a shop is from you. That distance is worked out on your phone and is never sent to us. We do not know and do not store where you are.
You can refuse, and everything works except that distances are not shown.
What other people see
In a group, other members see a shortened form of your name and your step totals for today, this week and this month. Your full name is not shown to them.
When you redeem a voucher, the shop’s staff see the offer, the voucher, and a shortened form of your name — "Maryam Al-Sulaiti" reaches them as "Maryam A.". If your name is a single word they see that word. They do not receive your email, your age, your step counts or anything else.
Health data
Your steps come from Apple Health or Health Connect only after you allow it, and only steps — nothing else in your health record.
We use them to work out points and to draw your own charts. We do not use health data for advertising and we do not share it with partner shops or anyone else.
You can withdraw permission at any time in your phone’s settings. Khatwa then stops reading new steps.
Who else touches it
Our database and sign-in run on Supabase, who host it for us. Email we send you goes through Resend. Neither uses your information for their own purposes.
We do not sell your information, and we do not share it for advertising.
How long we keep it
While your account exists. Delete your account in the app and your data is deleted with it, including your points and step history.
Some records must outlive an account for limited reasons — an audit trail of administrative actions, for instance — and those do not identify you.
Your choices
See and change your details, or delete your account, in the app under Profile.
Turn off Health access, notifications or location in your phone’s settings at any time.
Write to support.khatwa.club@gmail.com to ask what we hold about you, to correct it, or to ask for a copy.
Children
Khatwa is for people aged 16 and over. If we learn an account belongs to someone younger we close it and delete the data.
Changes
If we start collecting something new, or use what we have for a new purpose, we will say so in the app rather than only editing this page.
Contact
support.khatwa.club@gmail.com. Khatwa is operated by [company name and registered address to be added — registration is in progress].