Privacy

Inkmile: the app and today’s page on the web. Last changed: 2026-10-25.

In one paragraph

Inkmile reads your daily step count from Health Connect so your walks can draw its map. It never reads your location. It has no accounts, no ads and no tracking from other companies. Two things can leave your phone, and only if you say yes to each: anonymous counts of how the game is played, and your daily step total for the shared city. You can say no to both and play everything that is on your phone. “Forget me” in Settings deletes everything we hold for your phone.

What the app reads on your phone

• Steps, from Health Connect, only when you open the app, and only after you allow it. Steps become ink in the game. Nothing else from Health Connect is read.
• Your game (the map, your stamps, your Folds) is saved on your phone and left out of phone backups.

What can leave your phone (each needs your yes)

• “Count my play anonymously.” Sent only after you say yes: a random number and a random key made on your phone (not your name, email or phone number), the app’s version, your phone’s local day, today’s page number and your stamp on it, counts of what you did that day (finishing the opening, playing today’s page, opening the share sheet, restoring a room and unfolding a Fold, plus a mark on the day you said yes), and whether you walked at least 500 steps that day (yes or no, never the number). We use these only as totals, to make the game better. We never look at one person’s steps.
• “Walk with others” (arrives with the shared city, and is asked separately). Your step total for the day, so it can fill your crew’s street and the shared city. Shared steps are capped per day and shown only as totals for a crew or for everyone; nobody is ranked.

Health Connect data is used only for features you can see in the game. It is never sold, never used for advertising, and never given to anyone else.

Where it is kept, and for how long

On Cloudflare’s servers, which run the game’s small server at api.inkmile.app for us, sent over an encrypted connection. Daily rows are kept for 60 days and then folded into totals that name no one. A phone’s random number is deleted after 60 days with no counts from it. “Forget me” in Settings deletes every row for your phone and makes a new random number; if your phone is offline, it keeps trying until the server confirms. Deleted rows can remain in Cloudflare’s restore history for up to 7 days before they are gone for good.

Today’s page on the web

The web page at inkmile.app stores your stamp for the day in your own browser. It sets no cookies and keeps no identifier. It may send anonymous counts, each with the page number and which of three things happened (you played it, finished it, or tapped the store link), and nothing that identifies you or your browser. Like every website, your browser’s network address reaches Cloudflare with each request (as your phone’s does when the app sends counts); the server uses it only for a moment to limit abuse, and Inkmile never stores it. If Cloudflare blocks a flood of requests, it may keep the blocked address in its security log for a short time.

Sharing

A card goes where you send it, through your phone’s own share sheet or your browser. The app is not told where it went. Adding your steps to a card is your choice and off by default.

Children

Inkmile is for people aged 16 and over.

Questions and deleting your data

Use “Forget me” in the app’s Settings, or write to hello@inkmile.app.