Wanderlings is a step-tracking pet game. I try to collect as little as possible. This document explains what is collected, why, and who, if anyone, sees it. The in-app Settings → App → Data Privacy screen summarizes the same information in plainer language.
Everything you do in camp (your Wanderling, your bag, the village you build, your settings, any notes) is stored locally on your device. Nothing about your gameplay is sent to a server I operate unless you opt into a social feature (see "The Hall of Wanderlings" below).
If you delete the app, this data is deleted with it (except where a backup you've enabled has mirrored it; see "Backup" below).
If you turn on iCloud Backup on iPhone, a copy of your save is mirrored to your private iCloud via Apple's iCloud Key-Value Store. Only you can read it, since the store is scoped to your Apple ID. I do not have access to this data. Apple's privacy terms apply.
On Android, your save is included in the system's Auto Backup by default, which Google ships to your private Google Drive. Only you can read it. Google's privacy terms apply.
You can also export a manual backup file from Settings → Backup. Where that file goes is up to you.
The Hall is an opt-in leaderboard for the oldest, most well-tended Wanderlings. If you opt in, the following data about your Wanderling is sent to my server (hosted on Supabase) so other players can see the rankings:
I do not send your name, email, location, step count, HealthKit / Health Connect data, or any other personal information. There is no profile, no email, no password.
Each install gets an anonymous account managed by Supabase. It is a random identifier that lets the server tell one player from another; it is not linked to you personally. The account lives for the lifetime of this install. Uninstalling the app loses the account.
To support reinstalling and restoring across devices, your save file also includes a private recovery key for your Wanderling. The server stores only a one-way hash of this key. When your save restores (via iCloud, Auto Backup, or a manual backup file), the app uses the key to reclaim your Hall slot under the new anonymous account.
A Wanderling is removed from the Hall in any of these cases:
Once removed, that specific Wanderling cannot rejoin, but a new one you adopt can. Removed rows are retained for record-keeping but no longer appear on the public leaderboard.
You can request deletion of any data tied to your Wanderling at any time by contacting me (see "Contact" below).
Your step count is read from Apple Health on iPhone or Health Connect on Android, with your permission, and stays on your device. It is used to feed your pet and advance gameplay. I do not transmit step or other health data to my server or any third party.
You can revoke health permission at any time:
I use TelemetryDeck to understand how the app is used in aggregate (e.g. how many people complete onboarding, how often pets are fed). TelemetryDeck is designed to be privacy-respecting: events are hashed and aggregated server-side. I do not send your name, email, contacts, location, health data, or device advertising identifiers.
A typical event records: the event name, the app version, the OS version, and an anonymous installation identifier described below.
TelemetryDeck's own privacy information: https://telemetrydeck.com/privacy/.
The app uses two random identifiers, both generated on your device:
Neither identifier is linked to your name, email, Apple ID, Google account, phone number, advertising identifier, or any hardware identifier. I do not engage in tracking as defined by Apple's App Tracking Transparency framework, so you will not see an ATT prompt.
The app is not directed at children under 13 (or the equivalent age in your jurisdiction) and I do not knowingly collect data from children. If you believe a child has provided data through the app, contact me and I will delete it.
To request deletion of data tied to your Wanderling on my server (Hall entries, anonymous account records), contact me at the address below with the date you adopted your current Wanderling and, if you know it, your Wanderling's nickname. I do not have a way to identify you by name or email, so this is the information I need to find the right rows.
I may update this policy as the app evolves. Material changes will be noted in the app or in release notes.
Questions about this policy or data deletion requests: wanderlings@jonguerrera.com