Privacy Policy

Lunka · Effective 28 August 2026

Lunka is a walking app for small private circles. It has no public profiles, no follower requests, no advertising and no tracking. This policy describes exactly what the app collects, why, and how to get rid of it.

Who is responsible

Lunka is run as a Swedish sole trader business (enskild firma). The data controller is Oliver Harburt. For any question about your data, or to exercise any right described below, write to oliverharburt@gmail.com.

What Lunka collects

DataWhyLegal basis
NameSo the people in your circle can recognise youContract
Email addressSign-in, via Apple or a one-time email linkContract
Account identifierTies your walks and circles to youContract
Steps, distance and floors from Apple HealthYour day, your goal and your streakExplicit consent (Art. 9(2)(a))
Walk routes (GPS)Recording a walk and drawing it back to youContract
Photos you attach to a walkShown on that walk in your circleConsent
Text you writeInvite notes, route names, circle namesContract
Push tokenDelivering the notifications you switched onConsent

Health and fitness data is never used for advertising, marketing or profiling, and is never sold or shared with data brokers. Apple's App Store rules require this, and so does this policy.

Your location

Location is read only while you are recording a walk, and only to draw the route and count the distance. Two settings, both in the app under Who sees you, control what leaves your phone:

When Lunka generates a suggested route, only your starting point — and for a one-way route the destination — is sent to the routing service. Your recorded track is never sent there.

Who can see your walks

Only the people in a circle you joined. Lunka is invite-only: there are no public profiles, no search, and no way for a stranger to find you. This cannot be switched to public, because the feature does not exist.

Services Lunka uses

Lunka contains no advertising SDKs and no analytics SDKs. It relies on these providers:

ProviderPurposeWhat it receives
SupabaseAccounts, database, file storageEverything in the table above
AppleSign in with Apple, push notificationsSign-in identifier, push token
MapTilerMap tilesWhich map areas your device requests
OpenRouteServiceGenerating walking routesStart point (and destination for one-way routes)
Open-MeteoWeather windowsApproximate coordinates
OpenStreetMap / OverpassNearby parks, water and pathsApproximate coordinates

Lunka's database and uploaded files are hosted by Supabase on Amazon Web Services in Stockholm, Sweden (eu-north-1) — inside the EU/EEA. Push notifications are delivered through Apple, which may process the device token outside the EU under its own terms; no walk, health or location data is included in a notification.

How long it is kept

Your walks, routes and circle membership are kept until you delete them or delete your account. Deleting your account removes your profile, your walks, your saved routes, your photos, your invitations and your circle memberships. This is a real deletion, not a flag — Lunka has no "deactivated" state that keeps your data.

Deleting your account

In the app: Settings → Delete account. It takes effect immediately and cannot be undone. You can also write to oliverharburt@gmail.com and ask.

Your rights

Under the GDPR you may request access to your data, correction of it, deletion of it, a portable copy of it, or restriction of how it is used, and you may withdraw consent at any time. Write to oliverharburt@gmail.com. If you believe your data has been mishandled you may complain to your national supervisory authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).

Children

Lunka is not directed at children under 13, and accounts are not knowingly created for them.

Changes

If this policy changes in a way that affects what is collected or who receives it, the app will say so before the change takes effect.