Who operates WalkPic
WalkPic is operated by TIMU, LLC. For privacy questions or requests, email walkpic-support@mail.meshagent.com.
This notice covers the WalkPic iPhone beta, its sharing service and this public website. The earlier TestFlight builds have been retired. The current TIMU, LLC public TestFlight beta installs as a separate app. Shared walk links remain supported.
Your private library stays on your iPhone
The app’s private walk journal includes raw route history, timestamped photo references and voice notes, private notes, favorites, check-ins, ratings, reviews and local place/theme details. It is stored locally, with encryption for the app’s journal and saved photo, audio and video copies. Audio recording uses protected incremental staging files before the saved encrypted copy is created. Short videos stay local (up to 5 minutes or 50 MB per clip); optional shared pins contain location only, not the clip. Video walks cannot currently be exported as archives. WalkPic does not automatically upload or back up this private library to its service.
Your original Photos library is managed by iOS and your own Photos/iCloud settings. WalkPic’s local storage does not change how Apple or another service stores your original images.
Publishing is a separate action: you review the route sections, pins and photo copies you want to share. Private journal notes and unselected photo-library content are not part of that publication.
Public and private place visits
A new place visit defaults to Public when you are signed in. The save screen lets you choose Private instead. A Public visit shares the selected place and its location, rating and review through Places and your profile, even without publishing a walk. It does not publish your recording or other private journal content. You can remove your public visit. Existing private and older local visits are not automatically published, and private check-ins are omitted from published walk copies.
Encrypted archives you export
You can intentionally save a recoverable copy through Files. The archive may contain private routes, notes, saved voice notes and selected photo copies. If you use iCloud Drive or another Files provider, it may store that archive under its own terms and your settings.
You choose and keep the archive passphrase. WalkPic’s service cannot recover it. Deleting an app account does not remove archives you exported to another location.
What reaches the WalkPic service
| When you use | Information involved |
|---|---|
| An account | A Sign in with Apple identifier, your verified email address (including an Apple private relay address when supplied), a WalkPic account ID, your username and display name. These support sign-in, your profile and finding people. |
| Email sign-in | Your email address and a one-time sign-in code are sent through MeshAgent's email service. The account retains your verified email for sign-in. The code expires after ten minutes. Code hashes and encrypted challenge data support verification and abuse limits; this expiry is not a promise of immediate deletion from provider logs or backups. |
| A Public place visit | The selected place name, address and precise location, visit time, rating, review and your account identity. These appear in Places and your profile. The save screen offers Private before saving, and owners can remove a Public visit. |
| Publishing | The title, date label, approved route coordinates and pins, selected photo copies, approved story content, check-ins, ratings, reviews and chosen audience. Approved coordinates can reveal precise locations. Removing embedded metadata from a photo does not remove locations shown by its published pin or route. |
| Following and sharing | Follow requests and relationships, blocked accounts and the specific recipients you choose. These support feeds and access controls. This social graph is separate from your phone’s address book. |
| Likes and Explore | Your likes and associated interaction records, used to show engagement and rank public walks. |
| Saved walks | The shared walks you bookmark, linked to your account. Saving does not make a private copy of another person’s photos or extend your access if their sharing changes. |
| Messages | Text you send, shared-walk references, conversation and group membership, invitations, timestamps and account-linked unread markers. These records provide direct and group conversations. |
| Live sharing | Approved route points, timestamps and photo copies selected for the live audience. Update and ended states help viewers understand the connection. Stop blocks further publishing locally; server confirmation can remain pending while offline. |
| Comments and reactions | Your text, reaction, account identity, time and the referenced shared photo or canonical place. Place discussions span walks; they do not publish private visit times, notes or walk identifiers. Photo activity can notify the photo’s owner. |
| Notifications | Device notification registration and account-linked activity references for authorized shared-walk and photo activity. Your notification permissions are controlled by iOS. |
| Reporting or support | Your report text, the referenced walk or profile and an account ID when available. Message reports also contain the selected messages or invitation and related context shown in the report preview. Support correspondence contains the messages and contact details you choose to send. |
These records primarily provide the features you request: account access, publishing, audience controls, social discovery, support and dealing with reported content. Account-linked actions are associated with your WalkPic account.
The current TIMU app requests your name and verified email address through Sign in with Apple. The service uses the verified email to keep your account and shared walks linked across supported sign-in identities. If you email support, the correspondence includes the details you supply through your email service.
Optional AI, place context and route planning
AI narration is optional. Preparing a photo description sends the selected photo preview, its saved location and your caption to OpenAI through WalkPic’s server and MeshAgent. Optional caption suggestions ask you to confirm sending one photo preview, its saved location when available and your caption; you review and explicitly save the suggested text. Voice generation sends the narration text and voice choice. Requests do not send your whole Photos library. Generated text can be inaccurate; review it before saving or sharing.
Prepared descriptions and audio recordings are saved in the service with your account for reuse. They are not end-to-end encrypted. Account deletion removes the associated saved recordings from the primary service database; provider logs and backups have separate lifecycles. Public-walk playback can use recordings associated with that publication under its access rules.
Optional nearby discoveries send stop coordinates to Wikimedia services to retrieve sourced place context. About here is a foreground request for nearby context; it does not run autonomous photo identification while the app records GPS in the background.
Route planning sends the chosen start, finish and stop coordinates, along with route preferences, to WalkPic’s service and its Paris-area walking-routing worker. These coordinates can reveal precise locations. AI route requests also send your written request and selected start/finish place labels to OpenAI through WalkPic’s server and MeshAgent. Suggested search terms and imported CSV or Excel addresses are resolved with Apple Maps for your review. Map points may be adjusted to nearby verified walking connections before a route is calculated. Draft planning and publishing an outing are separate actions. Apple or Google Maps handoff sends the selected route details to the provider you choose.
Optional AI, place lookups and route planning require network access. We do not promise that provider logs or backups are immediately erased; provider retention settings are still being verified. Private journal storage and these explicitly requested online features have different data flows.
Who can see what you share
- Public: people can view the publication without following you.
- Followers: access depends on the current approved following relationship.
- Selected people: access is limited to the selected, currently eligible accounts.
- Unlisted links: a person with a valid link can use and pass on that link.
Restrictions, relationship changes and blocks affect later authorized reads. A person who already received a photo, screenshot, download or forwarded copy may keep it; WalkPic cannot recall copies outside the service.
Messages and reports
Planned outings can include a title, route, meeting instructions, schedule, invited accounts and attendance records, with access governed by the outing’s sharing rules. Messages are stored by WalkPic’s service and shown only through the conversation’s current access rules. A first message may require the recipient to accept a request; group invitations also require acceptance. Sending a shared walk into a chat does not change that walk’s audience.
Connections to the service use HTTPS. Messages are not end-to-end encrypted. Authorized service operators can access service records needed to operate the feature and investigate reports. WalkPic does not use chat messages for AI features.
Your iPhone keeps encrypted outgoing messages and send confirmations while sending or reconciling receipt by the service. Some acknowledged copies can remain in Your outbox until reconciled or removed. You can remove these local copies in Your outbox. Received conversation history is fetched from the service and is not saved in that outbox. “Sent” means the service acknowledged a message; it is not a delivered or read receipt. Removing an outbox copy does not recall a message the service already accepted.
What reporting shares
A message report sends the messages you selected, or the invitation, together with your reason and the associated details displayed in the preview. Review that preview before submitting. It does not send the whole conversation automatically. Submitted evidence is held separately with restricted operator access; blocking someone or deleting your account does not automatically erase that evidence.
Report responses
Supported versions can automatically remove selected message text that matches the service’s text rules from ordinary conversation reads. Only the selected message text is assessed for this action; your reason, images and unselected history do not drive it. A receipt can show the limited action and can be refreshed by the signed-in reporter while the report remains linked to that account. Acknowledgement or removal does not resolve the whole concern. Submitted evidence follows its separate retention period, and copies held by recipients are not recalled. Contact WalkPic support for concerns that remain.
Message and report retention
Conversation records are kept to provide messaging. Leaving a group removes your access; it does not delete the group’s history for its other members. When account deletion is accepted, your authored message text and shared-walk references are removed from ordinary conversation reads. Records needed to preserve conversation order and prevent duplicate operations can remain.
Submitted message-report evidence becomes eligible for cleanup 90 days after submission, unless an operator records a hold with a finite expiry. A hold can extend that period while a case needs review; cleanup runs after the ordinary period and any active hold have expired. Account deletion removes the reporter’s account association from the report record, while the submitted evidence follows this separate retention rule. That does not anonymize the evidence: it may still contain participant names, account identifiers or personal details from the selected messages. These periods describe active service records; provider backups, content-free audit records and deletion retry records have the additional limits described below.
Recipients may keep screenshots or copies. Contact walkpic-support@mail.meshagent.com for questions about a message, report or deletion.
Service providers and website visits
MeshAgent provides the hosting, database and approved-photo storage used by the service, and the existing support mail capability. OpenAI provides optional photo-description and voice generation through MeshAgent. Wikimedia provides optional sourced nearby context. Apple provides Sign in with Apple, system Photos/Files features and Apple Maps. These providers process requests needed for their services under their own terms and privacy practices.
Your selected Files provider and email provider also process transfers you choose to make through them. Their policies and account settings apply.
WalkPic does not include advertising or advertising-tracking features. This website does not set cookies, run analytics scripts or load third-party tracking scripts.
Hosting and network providers may process connection information to deliver and protect the website and app service. Their production logging, backup settings and retention periods are being verified during beta; this notice does not promise that all such records are absent or immediately erased.
Retention and deletion during beta
Account, publication and social records are kept to operate the features while you use them. Removing sharing or deleting an account first restricts service access when the request is accepted. Media and account cleanup then run asynchronously, and unsuccessful cleanup jobs may retry.
Deletion can retain account-deletion markers, retry-prevention records and some operational or report records. Raw account email and linked Apple sign-in identifiers remain while primary cleanup and any required Apple token revocation are pending. After those steps succeed, the service removes these raw identifiers and retains keyed denial markers to prevent deleted credentials from restoring the account. These markers are pseudonymous records, not anonymous data; their retention schedule is not yet finalized.
Public walk and profile reports
Public-walk and profile report reasons are scheduled for removal from the primary service database 30 days after submission. Cleanup runs in batches, so outages or a backlog may delay removal. Report receipts, target references and retry-prevention digests can remain. Digests can derive from submitted text and are not anonymous data. Account cleanup removes the reporter’s account association; a reason awaiting removal may still identify its author.
Unfinished shares
An unfinished share is not publicly visible. Pending publications expire after 24 hours, and cleanup runs automatically with retries. An upload whose outcome is still unknown can keep cleanup pending; expiry is not a guarantee that every uploaded copy has already been erased. Retention for remaining operational records, infrastructure logs and backups is still being verified. We do not promise a fixed cleanup period or immediate deletion from every provider’s backups.
Deletion receipts are being added to newer app versions. Where your app offers a receipt, it can remain on the device after sign-out and show known service cleanup stages. It does not confirm deletion from every provider log or backup. If your app does not offer a receipt, contact WalkPic support for deletion status or details about records that may remain. See account-deletion instructions.
Private walks that remain on your iPhone, original photos, exported archives and copies held by recipients have separate lifecycles. Account deletion does not erase those copies.
Your choices and contact
You control location and Photos permissions in iPhone Settings, choose what to publish, choose an audience and can remove sharing. You can delete your account from the app and separately delete private walks from your local library.
For access, correction, deletion or other privacy questions, contact walkpic-support@mail.meshagent.com. Tell us enough to find your account and understand what you need. We may ask you to confirm that the account is yours. Never send passwords, sign-in codes or archive passphrases.
Updates to this notice will appear here with a new revision date.