The short version
Pilgrim is built on a simple principle: your walk is yours alone. We do not collect, store, or transmit your personal data. Everything stays on your device.
Data that stays on your device
The following data is created and stored locally on your iPhone. It never leaves your device unless you explicitly choose to share or export it.
- Walking routes — GPS coordinates recorded during your walks
- Voice recordings — Audio captured when you record thoughts during a walk
- Transcriptions — On-device speech-to-text processing of your voice recordings using WhisperKit (no audio is sent to any server)
- Walk statistics — Distance, duration, steps, elevation, pace
- Intentions and reflections — Text you enter before or after a walk
- Preferences — Your settings and customizations
Data we do not collect
- We do not collect analytics or usage data
- We do not use advertising identifiers
- We do not track your location in the background for any purpose other than recording your active walk
- We do not create user accounts or profiles
- We do not sell, share, or transmit any data to third parties
Third-party services
Pilgrim uses a small number of third-party services that operate independently:
- Apple WeatherKit — When weather information is displayed, your approximate location is sent to Apple's weather service. This is governed by Apple's Privacy Policy.
- Mapbox — Map tiles are loaded from Mapbox's servers when you view maps. Mapbox may receive your IP address and general area to serve map data. This is governed by Mapbox's Privacy Policy.
Share Your Walk
When you choose to share a walk, a temporary web page is created containing the walk data you select (route, stats, voice transcriptions). This page is stored on our servers and is accessible via a unique link. Shared walk pages are ephemeral and will be automatically deleted. Sharing is entirely optional and initiated only by you.
Walk with the collective
When enabled in Settings, the app sends anonymous aggregate totals after each walk: walk count, distance, meditation duration, and talk duration. A random token is included for rate-limiting purposes only and is automatically purged after two hours. No location, personal information, or walk details are included. This data is used solely to display collective statistics on pilgrimapp.org. This setting is off by default.
Data export and deletion
You can export your walk data at any time in the Pilgrim format or as GPX files. You can delete any or all walks from within the app. When deleted, the data is permanently removed from your device.
Children's privacy
Pilgrim does not knowingly collect any personal information. The app does not require an account, and no data is transmitted from the device during normal use.
Changes to this policy
If we make changes to this policy, we will update the date at the top of this page. Because Pilgrim does not collect contact information, we encourage you to review this page periodically.
Contact
If you have questions about this privacy policy, you can reach us at privacy@pilgrimapp.org.