Privacy Policy

Last updated: 11 August 2026

Chonky is a walking game for iPhone and Apple Watch made by Russell Ong. This policy explains what the app reads, what it stores, and what leaves your device. The short version: the game runs on your steps, your steps stay on your phone unless you opt into online play, and nothing is sold or shared with advertisers.

Playing without an account

The full local adventure works without any account. In that mode your progress, rewards, and home decorations are stored only on your device and in your personal iCloud device backup. We cannot see them.

Apple Health

• The app requests read-only access to step count and nothing else. It never reads workouts, heart rate, weight, location, or any other Health data, and it never writes to Health.
• Step data is processed on your device to charge attacks and track daily progress.
• If you sign in and take part in competitive features (boss fights that count, Pack rankings, leaderboards), the app submits step totals as plain numbers to our server so results can be verified and shared fairly. A daily cap applies. No other Health information ever leaves your device.

Signing in with Apple

Online features (Packs, leaderboards, friends, home sync) require Sign in with Apple. When you sign in:

• We create a pseudonymous player record. Your raw Apple identifier, email address, and identity tokens are never stored or logged; where the server needs to recognize you, it uses one-way keyed hashes instead.
• We store your player profile (display name, avatar choice), game state you share online (Pack membership, contributions, inventory, home room layouts, friends, gifts), and the security records needed to keep sessions safe.
• Apple's App Attest is used to confirm requests come from a genuine copy of the app on a real device. Attestation material is verified, not kept.

Purchases

Optional purchases are processed by Apple through the App Store. RevenueCat provides purchase validation, entitlement status, and signed delivery events. Apple and RevenueCat may process the product, purchase time, status, storefront, and a pseudonymous app user identifier needed to provide and restore purchases. Chonky never receives your card or other payment details. Our server stores only the product, delivery status, pseudonymous account, and one-way-hashed transaction identifiers needed to prevent duplicate delivery.

Online wallet

If you sign in, Chonky Live stores lifetime Coin and Gem reward totals so server-authoritative rewards—including optional Gem purchases—can be delivered exactly once across devices. Coins remain earned through play. Gems also have free earning paths. Buying Gems is optional and does not change verified steps, rankings, Story progress, or combat power.

Friend invitations

• We store the public referral code, pseudonymous inviter and invitee account identifiers, reservation and claim status, integrity result, reward history, and expiry timestamps needed to complete and protect an invitation.
• The App Clip and full app may use App Attest to verify genuine app requests. Key identifiers are one-way hashed; proofs are verified and not logged.
• If you choose Reserve with Apple, your Apple-backed pseudonymous Chonky identifier is used to find the invitation after you sign in on another device.
• The optional Paste Invite button reads only after you tap it and accepts only a Chonky one-time link. The link is not logged, and unrelated clipboard content is never requested or stored.
• Referral qualification receives only a server-validated “Meet Your Pack completed” event. Raw HealthKit samples, step counts, distances, and timestamps never enter the referral service.

What we do not do

• No advertising and no ad networks.
• No third-party analytics or tracking SDKs.
• No selling, renting, or sharing of personal data.
• No reading of contacts, photos, or location, and no automatic clipboard scanning.

Your data, your controls

• Export: signed-in players can download a portable copy of their online game data from inside the app.
• Deletion: you can delete your account from inside the app. This removes your account and personal game state from our server. Only unlinkable operational records (for example, anonymous audit counters) are retained.
• Deleting the app removes all local game data from your device.

Data security

Server traffic is encrypted with TLS. The database is not reachable from the internet, requests are rate limited and strictly validated, and production secrets and backups are locked down. Where identifiers must be correlated, we use domain-separated keyed hashes rather than raw values.

Children

Chonky does not knowingly collect personal information from children. Playing offline requires no personal information at all. If you believe a child has created an online account without permission, contact us and we will delete it.

Changes

If this policy changes, the new version will be posted here with an updated date. Material changes will be called out in the app.

Contact

Questions about privacy or your data: russellongdev@gmail.com