Last updated: September 17, 2026
Promenade is a personal walking journal. Your privacy is simple to explain: everything you record stays on your device.
Nothing. Promenade has no servers of its own, no accounts to create, no analytics, and no advertising or tracking of any kind. Your walks, photos, notes, routes, and stamps are stored in the app's local database on your iPhone, and nothing is ever sent to the developer. One thing reaches Apple rather than the developer: drawing maps, explained under Maps and place names. Promenade does not copy your journal to iCloud.
With your permission, Promenade uses your location to record walk routes, to show your own walks on a map in your journal, and to work out which of the app's suggested walks are near you. Your routes are stored only on your device. They are never uploaded, and no one — including the developer — can see where you have walked. Finding walks near you happens entirely on your device: your location is compared against the walks already built into the app, and is never sent anywhere.
Promenade shows maps using Apple Maps, part of iOS. Like any app that displays a map, this means some information reaches Apple in order to draw it:
These requests are handled by Apple Maps, not by Promenade. Apple states that Maps requests are not associated with your Apple ID, and Promenade receives nothing back about you. Your walks, photos, notes, and recorded routes are never included in them, and Promenade has no server of its own to send anything to. Apple explains its own handling in the Apple Privacy Policy.
With your permission, Promenade can read walking workouts from Apple Health to import them into your journal, and can save walks you record back to Apple Health. Health data is used only inside the app on your device and is never transmitted or shared.
With your permission, Promenade uses your iPhone's motion sensor to count the steps you take during a walk you record. The step count is saved with that walk on your device and is never sent anywhere. If you decline, everything else about recording a walk still works — the step count is simply left blank for you to fill in yourself.
Promenade lets you attach photos from your library to your walks. Choosing them uses Apple's own photo picker, which hands Promenade only the pictures you pick — the app sees nothing else, and no permission is needed for this.
Separately, if you choose "From my photos" when logging a walk, Promenade asks permission to look through your photo library and suggest walks you may have taken. It reads only when and where each photo was taken, groups photos that were taken near each other around the same time, and shows you those as suggestions. Nothing is added to your journal until you pick one, and only then are the pictures themselves read. Screenshots are skipped. This all happens on your device — your photos and their locations are never uploaded, and Promenade has no server to send them to. You can decline, and everything else about logging a walk still works; you can also change your mind later in Settings.
Photos you add to a walk (and their embedded location, when present, to place walks on the map) stay on your device.
If you share a postcard or keepsake book, you choose exactly what is shared and with whom through the standard iOS share sheet. Promenade itself sends nothing.
Settings offers a backup file containing your whole journal — walks, photos, notes, routes, stamps, keepsakes, and which suggested walks you've bookmarked. It is written only when you ask for it, and you choose where it goes through the standard iOS share sheet: saved to Files, kept in iCloud Drive, or sent to another device. Promenade does not upload it anywhere and keeps no copy beyond the one on your device.
The file is readable by anyone who has it, so treat it like the journal itself — keep it somewhere you're comfortable with. Restoring from a backup only adds walks that aren't already in the app; it never deletes anything you've written since.
Deleting a walk removes it from the app. Deleting the app removes all app data from your device. Health permissions can be managed at any time in the iOS Health app, and location, photo, and motion permissions in Settings.
Promenade does not collect personal information from anyone, including children.
If a future version of Promenade changes how data is handled, this policy will be updated first and the change will be noted in the app's release notes.
Questions? Email strollwithpromenade@gmail.com.