Last updated DD MONTH 2026
Walkover is an app for site inspectors. You photograph a defect, say what is wrong with it, and the app produces a branded PDF report for your client. This page explains what that involves for the information you and your clients put into it.
The controller of that information is LEGAL ENTITY NAME, REGISTERED ADDRESS. You can reach us at privacy@walkover.dev.
| What | Why we have it |
|---|---|
| Your account — an anonymous identifier from Sign in with Apple, your name, and your email address | So the app knows which jobs are yours. Apple gives us the name only the first time you sign in. If you chose Hide My Email, the address we hold is Apple's relay address and not your real one. |
| Your firm's details — trading name, professional title, phone, email, logo | These are printed on the cover of every report. They exist to be shown to your clients. |
| Your jobs — property address, client name, references and notes | This is the work itself. Some of it is information about your client rather than about you; see Your clients' information below. |
| Defects and photographs — room, element, description, priority, and the images you take | The content of the report. Photographs are of buildings, but a photograph of a building can incidentally contain a person or a vehicle. |
| Voice note transcripts — the text of what you said | Used to draft the wording of a defect. See AI drafting — this is the only part of the app that sends anything to a third-party model, and it is off until you turn it on. |
| Generated reports — the finished PDFs | Kept so you can send them again, and because the archive is most of what you are paying for. |
| Subscription status — which plan, from which store, when it renews, and Apple's transaction identifier | To know whether your subscription is active. We never see your card. Apple handles the payment and tells us only whether it succeeded. |
| Technical records — a request identifier, timestamps, and error logs | To find out what went wrong when you tell us something went wrong. The identifier is the code shown on an error screen. |
We do not use advertising identifiers, we do not track you across other apps or websites, and we do not sell or share your information for advertising. There is no analytics SDK in the app.
When you hold the shutter and speak, the app asks your iPhone to turn the audio into text on the device itself. The recording is never uploaded to us. Only the resulting text is, and only if you have turned on AI drafting.
One honest exception: if your iPhone cannot transcribe offline — an older device, or a language it has not downloaded — iOS falls back to Apple's speech recognition service, and in that case the audio is processed by Apple under Apple's privacy policy rather than by us. We still never receive it.
Walkover can turn a spoken remark into the wording of a professional defect entry. To do that it sends the transcript, and the room and floor you are working in, to Anthropic, PBC, who run the model. Nothing else goes with it: not your photographs, not the property address, not your client's name, not your account.
These are the only companies involved, and each does one job:
| Who | What for |
|---|---|
| Apple | Sign in, subscriptions and payment, and speech recognition in the fallback case above. |
| Anthropic, PBC | The drafting model, if you have turned it on. |
| Cloudflare, Inc. | Storage of photographs and generated PDFs. |
| DATABASE PROVIDER | The database holding your jobs and defects. |
| HOSTING PROVIDER | Running the service itself. |
Each is bound by a contract to process this information only on our instructions. Some of them operate outside the UK and the EEA; where that happens, transfers rely on STANDARD CONTRACTUAL CLAUSES / UK ADDENDUM / ADEQUACY — CONFIRM PER PROVIDER.
A report contains an address, often a client's name, and photographs of somebody's property. That information is about your client, not about you.
For it, you are the controller and we are your processor: we hold it because you asked us to, we use it only to produce your reports, and we delete it when you tell us to. Telling your clients that you use a tool like this, and having a lawful basis for photographing their property, is your responsibility as the surveyor — the same as it was with a camera and a laptop.
Settings → Delete account. This is not a deactivation. It removes your account, your firm's details, every job, defect, photograph and report, including the image and PDF files themselves, not only the records pointing at them. It cannot be undone, and signing in again afterwards starts an empty account rather than restoring the old one.
Export what you want to keep first — every report you have generated can be shared as a PDF from the app before you delete.
Cancelling your subscription is separate and is done through Apple, in Settings → your name → Subscriptions on your iPhone. Deleting your account here does not cancel an Apple subscription, and cancelling an Apple subscription does not delete your account.
Under the UK GDPR and the EU GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable form. Deletion is built into the app; for anything else, write to privacy@walkover.dev and we will answer within one month.
We rely on your consent for AI drafting, and on the necessity of performing our contract with you for everything else. Withdrawing consent for drafting does not affect the rest of the app.
If you think we have handled something badly, please tell us first, but you are entitled to complain to the Information Commissioner's Office in the UK, or to your national supervisory authority in the EEA, without asking us at all.
Everything travels over HTTPS. Photographs are uploaded from your phone straight to storage using a signed link that expires; they do not pass through our application. Sessions expire after fifteen minutes and are renewed with a token that is replaced on every use, so a stolen one stops working as soon as the real device asks for the next.
No system is perfect. If we ever lose control of information in a way that puts you at risk, we will tell you and the regulator within the time the law allows.
Walkover is a tool for working tradespeople and is not directed at children. We do not knowingly collect information from anyone under 16.
If we change this policy in a way that matters — a new recipient, a new purpose — we will say so in the app before it takes effect, and for the AI drafting consent we will ask again rather than assume the old answer still stands.