One Foot

Updated October 26, 2026

Privacy Policy

One Foot, developed by Tri Acorn Agents, is designed to track walks without requiring an account or uploading your complete walk history to us.

This policy covers the Android app and this website. Features depend on your installed version. The upcoming 0.2.0-beta.23 Android update includes Daily Activity, walk suggestions, personal step length, voice progress and optional Health Connect sharing, previously tested in the separate One Foot Activity Test app. Older Play versions do not include all these features. Availability depends on Google Play review and delivery. These descriptions do not announce an iPhone release or an Apple Health integration.

What One Foot accesses and creates

When you record a walk, One Foot may access precise location, physical-activity or motion data, and device time. It uses these signals to create route points and calculate distance, steps, active time, pace, elevation, goals, and streaks. The app also stores the goals and settings you select.

Where your walk data is stored

Your complete walk records, routes, goals, and settings are stored locally on your device. One Foot does not require an account or provide a One Foot cloud account or cloud backup. Android system backup is disabled for the app. If you choose Back up now, One Foot creates a portable JSON file at a location you select, including supported Daily Activity and walk-suggestion records in versions that offer those features. You control that file and any copies you make. A storage provider you choose may synchronize your exported file separately.

Optional Daily Activity and walk suggestions

In versions that offer Daily Activity, you can enable phone-step collection separately from recording a walk. It uses physical-activity permission and Google Play services' on-device Recording API without a Google account sign-in. One Foot stores accepted step counts, their observation intervals, coverage, reporting date and time zone, local source identifiers, and your settings on your device. It can use these steps toward a goal only when you choose that goal's all-day step source. Missing readings are not treated as confirmed inactivity, and saved-walk steps are not added to an all-day count a second time.

Walk suggestions require a separate choice. Android activity-recognition signals and available phone-step evidence can identify possible walking intervals in the background. One Foot stores that evidence and your review decisions locally. A suggestion becomes a saved walk only after you review and save it. Suggestions do not record a GPS route. Turning off Daily Activity or suggestions stops their future collection; it does not delete existing history.

Personal step length is calculated locally after at least ten qualifying saved GPS walks, using measured distance and corresponding recorded steps from recent history. It is checked for an update no more than once every 24 hours while the app is open; you can override it with your own value. Daily distance based on step length is an estimate, not GPS-measured distance. Daily totals and suggested or estimated walks are not used to train that calculation.

Optional Health Connect sharing

On supported Android 14 or newer devices, supported One Foot versions can write selected activity to Health Connect by Android. This is an on-device data-sharing service, not a One Foot account or a direct connection to a Google Fit account. Both sharing options start off. In Settings → Share with other apps, choose a type and approve Android's permission request. You can continue using One Foot without enabling either option.

Shared records include Health Connect's app-origin information and record identifiers used to update One Foot's own records without creating duplicate copies. One Foot keeps a local receipt of shared record identifiers, versions and outcomes. It requests write access to exercise sessions, distance and steps only. It does not request read access to other apps' Health Connect data and does not send GPS routes, calories, personal walk titles, goals or streaks through this connector.

Sharing runs while One Foot is open, after an eligible save or when you choose Sync now. It is not a continuous cloud sync. One Foot does not upload these fitness records to a developer-operated server. Other apps, such as Google Fit, MyFitnessPal or Lose It, can read supported data only if you grant them their own Health Connect access. Their data use, retention, source priority, cloud sync and update timing are governed by their settings and policies. A successful One Foot write does not confirm that another app imported it. MyFitnessPal's workout import requires calorie data, which One Foot does not supply.

You can stop either sharing option in One Foot Settings and revoke its write permissions in Android's Health Connect settings. You can also manage other apps' read access and delete shared records there. Stopping sharing keeps copies already written. While saved-walk sharing remains on, deleting a shared walk in One Foot queues removal of that walk's One Foot-owned Health Connect session and distance on the next successful sync; daily-step records are separate. A submitted batch may finish after you stop sharing. One Foot cannot erase copies already imported by another app.

Restoring a One Foot backup stops future Health Connect sharing until you explicitly enable it again; backup files do not carry sharing consent or the sharing receipt ledger. Do not assume clearing or uninstalling One Foot removes Health Connect records or another app's copies. Manage those copies separately, and stop sharing before deleting them if you do not want future writes.

One Foot uses fitness data for the user-facing walking, activity and sharing features described here. It does not sell this data, use it for advertising or lending decisions, or transfer it to data brokers. The One Foot operator does not receive automatic access to your local fitness records. See Google's Health Connect help for device-level controls.

Beta signup and email invitations

If you choose to request beta access, the signup form collects your name, the email address of the Google account you use for Google Play, and your confirmation that you are 18 or older, have an Android phone with Google Play in the United States, Canada or Mexico, and want emails about your beta request and testing. You may also provide optional details such as your phone, walking frequency and how you found One Foot. These voluntary signup records are separate from the walk data stored in the app.

Google Forms collects signup responses, and Google Sheets stores the private beta roster. Google Apps Script and Google's email service support request acknowledgments and invitations when the email automation is enabled. Operator records include the submitted details, permission confirmation, request time, review and Play-access status, email-attempt status and time, stop-email flags and relevant support notes. One Foot uses these records to review requests, arrange beta access, send beta-related instructions and respond to feedback. They are not a public tester directory or consent to unrelated marketing.

After reviewing a request, the operator separately adds the selected Google account email to Google Play's tester eligibility list. Submitting the form does not itself enable access or enroll you; you choose whether to join through the invitation link. Signup and invitation processing does not automatically upload your walks, routes or app backups. Only the One Foot operator authorizes the email automation; applicants are not asked to grant it access to their inbox, Drive files or spreadsheets. Never send passwords or account recovery codes.

There is no automatic deletion schedule for the beta roster. To request a correction or deletion of your signup information, or to stop beta emails, contact onefootapp@gmail.com. These requests are handled by the operator; stopping emails is separate from leaving Google Play testing or deleting the app's on-device walk data.

Voluntary beta feedback

If you submit the beta feedback form, Google Forms stores the name or email you provide, your report or check-in, and any optional phone details, screenshot link or survey answers. The form does not automatically collect your signed-in Google account email or share a results summary with respondents. The One Foot team uses this information to investigate issues, improve the app and follow up. Please crop or blur private locations and details before sharing screenshots; do not send passwords, medical information or complete walk backups. You can request correction or deletion of your feedback at onefootapp@gmail.com.

Limited network processing

Optional voice progress uses an installed offline English voice on your phone to announce recorded-walk totals. It does not request microphone access, record audio, send spoken content to a speech server or automatically download a voice. Google Play update checks use device and app-version metadata to check update availability; One Foot does not send walk routes, steps, goals or streaks through the update API. Update downloads and installation are handled by Google Play. See Google's Play update data disclosure.

One Foot uses Google Maps to display maps. The map can be centered on your current location or a saved route. Map requests can disclose latitude and longitude coordinates to Google. Google may also infer approximate location from your device's IP address, independently of Android location permission. Maps request data may be retained to operate, improve and protect Google's services. Google's documented Maps processing includes network addresses, device and operating-system information, a pseudonymous SDK identifier, crash reports, technical diagnostics, and map interactions such as camera pan and zoom. Google uses this information to operate and improve its services under the Google Privacy Policy. See also Google's Maps SDK data disclosure. Complete walk records and fitness totals are not uploaded to One Foot by map display.

What One Foot does not do

Permissions and your choices

Location and activity or motion permissions are used for walking features. You may deny or revoke permissions in your device settings, but the corresponding tracking may not function. Notifications and foreground-service controls may be used to keep an active Android walk visible and reliable. Optional Daily Activity and walk suggestions can use motion evidence while the app is in the background; they do not start a GPS-recorded walk for you. Health Connect write permissions are separate from motion collection and from any other app's read permissions. You decide whether to create or import a backup. Declining sharing does not prevent recording, saving or viewing your original walk.

Retention and deletion

Older app versions may have sent optional service requests through One Foot's Google Cloud infrastructure. Removing a feature does not erase existing request or audit logs. Those records can include network address, user agent, request URL, status and latency; application logging is designed to omit coordinates. As checked October 3, 2026, the operational log bucket retained records for 30 days and the separate required audit bucket for 400 days. These settings do not establish one retention period for all data held by Google.

Completed walks remain in One Foot history until you delete them, clear the app’s data, or uninstall the app. One Foot does not currently offer a setting to automatically delete walk data after a chosen period. Deleting an individual completed walk removes it from History and briefly offers Undo. When Undo ends, One Foot attempts to remove its private detail while keeping a minimal local marker so an old backup cannot silently restore it. An older on-device migration recovery copy and backup files saved outside the app may still contain the walk, so deleting it in the app is not secure erasure. One Foot cannot delete external backup files; remove those with your device’s file manager or storage provider.

Recorded Daily Activity facts, goal-source choices, step-length settings and walk-suggestion decisions stay in local app storage until that data is removed. Turning a feature off keeps its existing records. Temporary native walk-detection event evidence is pruned periodically to the most recent thirty reporting dates; that limit does not automatically delete saved walks or recorded daily totals. Health Connect records, its own data-management settings and recipient-app copies are separate from One Foot's local history and backups.

Website visitors

The website is hosted on Cloudflare. Its homepage uses Cloudflare Web Analytics for website usage and performance information and loads fonts from Google Fonts. These browser requests disclose technical information such as network address and request headers to the relevant provider; they do not automatically upload your app's walk history or Health Connect data. The privacy page does not include the homepage's analytics script. Hosting still processes requests to deliver this page. See the Cloudflare Privacy Policy and Google Fonts privacy information. Signup and feedback links lead to the separate Google Forms described above.

Security

One Foot limits collection, keeps complete walk history local, uses HTTPS for supported network features, and keeps paid service credentials out of the mobile app. No method of storage or transmission is completely secure, so keep your device and exported backups protected.

Adult audience

One Foot is intended for adults aged 18 and older. It is not directed to children, and it does not provide an account or cloud profile.

Health and medical use

One Foot is intended for general wellness and activity tracking. It is not a medical device and does not provide medical advice, diagnosis, or treatment.

Changes to this policy

We may update this policy as One Foot changes. We will revise the effective date on this page, and material changes will be disclosed through the app or its store listing when appropriate.

Contact

Questions or privacy requests: onefootapp@gmail.com