Legal
Terms of Service
Last updated: 2026-07-09
1. Membership
WalkOn is an invite-only community for circular hospitality and cultural exchange. Membership requires a valid invite from an existing approved member and a successful review by our curation team. Approval is at our sole discretion. Rejected applications are final unless revisited via the support channel.
2. What you agree to
- Provide truthful information about yourself, your home, and your household.
- Treat other members and their homes with care and respect.
- Honour bookings and commitments you make to fellow members.
- Use the platform only for non-commercial cultural exchange and hospitality.
3. What we agree to
- Curate the community in good faith to keep it safe and welcoming.
- Process your data per our Privacy Policy.
- Notify you of material decisions about your account by e-mail.
4. Invites and quotas
Approved members can issue up to 3 invite codes per 6-month rolling window. Codes are valid for 30 days and may not be transferred or sold. Spent or expired codes are not refundable. For how booking and membership refunds work, see our Cancellation & Refund Policy.
5. Termination
You can withdraw your application at any time before approval; your data is then deleted. After approval, account closure goes through support@walkon.app. We may suspend or remove members who violate these Terms or community guidelines, with due notice except where safety requires immediate action.
6. Liability
WalkOn facilitates connections between members; it does not host, transport, or warrant the experiences members exchange. Members are responsible for the agreements they make with each other. Where local law allows, our liability is limited to the fees you have paid us in the 12 months prior to the relevant claim.
7. Changes
We may update these Terms; material changes will be communicated by e-mail at least 14 days before they take effect. Continued use of the platform after that period constitutes acceptance.
8. Contact
Questions about these Terms: support@walkon.app.
Legal
Privacy Policy
Version 2.0.0 · Last updated: 2026-10-30
1. Who we are
WalkOn decides how your personal data is handled: we are the controller under the GDPR and the Brazilian LGPD. As a small organisation without high-risk processing, we have not appointed a data protection officer; write to privacy@walkon.app for anything about your data, including requests from data protection authorities.
2. What we collect, why, and for how long
The account, profile, household, listings, messages, reviews and payments are needed to use WalkOn: without them we cannot admit you or arrange an exchange.
| What we collect | Why | Legal basis | How long |
|---|---|---|---|
| Name, e-mail, date of birth and phone | Sign in, identify you, confirm you are an adult and send account notices | Performance of our contract with you | While your account exists; before approval, “Cancel my application” deletes it at once |
| Profile: city, country, languages, profession, interests, talents, photo and bio | Introduce you to other members | Performance of contract | While your account exists |
| Household: partner, flatmates, children and pets (first name and age range; photos of adults and pets only) | Remember who lives with you and who travels with you; show members how many people live in the home | Performance of contract; for children, entered by you as their parent or guardian, in their best interest | While your account exists; you can remove each person at any time |
| Waitlist: e-mail, reason, city, destinations | Decide who joins the community | Steps taken at your request before a contract | Until the decision and the retention period we are setting |
| Invites: invitee e-mail, code, inviter | Keep membership invite-only and track each member’s quota | Performance of contract | While the invite exists |
| Home listing (address, rules, description, photos, availability) and talent listing (description, city, links, CV) | Show your home or talent and arrange exchanges | Performance of contract | While the listing exists; the full address is shown only to the member you arrange an exchange with |
| Messages and exchange requests | Arrange exchanges between members | Performance of contract | While the conversation and your account exist |
| Assistance animal on a request | Inform the host; it may reveal a disability | Your specific consent, given when you tick the box | While the request exists; unticking it or asking us to delete it withdraws consent |
| Reviews | Reputation within the community | Performance of contract | While your account exists |
| Payments: Stripe identifiers, amounts, billing name and address | Charge the membership and cleaning fee and track credits | Performance of contract; tax records by legal obligation | While your account exists; tax records for the period the law requires |
| Reports and curation decisions | Admit, suspend and handle reports | Legitimate interest: the safety of members who host strangers | While your account exists |
| Audit record of admin actions | Show who did what and answer complaints | Legitimate interest | While you are a member and 1 year after |
| Performance metrics (page, device, load time) | Know whether the site loads fast | Legitimate interest | For the provider’s period; it does not identify you |
3. Who can see what
Other approved members see your profile after you are admitted. Your e-mail, phone and date of birth are never shown to anyone. Of your household, members see only how many adults, children and pets live in the home; names, ages and photos are visible only to you. In an exchange request, the host sees how many guests and pets are coming.
4. Third parties we work with
- Supabase — database, sign-in and file storage (Paris, EU; support from the US and Singapore).
- Vercel — hosting and performance metrics (Paris, EU, and the US).
- Resend — account and notification e-mails (US).
- Stripe — membership and cleaning fee payments (Ireland, EU, and the US). Stripe is also an independent controller for fraud prevention and its own legal obligations.
They process your data on our behalf and follow our instructions.
5. International transfers
Your data is stored in the European Union (Paris), which has an adequacy decision from the Brazilian authority. It reaches the US and Singapore through Vercel, Resend, Stripe and Supabase support, under each provider's data processing agreement. We update this section as standard contractual clauses are added to those agreements.
6. Cookies
We use only the cookies needed to keep you signed in and secure, and to remember your cookie choice. Vercel Speed Insights measures load times without cookies and without identifying you. We do not use advertising trackers.
7. Children
WalkOn is for adults only and children cannot have an account. Members may add their children as household members with a first name and an age range; we do not ask for their photo. Only the member who added them can see this; other members see how many children live in the home. We never use children's data for advertising, profiling or recommendations. As their parent or guardian, you can correct or delete it at any time on your household page or by writing to privacy@walkon.app.
8. Your rights (GDPR/LGPD)
You can ask us, free of charge, to confirm whether we process your data; to access, correct, delete, anonymise or block it; to receive a copy in a portable format; to know who we share it with; and to withdraw consent or object to processing. We do not take decisions about you by automated means only: admission, suspension and moderation are decided by people.
- Withdraw your application at any time before approval — your profile, household details, and review entry are permanently deleted via the “Cancel my application” action on the welcome page.
- Any other request, including a copy of your data or closing your account after approval, by writing to privacy@walkon.app. We answer within 15 days.
If our answer does not solve it, you can complain to the Brazilian data protection authority (ANPD) or, in the European Union and the United Kingdom, to the data protection authority of your country.
9. How we protect your data
Each member can read only their own private data, enforced by database rules that are tested on every change. Private photos are served through links that expire after one hour. Connections are always encrypted, and so are the database and its backups. Curation actions are logged, and only the technical team can access the production database. If an incident may cause you relevant risk or harm, we will tell you and the authority.
10. Changes
When this policy changes, its version and date change. If a new purpose does not match a consent you gave, we will tell you first, and you can withdraw it.
11. Contact
Privacy questions: privacy@walkon.app. General support: support@walkon.app.
By using WalkOn you also agree to ourTerms of Service.