Lost Theory LostTheory Back to Home

Privacy Policy

All Lost Theory apps

Effective September 18, 2026

Introduction

Lost Theory ("we," "us," or "our"), located in La Jolla, California, operates the Lost Theory family of walking apps (each an "App," together the "Apps"). This Privacy Policy describes how we collect, use, and protect your information when you use any of them.

We are committed to protecting your privacy and ensuring transparency about our data practices. Every Lost Theory app is built on the same privacy-first design: your personal data stays on your device, and we collect as little information as possible.

Apps Covered by This Policy

This policy applies to every app published by Lost Theory LLC, including those released after the effective date above:

  • Sacred Steps: The Temple Path — the Ohenro, Japan’s 88-temple Shikoku pilgrimage
  • Nature Steps: The Pacific Crest Trail
  • Sacred Steps: The Camino
  • Nature Steps: The Appalachian Trail
  • Sacred Steps: The Road to Rome — the Via Francigena, Canterbury to Rome

All of our apps share the same codebase for step tracking, storage and syncing, so the practices described below are identical across them. Where a feature exists in only some apps, it is noted in that section.

Information We Collect

Health and Fitness Data

Our Apps use Apple HealthKit to read your step count and walking distance data. This data is used solely to track your progress along the route inside the App. HealthKit access is read-only for all health data. The one exception is the Apple Watch app in Sacred Steps: The Temple Path, which must request workout permission in order to stream live heart rate during a meditation session. Apple’s frameworks require that permission to read heart rate in real time. The workout session is discarded when the meditation ends, and no workout, heart rate value, or any other record is ever saved to your Health app.

Your HealthKit data never leaves your device without your explicit consent. We do not store, transmit, or have access to your health data on any server.

  • Step count data is read from HealthKit to calculate your distance along the App’s route.
  • Walking distance data may be read to provide accurate progress tracking.
  • All health data processing occurs entirely on your device.
  • We do not use HealthKit data for advertising, marketing, or any purpose other than providing core App functionality.
  • HealthKit data is never shared with third parties under any circumstances.

Heart Rate — Only If You Turn It On

Where an App offers the optional Heart Rate feature, enabling it asks separately to read your resting heart rate and your walking heart-rate average. That request is made at the moment you switch the feature on, never during onboarding, so if you do not want it you are never asked. It is used to show you your own trends and to award a personal-progress badge.

  • Heart rate data is read from HealthKit and processed entirely on your device.
  • It is never transmitted to us, and it is never included in walking group data.
  • You can revoke this permission at any time in Settings > Health > Data Access & Devices without affecting the rest of the App.

Journey Progress Data

Each App stores your progress locally on your device. Depending on the App, this includes:

  • Current stage and waypoint progress along the route
  • Unlocked content, daily readings, and collections: temple stamps, town stamps, or recorded species
  • Daily activity streaks and achievement history
  • Hydration tracking data (if enabled)
  • Field Journal records of species you have encountered (Nature Steps apps)
  • Journey mode and display preferences
  • App settings and preferences

No Account Required

Our Apps do not require you to create an account, provide an email address, or submit any personal identifying information. You can walk an entire route without sharing any personal data with us.

iCloud Sync (CloudKit)

If you choose to enable iCloud sync, your progress data is synced across your devices using Apple’s CloudKit service. This feature is entirely optional and works the same way in every App.

  • CloudKit data is protected by Apple's end-to-end encryption.
  • Synced data is stored in your personal iCloud account, which only you control.
  • We do not have access to your CloudKit data. Apple’s infrastructure ensures that only you can read your synced progress.
  • You can disable iCloud sync at any time through your device's Settings.

Third-Party Analytics and Tracking

No Lost Theory app uses third-party analytics, tracking, or advertising frameworks. We do not collect usage statistics, behavioral data, or device fingerprints.

We do not integrate with any third-party services that collect or process user data, including but not limited to:

  • No Google Analytics, Firebase Analytics, or similar analytics platforms
  • No Facebook SDK, advertising identifiers, or social media trackers
  • No crash reporting services that transmit personal information
  • No third-party data brokers or data enrichment services

Data Sharing and Sale

We do not sell, rent, lease, or trade your personal information to any third party, for any reason, under any circumstances. This includes:

  • We do not sell your data to advertisers or data brokers.
  • We do not share your data with third-party marketing companies.
  • We do not monetize your personal information in any way.
  • We do not provide your data to any government entity except as required by law.

Data Storage and Security

Your data is stored using the following mechanisms:

  • On-Device Storage: All journey progress and settings are stored locally on your device using Apple's Core Data and SwiftData frameworks, protected by your device's built-in encryption.
  • iCloud (Optional): If enabled, progress data is synced via Apple CloudKit with end-to-end encryption. We have no access to this data.
  • HealthKit: Step and distance data remains within Apple's HealthKit sandbox and is never exported from your device by the App.

We rely on Apple's platform security features, including hardware encryption, secure enclave, and App Sandbox, to protect your data at rest and in transit.

Data Retention

Because all data is stored locally on your device (and optionally in your personal iCloud account), data retention is entirely under your control. Your data persists as long as the App is installed on your device or until you choose to delete it.

Data Deletion

You have full control over your data and can delete it at any time:

  • Delete App Data: Uninstalling an App from your device removes all of that App’s locally stored progress, settings, and cached data.
  • Delete iCloud Data: To remove synced data from iCloud, go to your device's Settings > [Your Name] > iCloud > Manage Storage, and delete the data for that App. Alternatively, use the factory reset option within the App's settings to clear all iCloud-synced data.
  • Revoke HealthKit Access: To revoke the App's access to HealthKit, go to Settings > Health > Data Access & Devices, select the App, and toggle off all permissions.

If you need assistance with data deletion, please contact us at support@losttheory.app and we will provide guidance.

Children's Privacy

Our Apps are not directed at children under the age of 13. We do not knowingly collect personal information from children. Because the Apps do not require account creation and do not collect personal data, there is minimal risk of inadvertent collection of children's data.

Notifications

If you grant notification permissions, an App may send local push notifications for arrivals, milestones, and walking reminders. These notifications are generated entirely on your device and are not sent through any external server. You can manage or disable notifications at any time through your device's Settings or from within the App’s own settings.

Walking Groups

Walking groups are available in Sacred Steps: The Temple Path and Sacred Steps: The Camino. They are entirely optional, and every other feature works without ever creating or joining one. If you do join a group, the App stores the following in Apple's CloudKit public database, where it is visible to other users of the App:

  • Your display name
  • Your avatar: either an in-app illustration or, if you choose one, a photo
  • Your step totals for today, this week, this month, and since joining the group
  • Your current stage, your progress within it, and which route you are walking
  • The badges you have earned
  • Encouragement messages you send, and counts of those sent and received
  • The date you joined and the date you were last active

Please treat your display name and avatar as public. If you select a photo as your avatar, that photo is uploaded to the public database and can be seen by other users of the App. Use a nickname and an in-app illustration if you would rather not be identifiable.

Heart rate data, hydration data, and anything else read from HealthKit are never included in walking group data.

This data is transmitted and stored entirely through Apple's CloudKit infrastructure. We do not operate any separate servers for walking group data. Apple's CloudKit is governed by Apple's Privacy Policy.

Participation in walking groups is entirely optional. You can leave any group at any time, which removes your data from that group's shared view. To delete all walking group data associated with your account, you can leave all groups within the App or contact us at support@losttheory.app for assistance.

Changes to This Privacy Policy

On September 5, 2026 this policy was broadened from a single app to cover every Lost Theory app. On September 18, 2026 it was updated again to describe the optional Heart Rate feature, to record that walking groups are now available in Sacred Steps: The Camino as well as Sacred Steps: The Temple Path, and to list in full the data a walking group publishes to Apple’s public CloudKit database, including avatar photos and step totals. The underlying design has not changed: no accounts, no analytics, and nothing sent to our servers. We may update this Privacy Policy from time to time to reflect changes in the Apps or applicable laws. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you through the App. We encourage you to review this Privacy Policy periodically.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you (in our case, we hold none on our servers)
  • Request correction or deletion of your data
  • Object to or restrict certain data processing activities
  • Data portability

Because our Apps store all data locally on your device and does not maintain any user data on our servers, you already have complete access to and control over your information.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. We wish to inform you that:

  • We do not sell personal information.
  • We do not collect personal information beyond what is stored locally on your device.
  • We do not share personal information with third parties for their direct marketing purposes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Lost Theory
La Jolla, CA
Email: support@losttheory.app