Privacy Policy

Last updated: 3 May 2026

In this Privacy Policy, "we", "us" or "our" means Walkable (walkable.com.au), operated by Sah Kilic. We are committed to respecting your privacy and handling your personal information responsibly.

This Privacy Policy sets out how we collect, use, store and disclose your personal information. It applies to all users of our website and services. By providing personal information to us, or by using our services, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time by publishing changes on our website. We encourage you to check this page periodically.

1. What personal information do we collect?

We may collect the following types of personal information:

• Account information — your email address, and optionally your name and phone number, when you create an account via Clerk (our authentication provider).
• Address and location data — addresses you type into the search bar, addresses you save to your “Saved Places” list, and the geographic coordinates derived from those addresses.
• Search history — up to five of your most recent address searches, stored to make re-searching convenient.
• Starred points of interest — the names, addresses and coordinates of supermarkets, gyms or train stations you have starred within the app.
• Usage preferences — non-identifying preferences such as your chosen travel mode (walking / cycling / driving) and rent display format (weekly / monthly).

We do not collect: payment or financial information; health or sensitive information; government identifiers (e.g. Medicare number, Tax File Number); IP addresses or device fingerprints; or any third-party analytics or advertising data. We do not sell your personal information.

2. How do we collect personal information?

We collect personal information:

• Directly from you — when you register an account, type an address into our search bar, or save a place or point of interest.
• Automatically from your device — preferences (travel mode, rent period) are stored in your browser's local storage when you interact with the service. This data stays on your device unless you are signed in, in which case it is synced to our database.

3. Why do we collect, use and disclose personal information?

We collect and use your personal information to:

• Provide the Walkable service — geocoding your address to show walkability results, nearby shops, gyms and transport.
• Save and sync your preferences, saved places and starred locations across devices (for signed-in users).
• Authenticate your identity and maintain the security of your account.
• Improve and maintain the service — for example, caching recent search results to reduce API calls.
• Comply with legal obligations.

We do not use your personal information for direct marketing, advertising, or to share with data brokers or marketing partners.

4. Disclosure to third parties

To provide our services, we share certain data with the following third-party service providers. Each is subject to their own privacy policy.

Mapbox (USA)

We use Mapbox for address geocoding, map display, address autocomplete and travel-time calculations. When you type an address or interact with the map, your query text and derived coordinates are transmitted to Mapbox servers located in the United States. Mapbox's services are subject to the Mapbox Privacy Policy.

Clerk (USA)

We use Clerk for account creation and authentication. Clerk collects your email address (and optionally name and phone number) and manages your session tokens on servers located in the United States. Clerk's services are subject to the Clerk Privacy Policy.

Supabase (region to be confirmed)

We use Supabase to store your saved places, search history and starred locations. Supabase may store this data on servers outside Australia. Please refer to the Supabase Privacy Policy.

Google (USA) — transit routing only

When you request a detailed transit route (walking + public transport) from a saved place, we send the origin and destination coordinates to the Google Routes API, proxied through our server. No other data is sent to Google. Google's services are subject to the Google Privacy Policy.

Public Transport Victoria (Australia)

For Melbourne addresses, we query the PTV Timetable API with the coordinates of your searched address to display nearby train lines and tram stops. PTV is an agency of the Victorian Government and is subject to the Victorian Information Privacy Act 2000.

Vercel (USA)

Our website is hosted on Vercel. Vercel's infrastructure processes HTTP requests and retains platform-level logs (which may include IP addresses and user-agent strings) for operational purposes. We do not access or use these logs. Vercel's services are subject to the Vercel Privacy Policy.

5. Cross-border disclosure

As described above, some of your personal information is disclosed to recipients located outside Australia, including in the United States (Mapbox, Clerk, Google, Vercel) and potentially other countries (Supabase). Before disclosing personal information to overseas recipients, we take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles, including relying on contractual data-processing arrangements where available.

By using our services, you acknowledge and consent to your personal information being disclosed to these overseas recipients for the purposes described in this Privacy Policy.

6. How do we store and protect your information?

• In-app (browser) — your preferences and recent searches are stored in your browser's local storage on your device and are not encrypted at that layer.
• Cloud database (Supabase) — saved places, search history and starred locations for signed-in users are stored in our Supabase database with encryption at rest. Access requires a valid Clerk authentication token.
• In transit — all communications between your browser and our service, and between our service and third-party APIs, use HTTPS (TLS encryption).
• Authentication — account access is managed by Clerk, which stores hashed credentials and manages session tokens.

Signing out of your account does not automatically clear data stored in your browser's local storage. You can clear this data by clearing your browser's site data.

7. Retention

• Account data (Clerk) — retained until you delete your account.
• Saved places, starred locations, search history — retained in our database until you delete them within the app or request account deletion.
• Search cache — anonymised address lookup results are cached for 7 days and then automatically deleted.
• Vercel platform logs — subject to Vercel's own retention policy.

8. Your rights — access, correction and deletion

Under the Australian Privacy Principles, you have the right to:

• Access your personal information — you can view your saved places, starred locations and search history within the app while signed in.
• Correct your personal information — you can update or remove saved places and starred locations directly in the app. To correct your account details (name, email), use the Clerk account management interface.
• Delete your personal information — you may request deletion of your account and all associated data by emailing us at privacy@walkable.com.au. We are building a self-service account deletion flow and will update this policy when it is available.

We will respond to access and correction requests within a reasonable time. We may ask you to verify your identity before providing access to or correcting your information.

9. Complaints

If you believe we have handled your personal information in a way that is inconsistent with the Australian Privacy Principles, please contact us at privacy@walkable.com.au. We will endeavour to resolve your complaint within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Contact us

For any privacy-related questions, access or correction requests, or complaints, contact us at:

This Privacy Policy was prepared with reference to the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). It does not constitute legal advice. We recommend seeking independent legal advice before making decisions based on this policy.