Privacy Policy

Last updated 10 August 2026 · Project Walnut, published by Strataic Ltd.

Who we are

Project Walnut is an app published by Strataic Ltd (“we”, “us”), company number 15864357, registered in England and Wales at Bee House, 140 Eastern Avenue, Milton, Abingdon, England, OX14 4SB. The data you keep in Walnut lives on your device: we do not hold it and we are not a data controller for it. Under UK data protection law, Strataic Ltd is a data controller only for the limited information associated with operating this website, correspondence you choose to send, and the encrypted relay records that carry shared lists, which we cannot read. General enquiries can be sent through our contact page or to hello@strataic.com; Walnut support is available through our support page or at support@strataic.com.

Our approach

Walnut is designed so that your personal data stays with you. Core records are held on your own device, with protected entries encrypted there. We run no servers that receive your readable app content, and there is no Walnut account, so there is no developer-held copy of your personal database. Apple services may store or relay data only for the specific features you choose to use.

What stays on your device

The following Walnut-owned records are stored locally on your device and are not transmitted to us:

• Your conversations with Walnut, tasks, shopping and to-do lists, notes, diary entries, goals, countdowns, progress check-ins, packing lists, trips, medication history, Body & Mind logs and Walnut location history.
• Walnut’s “memory”, which contains the inspectable facts and source fragments it keeps to be useful to you.

On-device intelligence

Walnut’s assistant (“Ask”) runs on your iPhone. Ask is a local management layer for Walnut: it handles actions, module lookups, source-backed recall and simple summaries from data on your device. Nothing you type into Ask, and nothing Walnut remembers about you, is sent to us or to a Walnut remote assistant service.

When data leaves your device

Services you explicitly enable

Walnut asks for Apple permissions only from setup or feature screens. Calendar, Health, Weather and Location access are handled by Apple’s system permission sheets. You can revoke them in system settings.

Connected helpers

Calendar, Health, Weather and Location are helper features. Their source data remains with Apple services or system frameworks; Walnut shows it beside your Walnut-owned tools and caches only what the feature needs locally.

Optional private iCloud sync

Private iCloud sync is off by default. If you enable it, supported conversations and module records sync through your private iCloud database. Walnut Memory, secret entries, Health summaries, privacy mappings and on-device search indexes remain device-only regardless of this setting. The app explains the scope before you enable it, and the change takes effect after relaunching Walnut.

Apple Health

If you grant access, Walnut reads summaries from Apple Health on your device. Apple Health access is read-only, and the data stays advertising-free and private from Strataic.

Weather

If you use the Weather feature, Walnut uses your approximate location to request a forecast from Apple’s WeatherKit. Weather data is provided by Apple Weather and its data sources; see Apple’s Weather data source attribution. Your location is used only to fetch weather and is not collected by us.

Location history

If you enable Walnut’s Location feature, the app can build a private history of places you have been so it can answer local questions about visits and patterns. That history is stored on your device. It is not uploaded to Strataic, sold, used for advertising or used to track you outside the app.

Calendar

If you grant access, Walnut reads events from your device calendar to show them alongside your day. If you ask Walnut to create a calendar event, it writes that event into Apple Calendar; Apple Calendar remains the source of truth.

Shared lists

When you share a supported shopping list, todo topic or packing list, the content is encrypted on your device before it is relayed through Apple’s CloudKit, in a storage area belonging to the app rather than to your personal iCloud. The relay holds ciphertext rather than the readable list; the encryption key is stored on the creating device and travels only inside the invitation to devices that join. Anyone who receives your invitation link can obtain its key and see the list, so share that link only with people you trust.

Backups you create

If you export a backup, the file is encrypted with a password you choose. The password is never stored and never sent anywhere; only someone with the password can open the file. Backups include your Walnut records, memory and sources, attachments and secret diary entries, which are protected by the backup password. Apple Health data is excluded and re-read from Health after a restore. Shared-space encryption keys also stay out of the portable file by design; the backup preserves reconnection hints so you can re-pair those lists safely.

Portable data exports

Backup, restore, deletion and portable export remain available on both Free and Pro. A portable export is deliberately readable JSON intended for use outside Walnut and can contain sensitive personal information, including records from modules that are currently locked or over a Free limit. Walnut warns you before creating it. Store and share that file with the same care you would give the original information.

Website contact and support forms

If you choose to use one of our website forms, Formspree processes the email address, message and optional details you submit so it can protect the form from abuse, store the submission and deliver it to us. Formspree hosts its service through Amazon Web Services in the United States and states that it uses encryption and Standard Contractual Clauses to safeguard international transfers. You can read Formspree’s privacy policy. Please do not submit passwords, backup files or sensitive Walnut content. You can contact us directly by email instead.

Website hosting

This website is hosted in the United Kingdom by Inventive Hosting, a trading name of Praetorian IT Services Ltd. As with ordinary web hosting, its systems receive the technical information needed to serve and protect the site, which can include your IP address and request or security logs. We use this information only under our legitimate interest in operating a reliable and secure website, never for advertising or to build a profile of you. It is retained only for as long as reasonably required for operation, security and legal obligations. See Inventive Hosting’s privacy policy and GDPR statement.

Privacy-friendly website measurement

The website is prepared to use Plausible Analytics once Walnut’s site-specific tracker is installed. When enabled, Plausible measures aggregate page visits, referral sources, approximate country, browser, operating system and device type, along with four named events: Contact Click, Contact Submitted, Support Click and Support Submitted. No form field, message or Walnut content is sent to Plausible.

Plausible does not use cookies, local storage or persistent identifiers. It does not store IP addresses or full user-agent strings, and its daily measurement cannot recognise the same visitor on another day, device or website. Visitor data is processed and stored in the European Union. See Plausible’s data policy. Because this configuration stores nothing on your device and does not collect personal data, the site does not show an analytics consent banner.

Our privacy commitments

• Advertising-free: your data is never used for advertising.
• Tracking-free app: the Walnut app contains no analytics or tracking SDKs. The website’s optional Plausible measurement is aggregate, cookieless and never receives app or form content.
• Account-free: there is no developer-held profile of you.

Third parties

We use no advertising or data-broker services. The Walnut app may use Apple services you explicitly choose: WeatherKit for forecasts, Calendar, Health and Location Services on your device, and CloudKit for the encrypted shared-list relay. Each operates under Apple’s privacy policy. Where CloudKit relays shared-list data for us, Apple acts as our service provider and stores only ciphertext.

The website uses Inventive Hosting to serve and protect its pages, Formspree only when you submit a contact or support form, and Plausible Analytics for cookieless aggregate measurement once its site-specific tracker is enabled. None of these website providers receives data from the Walnut app.

Retention and deletion

Because your data lives on your device, you control it. You can delete individual items in the app, or use Settings → Reset to wipe user data (or everything). Deleting the app removes its local data from the device. Like most apps, Walnut’s data is also included in your device’s normal iCloud or computer backup, protected by that backup’s own security; cached Apple Health summaries are excluded from those backups.

For shared lists, choosing Delete for everyone removes the list from your device and instructs the other participating devices to delete their copies. Each device then removes its own records from the relay, so a deleted list normally leaves nothing behind there. If a device never comes back online (a lost phone, a deleted app), its record can linger; it is unreadable without the key held on the participants’ devices, and you can email us to have it removed.

Website correspondence is kept only as long as reasonably needed to respond, investigate the matter, meet legal obligations and retain an appropriate record. Formspree may keep an inbox copy until we delete it or the account’s retention limit expires. Hosting logs are kept only according to the operational, security and legal criteria described above. Plausible stores aggregate website measurements according to our Plausible account settings; we can delete that site data.

Your rights under UK data protection law

Walnut’s design means we hold essentially no personal data about you, so most rights under UK GDPR are exercised directly in the app, immediately and without asking anyone:

• Access and portability: your records and current remembered facts are visible in the app. A password-encrypted Walnut backup and a readable portable JSON export are available in Settings → Data & Privacy → Backup, Export & Restore.
• Rectification: edit any record or remembered fact in the app.
• Erasure: delete individual items, reset all user data, or delete the app.

The limited personal data we may actually process, and our lawful bases, are encrypted shared-list relay records that transit CloudKit when you use sharing, correspondence you send by email or through our website forms, and technical hosting logs used to operate and secure this website. The relay records are necessary to perform our contract with you, although we cannot read them. We process correspondence and hosting information under our legitimate interests in answering you and maintaining a secure service. We do not use automated decision-making that produces legal or similarly significant effects. Apple’s services operate under Apple’s safeguards; contact- and support-form submissions may be processed in the United States by Formspree under the safeguards described above. Plausible’s aggregate visitor data remains in the European Union.

If you believe we hold personal data about you, or you want to exercise any right against us directly, email support@strataic.com. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Children

Walnut is not directed at children and does not knowingly collect data from children.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions about privacy? Visit our support page or email support@strataic.com.