Privacy
Wildra is built so that I can’t see what you do. Not as a policy — as a design.
Your walks
Everything you put into Wildra — trips, gear, food, photographs, notes, routes — lives on your device. If you’re a member, it also syncs through your own iCloud account, using Apple’s CloudKit private database. That’s your iCloud, not my server. I have no access to it, no way to read it, and no copy of it. If you stop using Wildra, nothing of yours is left behind with me, because there was never anything with me.
What leaves your phone
Six things on their own. Everything else is a button.
Weather
To show a forecast, Wildra sends the coordinates of your route to a weather service — Open-Meteo, or Apple Weather if you choose it. They see a location and a date. They don’t see who asked, and neither service is told anything about you.
Maps
Wildra draws its own map, from OpenStreetMap data served as Protomaps tiles, with hill shading from Mapterhorn. Looking at a place means asking for the squares of ground around it, so whoever serves those tiles sees which squares were asked for. The two older views — your past walks and your plans — are still Apple’s map, so Apple sees those requests instead. Nothing in either case says who asked, and no request carries a trip, a name or an account.
Searching for a place
Type a place name and those words go to LocationIQ, who send back the coordinates. They see what you typed. They are told nothing about you, and nothing about the walk it was for.
Scanning a barcode
Scanning food sends the number off the packet to Open Food Facts, and nothing else — no account, no device, no walk. It only happens when you scan.
Sync
Your records travel to your own iCloud and back. Apple carries them; Apple doesn’t read them.
Crashes
If Wildra falls over and you’ve allowed Apple to share crash reports, Apple sends me a technical report about what broke. It says nothing about you and contains nothing you put into the app. You control this in your iPhone’s privacy settings.
What you can send yourself
Wildra never moves your things. You can.
A pack list can be published: Wildra makes a copy of that one list at a web address anybody with the link can open. It is the only part of Wildra that ever sits outside your own iCloud, it only happens when you press the button, and you can take it down again whenever you like.
What a published list holds: the walk’s name, what is in the pack, what each thing weighs, the categories, and the total. What it doesn’t: your name, your photographs, your notes, what anything cost, who is carrying what, and where you are going.
Taking it down removes the copy. It cannot remove a link somebody has already saved or a screenshot somebody has already taken — that is true of anything published anywhere, and worth knowing before you press it.
A weight you measured
Most makers publish a weight and most of them are optimistic — a tent’s figure is often its fly, a pack’s is often without its belt. So Wildra lets you send what your own scales say, and shows the middle number of everyone who has weighed a thing rather than what its maker claims.
What goes with it: which catalogue item, the number of grams, and the date. What doesn’t: your name, your account, your device, or anything else at all. Two people who weigh the same tent cannot be told apart, including by me. You can withdraw a weighing and it is deleted.
Gear the catalogue doesn’t have
If you add something Wildra has never heard of, it asks — once — whether to send the name, the brand, the category and the weight so other walkers find it too. Nothing about you goes with it. A person reads every one before it reaches the catalogue, and most are not kept, because a catalogue needs the name a maker uses rather than the one you and I would write.
Something you looked for and couldn’t find
When a search finds nothing, Wildra offers a line saying so. Pressing it sends the words you typed and nothing else. It could have logged every failed search quietly and it deliberately does not: something leaving your phone that you did not agree to would contradict the sentence at the top of this page, however small it is.
All three of these are how the catalogue gets better, and all three are yours to refuse. Refusing costs you nothing — the app works exactly the same.
What never leaves
Your location while you’re walking is used on the device and sent nowhere. Your photographs are yours — Wildra reads the ones you choose and keeps a copy in your own storage. If you add someone to a walk from Contacts, the search happens on your phone; your address book isn’t uploaded anywhere.
Payments
Membership is handled entirely by Apple. I never see your card, your name or your address — only whether an anonymous subscription is active.
The one thing I do hold
If you joined the email list, I have your email address and nothing else. It’s used for two emails: one when Wildra reaches the App Store, one before the founding price closes. Then the list is deleted. You can unsubscribe from any email, or write to me and I’ll remove you the same day.
The list is held by Buttondown, whose servers are in the United States. They send the emails on my behalf and hold nothing about you beyond the address you gave.
The website
No advertising trackers, no cookies, no third-party scripts watching what you read. The site is hosted by Cloudflare, who count visits and hold the usual server logs — including IP addresses — for a short time. That’s the whole extent of it.
Children
Wildra isn’t aimed at children and I don’t knowingly collect anything from anyone under 16.
Your rights
Under Australian privacy law you can ask what I hold about you, ask for it to be corrected, or ask for it to be deleted. Since the only thing I could possibly hold is an email address, that’s a short conversation — but write to hello@wildra.com.au and I’ll answer.
Changes
If this page changes, the date below changes with it. If a change ever meant Wildra collected something new, you’d be told in the app, not quietly here.
Contact
Last updated: 27 August 2026