Your data, in plain words.

Who we are

For the recordings, photos and notes your team captures, your organisation decides why and how they are used (it is the controller) and Walknote handles them on your instructions (we are the processor). For your account details, such as your name, work email and billing record, Walknote is the controller.

What we collect

• Account details. Your name, work email, organisation name and role. Your password is stored only as a salted hash.
• What you capture. Photos, voice recordings, typed notes, area names, the phone’s time and, if you allow it, location with its accuracy. We also store a fingerprint of every file.
• About the app. The app version and an install id, so we can tell which build made a record.
• Records of use. A log of edits, approvals and share-link opens, and a count of published reports for billing.
• Messages you send us. Whatever you put in a demo request.

Why we use it

• To turn your recordings into a draft report and to keep the evidence behind it.
• To run your account, set up your team and bill you.
• To keep the service secure and to spot misuse.
• To reply to you.

We do not sell personal data. We do not use your recordings or reports to train models.

Who receives it

• Google Cloud. Storage, our database and the processing done by Walknote AI.
• Vercel. Serves this website and the web app.
• An email service. Carries the replies we send you.

A full sub-processor list is part of the data-processing agreement, which is available on request.

Where it goes

Reports, photos and recordings are stored on Google Cloud. To transcribe a clip or draft a sentence, Walknote sends that clip, or the text and a working-size photo, to Google Cloud, where Walknote AI runs. That can happen outside Nigeria and outside Africa, and we do not choose the country.

Under the Nigeria Data Protection Act this is a cross-border transfer. We disclose it here and in your agreement with us. We send area and item names, never client names or phone numbers. More on the security page.

Google says it does not train on customer data without permission (its data-processing terms). It has no data-centre region in Nigeria and no generative-AI region in Africa (its list of regions).

How long we keep it

• Signed reports and the evidence behind them: seven years from approval, or longer if your contract says so.
• The raw voice of people on site: twelve months, unless you keep it. The transcript and the fingerprints stay.
• A legal hold on a visit blocks deletion until it is lifted.
• Account details: until you close the account, then deleted unless the law requires us to keep them.
• Messages to us: only as long as needed to reply.

Your rights

You can ask to see your personal data, correct it, delete it, object to how it is used, or receive a copy. For what a team captured, ask your organisation first; it controls that data. For your account details, send a request through the demo form. If you are not satisfied, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Keeping it safe

Passwords are hashed, sessions use secure cookies, every query is scoped to your organisation, and reports are signed so a change shows. Read the security page for the detail. The law we work to is the Nigeria Data Protection Act 2023 and the Commission’s 2025 directive (the GAID).

People who are recorded

Inspectors are told to avoid faces and children, to avoid ID cards and screens, and to say aloud that they are recording. An occupant’s words are marked as reported by that person. Children are not recorded on purpose, and Walknote is not for children to use.

Before you install the field app

The field app asks to use your camera, your microphone and, if you choose, your location. You can say no to location and still capture a visit. To remove the app, uninstall it from your phone like any other.

Cookies

Essential cookies only: one session cookie that keeps you signed in. There are no advertising or tracking cookies.