Privacy Policy

Effective 12 October 2026

This policy explains what happens to personal data when you use Worn In, the iPhone app that tracks the wear of your shoes from your Apple Health workouts, and when you visit this website, wornin.app.

Who is responsible

The data controller is Pio Della Sala, an individual developer based in Italy, who publishes Worn In. In this policy “we” and “us” mean him.

The short version

1. Worn In has no account and no server of its own: your shoes, your workouts and your photos never reach us.
2. What the app stores stays on your iPhone and, when iCloud is on, in your own private iCloud, which we cannot access.
3. Apple Health is read-only and limited to your workouts and their distance; that data is never used for advertising, never shared and never sent to us.
4. There are no ads, no analytics and no trackers, in the app or on this website.
5. We receive only what you decide to send us, such as an email to support.

What the app handles, and where it stays

Your shoes

For each pair you add, Worn In stores its brand, model, style code, shoe type, nickname, the date you added it, size and fit, photo, the dates and activities you used it for, its expected lifespan, any earlier distance you type in by hand, and whether and when you retired it.

This is stored on your iPhone. When iCloud is on, it is also stored in your private iCloud, except the dates and activities of use, which stay on the iPhone. One exception: if you retire a pair by entering the date you last used it, that date is saved as the pair’s retirement date, which is stored in iCloud. None of it is sent to us and we cannot access it.

Your workouts, from Apple Health

With your permission, Worn In reads your workouts and your walking and running distance from Apple Health. Access is read-only: Worn In never writes to Apple Health. For each workout it keeps on your iPhone the workout’s Apple Health identifier, its activity type, its start and end, its duration and its distance. It does not read heart rate, routes or any other health data.

Data read from Apple Health:

• is used only on your iPhone, to work out the distance and time of your shoes, their statistics and their reminders;
• is never used for advertising or marketing;
• is never sold to or shared with anyone;
• is never sent to us;
• is not uploaded to iCloud.

So that your choices can follow you to another iPhone, iCloud stores which pair you chose for a workout, or that you chose no pair, and whether the choice was made automatically or by you. That record is filed under a code derived from the workout’s identifier with a secret key kept in your iCloud Keychain. Its content does not include the workout’s date, distance, duration or activity type.

Like every iCloud record, it carries Apple’s own creation and change dates. They show when the choice was saved, which for a workout assigned automatically to your default pair can be shortly after the workout itself.

You can change or withdraw the permission at any time in the iPhone’s Settings, under Privacy & Security › Health. If you use reminders, iOS may wake Worn In in the background when a new workout is saved, so that it can update the pair and notify you.

Distances, lifespan and statistics

Totals, lifespan progress, statistics and replacement estimates are worked out on your iPhone from the workouts assigned to your shoes. They are not sent anywhere.

Camera and photos

When you scan a shoe label, the camera image is read on your iPhone to recognise the brand, style code and size, and it is not kept. When you take or choose a photo of a pair, a copy is saved in your Worn In library on your iPhone and, when iCloud is on, in your private iCloud. The saved copy is re-encoded without location, camera details or captions. A photo from the web or from your photo library keeps its copyright, creator, credit, source and usage-rights fields, if it has them, and they sync with the photo; a photo taken with the camera keeps none. Worn In sees only the photos you pick: it does not request access to your photo library. Removing a photo’s background is done on your iPhone.

Reminders and notifications

Wear reminders are notifications created on your iPhone. The distances or hours you set for them stay on that iPhone: they are not synced with iCloud and not included in a backup.

Settings

Your default pairs, the search engine you chose and similar preferences are stored on your iPhone. Default pairs, and which activities you switched off, also sync with your private iCloud.

Diagnostic log

Worn In writes a few technical lines to the iPhone’s system log: the status and error codes of iCloud sync. They contain no names, no record contents and no Apple Health data. The app does not send this log to us or to anyone. The lines can be included if you yourself share a system diagnostic from your iPhone.

iCloud

Worn In uses Apple’s iCloud to keep your shoe library on your devices. It uses only the private database of your own iCloud account, which is tied to your Apple Account. We have no access to it and no copy of it.

When your iPhone is signed in to iCloud, the following is stored there:

• your pairs and their details, with the date you added each one;
• their photos, each with where it came from (the web, the camera or your library), the date it was added, its dimensions, its file size and a checksum;
• sizes and fit, with the date a size was last edited;
• expected lifespan, earlier distance typed by hand and retirement dates;
• your default pair for each activity, and which activities are switched off;
• the pair chosen for each workout, in the coded form described above.

A random key that protects those codes is kept in your iCloud Keychain. To tell your other devices that something changed, Apple sends them silent notifications.

These records also hold a few technical details. Each change to your pairs, sizes, defaults and workout choices is saved with a random identifier that the app creates for each installation, so that edits made on two devices can be merged. To recognise that the iCloud account has not changed, the app keeps the record name that Apple’s iCloud database gives your account, on your iPhone and in two records in your private iCloud. Apple adds its own creation and change dates to every record.

A pair you delete leaves a marker in your private iCloud: see Keeping and deleting your data.

Apple provides iCloud under its own terms and privacy policy. Without iCloud, Worn In keeps working and your library stays on your iPhone only. Your library and its photos are excluded from device backups: they reach a new iPhone through iCloud sync. A few preferences, such as the search engine you chose, are part of a normal backup.

Purchases and ratings

Worn In Pro is bought through Apple’s App Store with your Apple Account. Apple handles the payment under its own terms and privacy policy. The app checks with Apple, on your iPhone, whether a Worn In Pro subscription is active. It never sees your payment details, and it does not send your purchase status to us.

“Rate Worn In” in Settings shows Apple’s own rating prompt. A rating or review you leave there is handled by Apple and the App Store under Apple’s terms; the app does not read or store it.

The in-app browser and other websites

When you choose to find a photo and model name on the web, Worn In opens a web search in a browser inside the app, with the search engine you chose: Bing, DuckDuckGo, Ecosia, Google or Yahoo. What Worn In puts in the search is the brand and the model of the pair, or its style code, together with the language and region set on your iPhone, which some search engines use to localise results.

From there you browse as in any browser: the search engine and each site you open receive what browsers normally send, such as your IP address and the type of browser and device. These sites are run by other companies and their own privacy policies apply. The in-app browser is private: it keeps no cookies or website data once you close it, it sends the Global Privacy Control signal, and it does not give sites access to motion and orientation sensors.

Only when you tap “Use this page” does Worn In read the page, on your iPhone, to find the model name and the pictures of the shoe. It then downloads those pictures from the site that hosts them, with a plain image request that carries no cookies. Only the photo you choose and the model name are saved with your pair; nothing else from the page is kept. We receive nothing about what you search for or which pages you open.

Links that leave the app, such as a brand’s size guide, this policy or “Open in Safari”, open in your browser, outside Worn In.

Contacting support

If you write to us from the app, Worn In prepares an email in your own mail app, addressed to support@wornin.app. Nothing is sent until you send it yourself. The email contains what you write, any screenshots you choose to attach (re-encoded without location or other embedded details) and, if you leave the “Include device info” switch on, the app version and build, the iOS version, the model of your iPhone, the app’s language and whether you are on Free or Pro. When you open it from “Report a problem”, the message starts with a line “Screen: … · Issue: …” that names the screen you were on and the kind of error; you can edit or delete it. You can see all of it before sending and you can turn the device information off.

If Mail is not set up on your iPhone, the app shows “Share report” instead. It opens the iPhone’s share sheet with the same text and screenshots, and they go to the app you pick there. “Copy address” puts support@wornin.app on your clipboard.

We receive your email address and whatever you send. We use it only to answer you and to fix the problem you describe. The legal basis is our legitimate interest in answering the people who write to us and, where your request concerns your subscription or these services, the steps needed to perform our agreement with you. We keep support emails for as long as it takes to handle your request and any follow-up, then delete them, unless the law requires us to keep them longer.

This website

wornin.app is a static website. It sets no cookies, has no forms, runs no scripts, uses no analytics and loads nothing from other companies. To deliver a page, the server that hosts the site necessarily receives your IP address and the technical details your browser sends, as any web server does; we do not use them to identify or profile visitors. The legal basis is our legitimate interest in running and securing the site.

The site is delivered through Cloudflare, a network that sits between your browser and our server: your request passes through Cloudflare, which receives the same details. Its responses also tell browsers that support it to report failed connections to this site to a Cloudflare address (a.nel.cloudflare.com).

Who receives your data

We do not sell personal data and we do not share it for advertising. Because Worn In has no server of its own, the only data we hold is what you email us and what this website’s server receives. Our email and hosting providers process that data on our behalf, and this website is delivered through Cloudflare, as described above. Apple provides iCloud, Apple Health and the App Store to you directly, under its own terms.

We do not make decisions about you by automated means, and we do not build profiles.

Children

Worn In is a general-audience app and is not directed at children. We do not knowingly collect personal data from children. Because the app sends us no data, the only data we could receive from anyone is an email they choose to send.

Your rights

Most of your Worn In data is on your iPhone and in your iCloud, under your direct control: you can see it and change it in the app at any time, and delete it as described under Keeping and deleting your data.

For the data we hold, the General Data Protection Regulation (GDPR) gives you the right to obtain access to it, to have it corrected or erased, to have its use restricted, to receive it in a portable form and to object to its use. Where processing is based on a permission you gave on your iPhone, such as access to Apple Health, the camera or notifications, you can withdraw it at any time in the iPhone’s Settings.

To exercise these rights, write to support@wornin.app. We answer within one month.

You also have the right to lodge a complaint with a data protection authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). You can also contact the authority of the country where you live or work.

Keeping and deleting your data

• A pair. Deleting a pair removes it from the app on your iPhone and, through iCloud, on your other devices, and deletes its photo from iCloud. A deletion marker stays in your private iCloud so that the pair does not come back from another device: it still holds the pair’s brand, model, style code, shoe type, nickname and the date you added it. The records of its expected lifespan, earlier distance and retirement date stay there too, with a marker for the removed photo (its identifiers and the removal date, no picture). Its saved size and fit are cleared. Its workouts stay in Apple Health, and the choice saved for each of them becomes “no pair”.
• The app. Deleting Worn In from your iPhone removes the data it stored there. What is in your iCloud stays in your iCloud. To erase all of it, including the markers of deleted pairs, delete Worn In’s data in your iCloud storage settings.
• Apple Health. Worn In never changes or deletes anything in Apple Health. You can withdraw its access at any time.
• Support emails. Kept as described under Contacting support.

Changes to this policy

When this policy changes, we publish the new version on this page and update the effective date above.

Contact

For anything about your privacy, or for help with the app, write to support@wornin.app.