Last updated 4 November 2026

The beta privacy statement

Walking Points is a personal project run from Denmark. During the beta, the controller of your data is Lars Rothschild Henriksen, personally, not a company. Write to hello@walkingpoints.fm about anything on this page.

What we keep

• Your intake answers: Name, email, role, industry, interests, what an episode should give you (if you said), your level, which days and time you walk, episode length, language and podcast app.
• What you wrote on the waitlist, if you joined it before the beta. When Lars invites you, Claude (Anthropic's AI) reads it once to suggest areas and things to understand better on your intake form, which you can change or remove. The copy made for this waits in Cloudflare's store, can be read only with your own invitation link, and is deleted once your show is set up from the form you sent through that link, and in any case 60 days after the invitation.
• Every episode made for you, and the research briefing behind it.
• Your feedback taps (more like this, less like this, too deep, too basic) and any note you type. Until 28 September a fifth tap also asked what you were doing while you listened, and we keep those answers if you gave one.
• Your "How much was it?" answers, if you tap Too much, About right or Too light on one of your own episodes. An answer waits in Cloudflare's store until Lars' machine collects it (usually within 15 minutes, never kept there past 30 days) and is then kept with the rest of your data. It is used only to tune how the show measures how much an episode asks of the ear. It does not change your show, and it is deleted with your data.
• Your check-in answers, if you send them from the form on your show page or reply to the short question sheet we send about two weeks in. A form answer waits in Cloudflare's store until Lars' machine collects it (usually within 15 minutes, never kept there past 30 days). Lars reads them, and Claude (Anthropic's AI) helps him go through them in his weekly review of the show. Counts across all testers, with no names and none of your words, also go to an automated assistant that plans the launch. Your answers are never put into an episode's script, but they can lead Lars to change a setting on your own show, such as how many ideas an episode holds.
• Your voice replies, if you record one on your show page. The recording waits in Cloudflare's store until Lars' machine collects it (usually within 15 minutes, and never kept there past 30 days). It is transcribed on that machine, and the audio is deleted as soon as it has been. The transcript is kept for 120 days, and may be used by Claude and Mistral to write your next episode. Lars may read it, and reads any reply that is held back first. A What stuck? note (twenty seconds on what you remember from an episode) is a voice reply with the same handling, except that it is kept with the episode, is never used to write an episode, and is compared with the episode's ideas by counting words on that machine.
• Your notes on a moment of an episode, if you send one from the player. A spoken note waits in Cloudflare's store until Lars' machine collects it (usually within 15 minutes, never kept there past 30 days), is transcribed on that machine, and the audio is deleted as soon as it has been. The text is kept for 180 days. Lars reads it, and Claude (Anthropic's AI) may read it to help sort it. If it states a lasting preference for how your own show should sound, the show may turn it into one plain sentence that shapes only your own episodes, until you remove it. You can see and remove these on your show page, under What your show has learned from you. Your note itself is never read out or quoted in an episode. The note may also be proposed for every listener's show (see Everyone teaches the show), and only Lars decides that. When a note leads to a change, or Lars decides you should hear why it could not, we may email you a short email, at most one a day, saying what came of what you told us. It never repeats what you wrote; when a note became a preference, it shows that one sentence, as your show page does. To stop it, untick “Email me what came of what I told you” on your show page, or reply to it.
• The notes made from each episode (its main ideas, terms and one thing to try) and your recall answers (got it, partly, not yet), so the questions come back when they are due.
• Your email address, for the show notes of each episode: We may email you one email when an episode reaches your feed, with its summary, its chapters and its sources as links, the same notes your podcast app shows, and a link to play it in the browser. To stop these emails, untick “Email me the show notes of each episode” on your show page.
• Your email address, for one more thing, if your episodes are made to teach and you do not use the app: One short email the morning after an episode, with one question from it and a link to your show page, and one a week later asking whether you tried the thing it suggested. That is one email each per episode, never a reminder, a count or a second try. Your answer to “Did you try it?” (yes, a bit, not yet, or a sentence you write) is kept with your recall answers. To stop these emails, untick “Email me a question the morning after an episode that teaches” on your show page, or reply to one.
• Your answers to a recall question, if you say or type one (up to 600 characters, about thirty seconds). On the iPhone the app turns your voice into text on the phone itself, so the recording never leaves it; if the phone cannot do that for your language, the recording is sent like a voice reply, and is transcribed on Lars' machine and deleted as soon as it has been. The text waits in Cloudflare's store until Lars' machine collects it (usually within 15 minutes, never kept there past 120 days), and is then kept with the question's rating for 180 days, as long as the rating itself. Claude (Anthropic's AI) reads it once, next to the question's own answer, to tell you whether you had the main point. It is never used to write episodes, and Lars does not read it except to fix a fault; when it can, the check is shown only to you, with one line on what you missed, never a score. A check moves the question as your own rating would, unless you rate the question yourself soon after, in which case your rating counts instead. If your team has a pilot and you chose to count your answers in the team's rate, the checks join that rate in the same way your ratings do: Only for the whole team, only when five or more have answered, never per person.
• The series you follow, if you are enrolled in one, and your answers to its optional series check (a few questions before you start and a month after the last part, answered got it, partly or not yet), so you can see what the series taught you. They are deleted when you leave the series.
• On your own device only, your show page remembers where you stopped an episode, your playback speed, that you agreed to the voice reply terms, that you agreed to the note terms, and any note you have not sent yet, until it is sent. That stays in your browser and never reaches us. The app keeps the same kind of things on your phone (see below).
• Your interview notes, if you talk to Lars at the end of the beta: What he writes down while you talk, typed into your record, not recorded as audio.
• Listening counts for your feed, stored against a short prefix of your feed link (or, for a page visit, of your show page link), not your name: When your podcast app fetches an episode, our welcome recording or your feed, which part of the file it asked for and how much was sent (so we can tell an episode played to the end from one your app downloaded on its own), the kind of app it was (for example Apple Podcasts, Overcast or a web browser, never the exact version), the country Cloudflare works out from your address (we never receive the address itself), and when your show page is opened. We do not store your IP address with these counts. They expire by themselves about three months after they were recorded.
• A transcript and quality scores of each episode.
• If you report a mistake: What you wrote and your email, if you gave it, kept only to handle the report and deleted 12 months after it's handled.

The app (iPhone and Apple Watch)

The Walking Points app is optional: Your private feed keeps working in any podcast app. If you use the app, it reads the same show page as the web and sends the same things (recall answers, voice replies, notes, settings), handled exactly as described above. On top of that:

• You sign in with your show page link. The app keeps that link in your iPhone's Keychain, on that device only, never synced to other devices or to iCloud.
• You can sign up in the app. It asks the same questions as the sign-up form on this site and sends the same answers, handled exactly as described above. To keep out bots, the app uses Apple's App Attest in place of the spam check on the web form: Your iPhone makes a key for this app alone, Apple vouches that the key lives on a real iPhone running the real app, and the app signs your sign-up with it. We keep that key's public half, which is a random number and not your Apple ID, your phone number or anything that follows you to another app, and we use it only to check later sign-ups from the same app. We keep it for up to 400 days after its last use, and deleting your show does not remove it, because it belongs to the app on your iPhone and not to you. Nothing is sent until you tap Send.
• Delete my show, in the app's Your show tab, asks us to delete your feed, your profile, your episodes and your taps within the hour (the listening counts described above expire on their own), the same as "Delete my data" on your show page.
• The camera is used only to read the QR code of your link, if you choose to scan it. Nothing is recorded or kept.
• The microphone (on the iPhone or the Apple Watch) is used only while you record a voice reply or a note, and the recording leaves the phone only when you send it. Once Walking Points has it, the app deletes it from the phone.
• If you turn on the walk offer, the app uses your iPhone's motion data to notice that a walk has started and offers your newest episode with a notification from the phone itself. Your motion data stays on your iPhone and is never sent to us. The app itself uses no location and no health data (our servers see only the country Cloudflare works out for a request, as described above).
• On your phone, the app keeps your downloaded episodes, where you stopped each one, ratings and recordings waiting to be sent, a copy of your show page so it works offline, and the small summary your widgets show. The widgets, the lock-screen player and the Siri shortcuts read this on the phone itself and send nothing. The Apple Watch app holds no link of its own and talks only to your iPhone. It can keep the newest one or two of your downloaded episodes on the watch, with where you stopped, a note you record on the watch and recall answers, until your iPhone has received them.
• Which episodes you have marked heard is also kept with your show in Cloudflare's store: Only the episodes' ids, for up to 400 days after the last change, so a new phone or a fresh sign-in shows the same. Signing out leaves it there, and Delete my show removes it.
• Signing out deletes the link, every download, everything waiting to be sent, the copy of your show page and the widget data from the phone, and the episodes, positions, recordings and everything waiting on your Apple Watch.
• Buying an extra deep dive (optional) is a purchase through Apple, which takes the payment and keeps your payment details: We never see them. Your phone sends us the signed receipt of the purchase, we check it against Apple's public certificate, and we keep the receipt and our verdict on it for up to 30 days, so that the app can show you the result. We keep the transaction number, with no name and no payment detail, for good, even after you delete your show, only so that the same purchase can never be used twice.
• The app has no analytics, no advertising and no tracking of any kind, and it uses no third-party code.
• While the app is in testing, Apple delivers it through TestFlight. Apple may share crash reports with us, and anything you choose to send through TestFlight's own feedback button (which can include a screenshot). Apple's own privacy policy covers TestFlight.

What it's used for

Making and improving your episodes. Nothing else. We don't advertise with it, and we never sell or share it.

Who processes it

• Anthropic: Sorts what you wrote on the waitlist into suggestions for your intake form, researches and quality-checks the briefing and script, writes the notes and recall questions for each episode, compares an answer you gave to a recall question with the question's own answer, may read a voice reply's transcript to write your next one, and may check a mistake report against the episode, via Lars' own Claude account (US).
• Mistral AI: Writes the spoken script from the briefing, which carries your profile but never your name, and any voice reply's transcript, which carries whatever you said in it (EU-hosted, France).
• Google: Gemini turns the script of an English episode into speech; Cloud Storage holds your feed and episodes (US/EU).
• ElevenLabs: Turns the script of a Danish episode into speech, including the opening line that says who the episode is made for, which carries your first name unless you have turned that line off (US).
• Cloudflare: Serves walkingpoints.fm, runs the intake and waitlist forms and their Turnstile spam check (no tracking cookies), and keeps your feedback taps, recall answers, voice replies, spoken notes and any mistake report, in its KV store, until Lars' own machine collects it (US/EU). Cloudflare also keeps your listening counts in its analytics store, where they expire by themselves after about three months.
• MailPace: Sends our mail from walkingpoints.fm, meaning confirmations, welcome mail, and the newsletter if you opted into it (EU-hosted, bound by our data processing agreement). It does not track opens and does not rewrite links, so our mail carries no tracking pixel and your private feed and show page links go straight to us, through nobody else. We chose it for exactly that reason.
• Apple: Delivers the app while it is in testing (TestFlight), passes on crash reports and any feedback you send through TestFlight, and vouches through App Attest that a sign-up in the app comes from a real iPhone running the real app (US).
• Transcription runs locally, on Lars' own Mac. Nothing leaves it for that step.

The newsletter

The newsletter is a separate choice from the beta itself: An unticked box on the form, never assumed. Ticking it starts a double opt-in: One confirmation email, and nothing further goes out until you click the link in it. What you agreed to, and when, is kept alongside your signup so we can show it if you ever ask; every newsletter mail carries its own unsubscribe link, and unsubscribing there is immediate.

Mail about a public series

Separately from the beta, each season card on the public series page lets a visitor leave an email to hear about a new episode or a new season of that series. That list holds the email, the series, the times of the request and the confirmation click and which update mails were sent, nothing else about the visitor, plus a one-way fingerprint of the address that outlives an unsubscribe or a deletion so it is never mailed again. It needs a confirmation click, every update mail has a one-click unsubscribe link, and an address is deleted on request at hello@walkingpoints.fm. The website's privacy page has the details.

Everyone teaches the show

Every listener's episodes help tune the show's shared style notes. Those notes are kept in a private code repository and hold no names, employers or other personal details. The reviewer that writes them is instructed to keep them generic.

Preferences learned from your own notes are different. They are kept with your own data, are used only for your own show. If several listeners hold a similar preference, Lars may be offered it as a general rule in the weekly round, written afresh without your name or words.

A note you leave may also help shape the show for every listener, but only after Lars has reviewed it in a weekly round. Claude (Anthropic's AI) groups similar notes from different people and drafts one plain sentence, and Lars then decides, for each, whether it becomes a general rule, a rule for one listener's own show only, or nothing. A general rule is a sentence in the shared style notes: It never names or quotes you or anyone else. Lars reads the words of a note in that review, as he does anyway. If Lars decides on a note in that review, its outcome on your show page says what became of it. Notes that are not picked for a review, or that nobody decides on within 14 days, get no outcome.

Transfers outside the EU

Where a processor above is based outside the EU, the transfer relies on that provider's own safeguards under EU law, such as the EU-US Data Privacy Framework or standard contractual clauses.

Legal basis

Your consent, given on the intake form. You can withdraw it at any time by writing to hello@walkingpoints.fm.

How long we keep it

Until the beta ends, or until you ask sooner. Then your profile, episodes, feedback taps, "How much was it?" answers, check-in answers, interview notes, voice reply transcripts, notes, learned preferences, recall and series check answers and feed are deleted, and the feed link stops working. The research briefing and script behind an episode are deleted 365 days after the episode. The text of a note is kept for 180 days, but a preference made from it stays until you remove it or your data is deleted. What stays afterwards is your listening counts, which stay in Cloudflare's analytics store until they expire, about three months after they were recorded (they carry only a short prefix of your feed link, no name), and what the show learned about telling a story well, in the shared style notes described above: They carry no names and no personal details, so there is nothing of yours left in them. You can also change or delete everything yourself, any time, from your show page (the link is in your welcome email), and deletion there happens within the hour and is complete, except the listening counts described above. Deleted data can still be recovered by Lars for up to 90 days from encrypted backups and the storage provider's recovery copies, after which it is gone too.

Your rights

You can ask to see the data we hold about you, have it corrected or deleted, or withdraw your consent: Just write to hello@walkingpoints.fm. If you think we've handled your data wrongly, you can also complain to the Danish Data Protection Agency, Datatilsynet.

One more thing

Every episode is AI-generated. It's a briefing, not advice (see the beta terms).