Your data

Privacy Policy.

Effective and last updated 27 August 2026

This policy explains how LESRUN collects, uses, discloses, protects, retains, and deletes information when you use the LESRUN mobile app, website, support channels, and related services.

Plain-language summary: LESRUN uses account, profile, precise foreground location, and fitness activity data to provide verified runs, virtual territory, rankings, clubs, safety, and support. We do not sell personal data or use it for third-party targeted advertising.

1. Who is responsible for your information

LESRUN is the data controller for information processed through the LESRUN service. LESRUN is operated from Nairobi, Kenya and is identified by the same developer name in its official app-store listing. Privacy enquiries and data-rights requests can be sent to privacy@lesrun.com. General support is available at support@lesrun.com.

This policy is designed around the Kenya Data Protection Act, 2019 and applicable platform requirements. Additional mandatory rights may apply based on where you live.

2. Scope and your agreement

This policy applies to the LESRUN Android or iOS app, app.lesrun.com, account authentication, support, and safety operations. It does not control independent websites or services you choose to visit. By using LESRUN, you acknowledge this policy; where consent is the applicable legal basis, LESRUN will ask for affirmative permission.

3. Information we collect

Category	Examples	When collected
Account and authentication	Email address, user ID, authentication provider, session and security records.	When you sign up, sign in, or secure your account.
Profile and media	Display name, handle, avatar, neighbourhood, weekly goal, run style, bio, and club or squad membership.	When you create or edit a profile or upload an avatar.
Precise location and route	Foreground GPS coordinates, timestamps, accuracy, route geometry, selected sector, and derived distance or pace.	Only when you choose to start an outdoor activity and grant location permission.
Fitness and activity	Distance, duration, pace, estimated steps, cadence, activity type, streaks, XP, and verification result.	While recording or processing an activity.
Community and content	Clubs, scheduled runs, invitations, friendships, discovery preferences, kudos, reports, blocks, referrals, and content you submit.	When you use social or club features.
Safety and integrity	GPS consistency signals, speed checks, suspected abuse, moderation reports, account actions, and appeal correspondence.	When protecting users, competitions, and the service.
Device, app, and support	App version, platform, diagnostic events, IP-derived security information, support messages, and attachments you send.	When the service operates or you contact us.

LESRUN does not intentionally request contacts, SMS, call logs, background location, medical records, payment-card details, or advertising identifiers for targeted advertising. The public website does not use advertising cookies or behavioural advertising at the date of this policy.

4. Sources and whether information is required

Most information comes directly from you or your device. Authentication information may come from Google, Apple, or Supabase when you choose that sign-in method. Club and social information may come from other LESRUN users interacting with you.

Email/account identifiers are required to maintain an account. Foreground location is optional at device level, but GPS run verification, territory, and ranking features cannot work without it. Profile and community fields marked optional can be omitted, though this may limit discovery or personalisation.

5. How and why we use information

Provide the service and perform our agreement: authenticate accounts, record activities, calculate metrics, operate clubs, rankings, virtual territory, referrals, and account controls.
With your permission: access foreground precise location, camera, or photo library after you choose the related feature and approve the device permission.
Protect legitimate interests: secure accounts, prevent GPS manipulation, investigate abuse, moderate content, enforce rules, debug failures, and improve reliability while respecting user rights.
Comply with law: respond to lawful requests, preserve evidence where required, and meet privacy, safety, accounting, or regulatory obligations.
Protect vital interests: respond where information reasonably indicates an immediate threat to a person, when lawful and necessary.

LESRUN does not use precise routes, fitness activity, or account data to provide third-party targeted advertising, determine insurance eligibility, make employment decisions, or sell user profiles.

6. Location, fitness data, and route visibility

LESRUN requests Android or iOS foreground location after you start recording and before location collection begins. Location supports route display, distance calculation, anti-abuse checks, and eligibility for virtual sector progress. LESRUN does not request background location permission.

Raw route points are not placed in the general club feed. Activity summaries may show distance, time, pace, XP, or a named virtual sector according to your visibility and club relationship. Route-edge blurring and live-sharing controls, where offered, should not be treated as guarantees that another person can never infer an area from other information you publish.

LESRUN is an activity and fitness service, not a medical device. Activity metrics are estimates and must not be used for diagnosis, treatment, or emergency decisions.

7. Verification and automated decisions

LESRUN uses automated checks such as route-point validation, GPS speed and consistency checks, distance thresholds, and server rules to decide whether an activity is verified, rejected, or held for review. These decisions can affect virtual claims, rankings, XP, or streaks, but do not determine legal rights, employment, credit, insurance, or medical care.

If you believe a verification result is wrong, request human review at safety@lesrun.com and include the activity date and relevant details. Do not email sensitive route screenshots unless requested.

8. Community visibility and user content

Depending on your settings and relationships, authenticated users may see limited profile details, club membership, activity summaries, badges, kudos, or content you intentionally submit. Runner discovery and activity visibility can be changed in the app. Club captains or administrators may see information needed to manage memberships and scheduled activities. Safety reports are restricted and are not shown to the reported user as a public post.

Do not publish another person’s precise location, private contact information, health information, or other sensitive data without authority.

10. International processing

Cloud and authentication providers may process information outside Kenya. Where Kenyan or other applicable law requires it, LESRUN will rely on appropriate contractual, organisational, technical, or legal safeguards and, for sensitive information where required, obtain consent. Contact privacy@lesrun.com for information about safeguards relevant to your data.

11. Retention and deletion

Account, profile, activity, route, club, and social data is generally retained while the account is active and needed to provide LESRUN.
After a verified deletion request, active account data is ordinarily removed promptly and the request is targeted for completion within 30 days.
Temporary encrypted backups or provider recovery copies may remain inaccessible in normal operation until overwritten, ordinarily within 90 days.
Security, fraud, moderation, legal-claim, or transaction records may be restricted and retained for up to 24 months, or longer only when a specific law, dispute, or valid legal order requires it.
De-identified statistics that cannot reasonably be linked back to you may be retained.

Deletion removes the account rather than merely freezing it. See Delete your LESRUN account.

12. Security

LESRUN uses encrypted network transport, authenticated sessions, role and row-level access controls, restricted privileged operations, data minimisation, and operational monitoring. No internet service can guarantee absolute security. Protect access to your email and device, and report suspected account compromise to safety@lesrun.com.

13. Your rights and choices

Subject to applicable law, you may ask to be informed, access or receive a portable copy of your data, correct inaccurate data, object to or restrict processing, withdraw consent, or delete data that LESRUN is no longer authorised to retain. You may also request human reconsideration of an automated verification result.

Submit a request to privacy@lesrun.com. We may verify account ownership and will respond within the period required by applicable law. Withdrawing permission does not affect earlier lawful processing and may disable features that require that data.

If you are in Kenya and believe your request was not handled lawfully, you may complain to the Office of the Data Protection Commissioner.

14. Adults only

LESRUN is intended for adults aged 18 and over and is not directed to children. We do not knowingly permit a child to create a LESRUN account. If you believe a child has provided personal data, contact privacy@lesrun.com so the account can be investigated and removed. A parent or lawful guardian may exercise applicable rights for a child.

15. Changes and contact

We may update this policy when features, providers, laws, or practices change. Material changes will be communicated through the app, website, or account contact where appropriate, and the effective date above will change. Continued use after an effective update is subject to the revised policy, but consent will be requested again when required by law.

Privacy: privacy@lesrun.com · Safety: safety@lesrun.com · Support: support@lesrun.com