Privacy Policy

This Privacy Policy describes how RunLeague ("we", "us", "our") collects, uses, and protects your information when you use our mobile application and website (collectively, the "Service"). By using the Service, you agree to the practices described in this policy. We may update this page from time to time; the date above reflects the latest revision.

Information we collect

Account information

When you create an account, we collect your email address and, if you choose to provide them, your display name and profile photo. If you sign in with Apple, we receive your Apple ID identifier and associated email address as permitted by your Apple ID settings.

Apple HealthKit data

RunLeague requires access to Apple Health (HealthKit) on your iOS device to function. When you grant permission, RunLeague reads the following data:

• Step count
• Walking + running distance
• Active energy burned (calories)

This data is used solely to power your activity tracking, daily stats, challenges, leaderboards, and streaks within RunLeague. We sync daily aggregates of this data to our servers so your progress is reflected across sessions and on leaderboards.

If you enable background delivery, RunLeague may receive periodic HealthKit updates (approximately hourly) even when the app is not in the foreground, so your stats stay up to date.

We do not sell, share with third parties for advertising, or use Apple HealthKit data for marketing purposes — ever. HealthKit data is not used for any purpose other than providing and improving the core features of RunLeague described above.

Device and usage information

We automatically collect limited technical information such as device type, operating system version, and general interaction patterns with the Service (e.g., features used, session times). RunLeague does not integrate any third-party analytics or ad SDKs.

Push notification tokens

If you allow notifications, we store a push token to send you updates such as step-goal reminders, challenge alerts, and friend activity. You can disable notifications at any time through your device settings.

How we use your information

We use collected information to:

• Operate the Service — authenticate your account, display your stats, power leaderboards, XP, streaks, clans, and achievements.
• Send you push notifications you have opted into (e.g., goal reminders).
• Communicate with you via email (e.g., account-related messages) using our email provider, Resend.
• Ensure security and prevent abuse.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for advertising or marketing profiling.

Sharing of information

We may share information only in these limited cases:

• Service providers — We use third-party services to host our infrastructure, deliver emails (Resend), and send push notifications (Expo). These providers process data on our behalf under contractual obligations and may not use it for their own purposes.
• Social features — Your display name, avatar, stats, and leaderboard position may be visible to other RunLeague users through features like clans, friends, and public leaderboards.
• Legal requirements — We may disclose information if required by law, regulation, or legal process.

We never share Apple HealthKit data with third parties for advertising, data brokerage, or any purpose unrelated to providing the Service.

Apple HealthKit — additional disclosures

In compliance with Apple's requirements for HealthKit-enabled apps:

• HealthKit data is not used for advertising or similar services, including third-party advertising.
• HealthKit data is not sold to data brokers.
• HealthKit data is not used for purposes unrelated to health, fitness, or wellness within RunLeague.
• HealthKit data is not disclosed to any third party without your explicit, separate consent — except to service providers acting on our behalf to operate the Service.
• You can revoke HealthKit access at any time in your device's Settings > Health > Data Access & Devices.

Data retention and security

We retain your account and activity data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable time frame, except where retention is required by law.

We implement reasonable technical and organizational measures to protect your data, including encrypted data storage and secure server communication. However, no method of transmission over the internet is completely secure.

Children's privacy

RunLeague is not directed to children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

Your rights and choices

• HealthKit permissions— Manage or revoke at any time via iOS Settings > Health.
• Push notifications — Enable or disable in your device settings.
• Account deletion — You may request deletion of your account and associated data by contacting us.
• Access, correction, and portability — Depending on your jurisdiction, you may have the right to access, correct, or export your personal data. Contact us to make a request.

Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at contact@runleague.app or through the in-app support channel.