RecRun Privacy Policy

This is a courtesy translation. The Korean original prevails. / 이 문서는 참고용 번역본이며 한국어 원본이 우선합니다.

Effective 2026-07-08 · Last updated 2026-08-04.

Irony Company Inc. (주식회사 아이러니컴퍼니, "we", "the Company") operates RecRun (Korean name: 렉런, "the Service").

This policy explains what we collect, why, how long we keep it, and what you can do about it.

The short version

Your GPS trace never leaves your phone. What we receive from a run is a list of times at

which you passed each checkpoint — no coordinates, no timestamps. The single exception is when

you deliberately choose to publish a course, which uploads that route so other runners can find it.

1. What we collect

a. Account (required to sign in)

b. Created while you use the Service

notifications. It is unrelated to location or run data and is destroyed when you delete your account.

premiere viewing, return visit) and on what date. Aggregated under an irreversible hash

combined with a random value that exists only on your device, so we cannot recover the

original account. Contains no location, run data or nickname. No third-party analytics SDK

is used; we aggregate on our own server.

c. Location — governed by the separate Location-Based Service Terms (see section 8).

server and other users is the de-identified checkpoint record (splitSec).

pre-selected; the finish screen offers two separate save buttons and nothing uploads until

you press one.

d. Motion & fitness (optional)

This never leaves your device. It is not uploaded, stored on our server, or shared.

Declining the permission leaves everything else working.

e. Body data (optional)

2. Why we use it

PurposeData
Sign-in, account recoveryEmail, user ID, password hash
Judging runs, ranking, ghost replayCheckpoint pass times, finish time, nickname
Course discoveryPublished course routes
Notifications you asked forDevice token
Product improvementDe-identified counters

We do not use your data for advertising profiling, and we do not sell it.

3. How long we keep it

(required by Korean location-information law).

account identifiers removed.

4. Who we share with

We do not sell or rent personal data, and we do not provide it to third parties for their own

purposes. Data is processed by the following providers strictly on our instructions:

ProviderPurposeLocation
Fly.ioApplication hosting and storageTokyo (NRT) region
ResendSending verification and notification emailsUnited States
Apple (APNs)Delivering push notificationsUnited States

International transfer: our servers are in Japan and two providers process data in the

United States. If you use the Service from outside Korea, your data is transferred to and

processed in those locations.

5. Your rights

You can, at any time:

account, server-side run records and event entries, and clears local data. You may also

email us (section 9).

features stop working but the rest of the app continues.

If you are in the EEA or the UK, you additionally have the rights to restriction, portability

and objection under the GDPR, and may lodge a complaint with your local supervisory authority.

⚖️ *Our GDPR representative arrangements are under legal review; contact us at the address in

section 9 in the meantime and we will respond.*

6. Security

Access to systems holding personal data is restricted and authenticated; data is transmitted

over TLS; access is logged. We have designated a person responsible for location information

(section 9) and follow the administrative and technical safeguards required by Korean

location-information law.

7. Children

The Service is not directed to children under 14, and we do not knowingly collect their

personal data.

8. Location-based services

Location handling is described in the separate Location-Based Service Terms, which also

records our Korean regulatory filing: location-based service business registration no. 1357

(Korea Communications Office, 2026-08-04).

9. Contact

10. Remedies (Korea)

BodyPhoneWeb
Personal Information Dispute Mediation Committee1833-6972kopico.go.kr
Privacy Infringement Report Centre118privacy.kisa.or.kr
Supreme Prosecutors' Office Cybercrime1301spo.go.kr
National Police Agency Cyber Bureau182ecrm.police.go.kr

11. Changes

We announce changes in the app at least 7 days before they take effect, or 30 days before if

the change is unfavourable to you.