Privacy Policy
Last updated: September 2026
What we collect
Your public wallet address, which is your account identifier. Location readings while the tracker is open, each one a latitude, longitude, timestamp and accuracy value. Derived totals such as verified distance, steps, points and payout records. We do not collect your name, email address, date of birth or any identity document, and we never receive your seed phrase or private key.
How location is used
Location is read only while the tracker is open and you have granted permission. Readings are sent to our server so distance can be verified rather than self-reported, which is the only way a website can tell genuine movement from a device being shaken. Revoking the permission in your browser stops tracking immediately.
What we keep
We keep verified totals for each run and each day, because those determine your points and are the record behind any payout. We keep the last accepted position of an active run so tracking can resume accurately after a signal drop. We do not build or store a map of your route, and we never use your location for advertising or profiling. The route shape shown on the tracker is drawn in your browser and is not uploaded.
Sharing
We do not sell personal data. Payout transactions are broadcast to Robinhood Chain, which is a public blockchain, so your wallet address, the amount and the time are publicly visible there. That is inherent to being paid on chain. Service providers that host our application and database process data on our behalf under contract.
Public leaderboard
Wallet addresses that record verified movement appear on the public leaderboard in shortened form alongside their totals. Addresses are already public information on chain. If you would rather not appear, do not record tracked runs, or ask us to delete your account.
Retention
Run and points records are kept for as long as the account exists, and payout records are kept afterwards as a financial record. Deleting your account removes your movement history, points and account record from our database. Transactions already broadcast to the blockchain cannot be deleted by anyone.
Your choices
You can revoke location permission, disconnect your wallet, or ask us to delete your account and its data. Because your account is a wallet address rather than a verified identity, we confirm such a request by asking you to sign a message from that wallet. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA. Write to support@run2earn.app.
Security
Sessions use a signed, http-only cookie. The key that funds payouts exists only in server-side configuration; it is never sent to the browser, never returned by an API and never written into the page. We cannot initiate any transaction that removes assets from your wallet.
Children
The service is not directed at children and we do not knowingly collect data from them.
Contact
support@run2earn.app