Privacy Policy

App: LongRun
Author: Sanidhya Saroj
Effective Date: August 19, 2026
Last Updated: August 19, 2026
Contact: contact@longrun.one

This Privacy Policy explains how LongRun ("we", "our", or "us") collects, uses, and protects your personal information when you use the LongRun mobile application and the longrun.one website (together, the "Services"). By using the Services, you agree to the practices described in this policy.

We have written this policy in plain language deliberately. If anything is unclear, please contact us at the email address above.

1. Information We Collect

We collect the minimum information necessary to provide and improve the Services and to measure our advertising.

Information you provide directly:

• Email address — collected when you create an account. Used to verify your identity via One Time Password (OTP) and to manage your account.
• Name — collected after account creation to identify you on our Services.
• Phone number (optional).
• Profile photograph (optional) — if you choose to set one, you pick an existing image from your device's photo library. We never access your camera.
• Sign-in provider details — if you sign in with Google or Apple, we receive the email address and name associated with that account. Apple's Hide My Email is fully supported.

Information collected automatically:

• Device token — collected when you enable push notifications. Used solely to deliver filing alerts to your device.
• Watchlist preferences — the companies you choose to follow within the App. Stored to personalise your feed and notification alerts.
• In-app activity — which filings you open, which company pages you visit, searches you run, votes you cast, content you share or download, and how long you spend on a card. Stored on our own servers and linked to your account when you are signed in.
• Device and app diagnostics — device model, operating system version, app version, language, and approximate region derived from your IP address, collected by Google Firebase Analytics. We do not store your IP address on our own servers.
• Crash and error reports — collected by Google Firebase Crashlytics when the App fails. These contain a stack trace, the state of the device at the time of the crash, and a Crashlytics installation identifier.
• Advertising identifiers — your device's advertising ID (the Google Advertising ID on Android; the Identifier for Advertisers, or IDFA, on iOS). On iOS we collect the IDFA only if you grant permission through Apple's App Tracking Transparency prompt. See Section 5 for how these are used and how to switch them off.
• Install attribution data — when you install LongRun after seeing one of our advertisements, we receive attribution signals from the app store and the ad platform: the Google Play Install Referrer on Android, and Apple's SKAdNetwork postbacks on iOS. These tell us which campaign led to an install. SKAdNetwork data is aggregated by Apple and is not linked to you individually.
• A pseudonymous LongRun user identifier — shared with Firebase Analytics and with Meta so that activity can be connected across your own devices and sessions. This identifier is not your email address.

Information we do NOT collect:

• We do not collect any financial or trading information. We do not know what you own, buy, or sell.
• We do not collect any payment information. The App is free.
• We do not access your contacts, camera, microphone, or your precise or background location.
• We do not read the contents of your photo library. We receive only the single image you actively select.
• We do not sell your personal information.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account
• To verify your identity when you sign in (via OTP to your email address)
• To send you push notifications about filings from companies on your watchlist
• To personalise your feed based on the companies you follow
• To maintain, debug, and improve the Services' performance and reliability
• To understand which features are actually used, so we can decide what to build next
• To measure and improve our advertising — specifically, to understand which of our app-install advertisements led people to download LongRun and go on to create an account, so that we do not waste money advertising to people who are not interested

We do not use your information to make automated decisions that produce legal or similarly significant effects on you. We do not display third-party advertising inside the App.

3. How We Share Your Information

We do not sell or rent your personal information, and we do not share it with data brokers.

We share limited information with the service providers listed below, who process it on our behalf or, where noted, as independent controllers of their own:

About Meta. For some of this data Meta acts as an independent controller and may use it for its own purposes, including improving its advertising systems, in accordance with Meta's Privacy Policy. You can control how Meta uses activity received from other businesses through Meta's own "Activity off Meta technologies" settings.

We may also disclose your information:

• If required by applicable law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of LongRun, our users, or the public
• To a successor entity in connection with a merger, acquisition, or sale of assets, subject to the terms of this policy

4. Data Storage and Security

Your data is stored on secure servers hosted on Amazon Web Services (AWS) infrastructure located in India. We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and access controls to protect your information from unauthorised access, disclosure, or loss.

Data shared with Google, Meta, and Apple as described in Section 3 is processed on their own infrastructure, which is located outside India, including in the United States and the European Union.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

5. Advertising and Measurement

LongRun is free. We pay to advertise the App on platforms including Meta (Facebook and Instagram). To know whether that spending works, we need to connect an advertisement you saw to an install and a sign-up. That is the only reason we collect advertising identifiers.

We do not show advertisements inside LongRun. We do not sell your data to advertisers or data brokers, and we do not build advertising profiles about you for anyone else's benefit.

On iOS. The first time you open the App, Apple presents the App Tracking Transparency prompt. If you decline, we do not collect your IDFA and the Meta SDK stops collecting it. Attribution then relies on Apple's SKAdNetwork, which reports installs to us only in aggregate. You can change your answer at any time in Settings > Privacy & Security > Tracking.

On Android. Your Google Advertising ID is governed by your system settings. You can reset it, or delete it entirely, in Settings > Google > Ads. Deleting it stops apps, including LongRun, from receiving it.

Either way, declining costs you nothing. Every feature of LongRun works identically whether or not you allow advertising measurement.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your email address, profile photograph, device token, watchlist, and in-app activity history within 30 days of your deletion request, except where we are required to retain it by law.

Analytics and crash data held by Google is retained under Firebase's own retention settings. Data already transmitted to Meta is subject to Meta's retention practices and must be deleted through Meta's own controls; we cannot delete it on your behalf.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access — you may request a copy of the personal information we hold about you
• Correction — you may request that we correct inaccurate information
• Deletion — you may request that we delete your account and all associated data
• Objection and withdrawal of consent — you may object to analytics and advertising measurement at any time using the device controls described in Section 5, with no loss of functionality
• Portability — you may request your data in a structured, machine-readable format
• Notification opt-out — you may disable push notifications at any time through your device settings
• Grievance redressal — see Section 11

To exercise any of these rights, please contact us at contact@longrun.one. We will respond to your request within 2 weeks.

8. Account Deletion

You may delete your LongRun account at any time. Account deletion can be initiated:

• From within the App — navigate to Settings > Account > Delete Account
• By emailing us at contact@longrun.one with the subject line 'Account Deletion Request'

Upon deletion, your email address, profile photograph, device token, watchlist preferences, and in-app activity history will be permanently removed from our systems within 30 days. Data already shared with Google and Meta is governed by their own retention policies, as described in Section 6.

9. Children's Privacy

The LongRun App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

10. International Users and Legal Bases

LongRun is available worldwide. Our servers are located in India, and our analytics and advertising partners process data in the United States and elsewhere. By using the Services you consent to these transfers. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards offered by those providers.

If you are in the European Economic Area or the United Kingdom (GDPR), our legal bases for processing are:

• Contract — creating and operating your account, delivering filing alerts, maintaining your watchlist
• Consent — advertising measurement and the associated advertising identifiers. You may withdraw consent at any time using the controls in Section 5, or by deleting your account.
• Legitimate interests — product analytics, crash reporting, and security, balanced against your rights and freedoms. You may object at any time.

You also have the right to lodge a complaint with your local supervisory authority.

If you are in India, this policy serves as our notice under the Digital Personal Data Protection Act, 2023. You are a Data Principal and LongRun is the Data Fiduciary. You may access, correct, and erase your personal data, nominate another person to exercise your rights on your behalf, and raise a grievance as set out in Section 11.

11. Grievance Officer

If you have a complaint about how we handle your personal data, please contact our Grievance Officer:

Grievance Officer: Sanidhya Saroj
Email: contact@longrun.one
Response time: within 2 weeks of receipt

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via a push notification or email, and update the Effective Date at the top of this policy. We encourage you to review this policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: contact@longrun.one
Website: www.longrun.one