Privacy Policy
Effective date: 11 October 2026
Joyna Ltd
5th Floor, 167–169 Great Portland Street
London, United Kingdom, W1W 5PF
Company Number: 15197071
Contact: anna@joynarun.com
1. Introduction
This Privacy Policy explains how Joyna Ltd (“Joyna”, “we”, “our”, “us”) collects, uses, shares and protects your personal information when you use our websites, mobile applications and related services (the “Services”).
Please also read our Terms of Service, which set out the rules governing your use of the Services.
Joyna is registered in the United Kingdom and is subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner’s Office (ICO) as a data controller.
2. The information we collect
We collect personal information where necessary to provide, secure and improve the Services. This may include:
Account details: such as your name, email address, username and authentication information.
Profile information: information you choose to provide as part of your Joyna profile or onboarding.
Location data: if you grant location permission, Joyna may collect precise location information to identify your current location, find suitable routes, record your activity, provide location-based safety functionality and operate other features you choose to use.
Run and activity data: such as routes selected or completed, GPS points recorded during a run, distance, duration, pace and related activity information.
Trusted contact information: information needed to add, invite or identify people you choose as trusted contacts.
Live Location and safety information: if you choose to share a run with trusted contacts, location and run-progress information may be shared with the contacts you select for that run.
Safety information you submit: such as Safety Pins or other safety-related reports you choose to contribute.
Device and technical information: such as IP address, device type, operating system, app version, diagnostic information, crash reports and security logs.
Communications: information you provide when contacting Joyna for support, feedback or another enquiry.
Payment information: if paid features are introduced or purchased through Apple App Store or Google Play, payments are processed by the relevant app store. Joyna does not receive or store your full payment card or bank details.
Joyna does not currently collect or process health data such as heart rate, medical information or menstrual-cycle information as part of the current version of the Services. If this changes in future, this Privacy Policy and any relevant consent or privacy controls will be updated before those features are introduced.
3. Location data and background activity
Location is central to some Joyna features.
When location permission is enabled, Joyna may use your location to:
identify where you are when searching for running routes;
show routes relevant to your current location;
record the route you take during a run;
provide location-based safety functionality;
enable Live Location when you choose to share a run with selected trusted contacts.
During an active run, Joyna may continue collecting location information while the app is running in the background or while your screen is locked. This allows Joyna to continue recording your activity and operating active-run and safety features.
Joyna does not continuously track your location when you are not using an active location-based feature.
You can control Joyna’s access to location through your device settings. Some functionality will not work if location permission is disabled.
4. How we use your information
We may use personal information to:
create and manage your account;
provide and personalise the Services;
identify and display running routes relevant to your location;
record runs and activity history;
provide Live Location, trusted-contact and safety functionality that you choose to use;
send service and safety notifications;
operate Safety Pins and other user-submitted safety features;
maintain, troubleshoot and improve the Services;
protect users, detect misuse and maintain the security of the Services;
provide customer support;
communicate important information about your account or the Services;
send marketing communications where permitted and where you have chosen to receive them;
comply with legal and regulatory obligations.
5. Live Location and trusted contacts
Joyna allows you to add trusted contacts and, where the feature is available, select trusted contacts with whom to share information during a run.
When you choose to share a run, the trusted contacts you select may receive information including your live or recent location, run progress and information needed to identify the shared run.
Joyna does not automatically share every run with all of your trusted contacts. Sharing occurs through the functionality you choose to use and with the recipients you select.
You should only add or invite people whose contact information you are entitled to provide to Joyna.
6. Sharing your information
We do not sell your personal information.
We may share information:
With trusted contacts you select, where necessary to provide Live Location or another sharing feature that you choose to use.
With service providers that help us provide and secure the Services, such as cloud hosting, authentication, mapping, notifications, diagnostics and technical infrastructure.
With Apple or Google, where their services are used for app distribution, authentication, payments or other platform functionality.
Where required by law, regulation, court order or another valid legal process.
Where necessary to protect rights or safety, including the rights, safety and security of Joyna, our users or others.
In connection with a corporate transaction, such as a merger, acquisition, financing or sale of all or part of the business, subject to applicable data-protection law.
Service providers are permitted to process personal information only as necessary to provide their services to Joyna and in accordance with applicable data-protection requirements.
7. Legal bases for processing
Where UK GDPR requires us to identify a lawful basis, we may process personal information because:
it is necessary to provide the Services you request or perform our contract with you;
it is necessary for our legitimate interests, such as maintaining the security, reliability and improvement of the Services, where those interests are not overridden by your rights;
you have given consent, where consent is required;
or we have a legal obligation to process the information.
Where processing relies on consent, you may withdraw that consent at any time. This does not affect processing that was lawful before withdrawal.
8. Your choices and controls
You have control over several aspects of how Joyna uses your information.
Location: you can change Joyna’s location permission through your device settings.
Trusted contacts and run sharing: you control which trusted contacts you add and which eligible contacts you choose to share a run with.
Notifications: you can manage notification permissions through your device settings.
Marketing: where marketing communications are offered, you may opt out at any time.
Account deletion: you can delete your account using the account-deletion functionality available through Joyna. You can also find information about requesting deletion at https://www.joynarun.com/account-deletion.
Removing permissions may prevent some features from functioning.
9. Your data-protection rights
Depending on the circumstances, UK data-protection law gives you rights including the right to:
request access to personal information we hold about you;
ask us to correct inaccurate or incomplete information;
request deletion of your personal information;
request restriction of processing;
object to certain processing;
request transfer of certain information in a portable format;
withdraw consent where processing is based on consent.
To exercise your rights, contact anna@joynarun.com.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.
10. Data storage and international transfers
Joyna uses reputable technology and cloud-service providers to operate the Services.
Personal information may be processed using infrastructure located in the United Kingdom, European Economic Area or other countries used by our service providers.
Where personal information is transferred internationally, we use safeguards required by applicable data-protection law where necessary.
11. Data retention and deletion
We retain personal information only for as long as reasonably necessary to provide the Services, meet legal obligations, resolve disputes, maintain security and enforce our agreements.
Further details are set out in our Data Retention Policy.
When you delete your account, personal information associated with your account will normally be deleted or anonymised from active systems within 45 days, unless we are legally required or otherwise permitted to retain particular information for longer.
Removal from backups may take up to 90 days because backups are deleted according to secure backup-rotation schedules.
Information that has been irreversibly anonymised so that it can no longer identify you may be retained.
12. Account deletion
You may request deletion of your Joyna account:
through the account-deletion functionality provided within the app; or
by following the instructions at https://www.joynarun.com/account-deletion.
You may also contact anna@joynarun.com if you need assistance.
Deleting your account will result in deletion or anonymisation of personal information associated with your account, subject to the retention periods and legal exceptions described in this Privacy Policy and our Data Retention Policy.
13. Children and young people
Joyna is not intended for children under 13 and we do not knowingly allow children under 13 to create accounts.
Users aged 13–17 should use the Services only with the involvement or permission of a parent or guardian where required.
If we become aware that personal information has been collected from a child in circumstances where we should not have collected it, we will take appropriate steps to delete it.
14. Security
We use appropriate technical and organisational measures designed to protect personal information, including measures relating to encryption, authentication, access controls, infrastructure security and monitoring.
No system can be guaranteed to be completely secure. You should protect your account credentials and contact us if you believe your account or information may have been compromised.
15. Third-party services
Joyna relies on third-party platforms and technology providers to provide parts of the Services, such as mapping, authentication, cloud infrastructure, push notifications and app distribution.
Those providers may process information in accordance with their own terms and privacy policies where they act independently of Joyna.
16. Changes to this Privacy Policy
We may update this Privacy Policy as the Services, law or our data-processing practices change.
If we make a material change, we will provide reasonable notice where appropriate, for example through the app, website or email.
The effective date shown at the top of this policy identifies the latest version.
17. Contact us
If you have questions about this Privacy Policy, wish to exercise a data-protection right or need assistance with your personal information, contact:
Data Protection Contact
Joyna Ltd
5th Floor, 167–169 Great Portland Street
London, United Kingdom, W1W 5PF
Email: anna@joynarun.com
Data Privacy Policy
Your privacy matters to us. Joyna is designed to give you control over how your information is used, particularly information relating to your runs and location.
You control location access. Joyna uses device location only where location-based functionality requires it and your device permissions allow it. During an active run, location may continue to be collected while Joyna is in the background or while your screen is locked so that your activity and active-run features continue to work.
We do not continuously track you. Joyna does not continuously track your device when you are not using an active location-based feature.
You control Live Location sharing. If you use Live Location or another run-sharing feature, you choose which eligible trusted contacts receive information about that run.
You control your trusted contacts. You can add and remove trusted contacts through Joyna’s available controls.
You can request your data. You may request access to the personal information Joyna holds about you.
You can delete your account. Account deletion is available through Joyna. Information about requesting deletion is also available at https://www.joynarun.com/account-deletion.
Your information is not sold. Joyna does not sell your personal information to advertisers or other organisations.
No health data at this stage. The current version of Joyna does not collect or process health-related information such as heart rate, medical information or menstrual-cycle information. If Joyna introduces features involving health information in future, our privacy information and controls will be updated before those features are introduced.
Safety by design. Joyna uses features such as trusted-contact sharing, Live Location and location permissions to give users control over how location and run information is used and shared.
If you have questions or want to exercise your privacy rights, contact anna@joynarun.com.
Data Retention Policy
Effective date: 11 October 2026
Joyna keeps personal information only for as long as reasonably necessary to provide the Services, meet legal obligations, maintain security, resolve disputes or protect our rights.
When information is no longer required, we delete it securely or anonymise it so that it can no longer be associated with an identifiable individual.
How long we keep different types of information
Account details
Information such as your name, email address, username and related account information is retained while your Joyna account remains active.
Following account deletion, this information will normally be deleted or anonymised from active systems within 45 days, unless we are required or permitted to retain particular information for longer.
Runs, activities and route data
Run and activity information associated with your account is retained while needed to provide your activity history and related Services.
When your account is deleted, identifiable activity information will normally be deleted or anonymised within 45 days.
Joyna may retain data that has been irreversibly anonymised or aggregated so that it can no longer be associated with you.
Location and GPS data
GPS information recorded as part of an activity may be stored with that activity for as long as the activity remains associated with your account.
During an active run, location may also be processed to operate activity recording, Live Location and other active-run functionality.
Following deletion of the associated activity or account, identifiable location information will normally be deleted or anonymised in accordance with the applicable deletion process.
Trusted contacts and sharing information
Information relating to trusted contacts and run-sharing relationships is retained for as long as necessary to provide those features or maintain relevant account and security records.
When a trusted contact is removed or an account is deleted, associated information will be deleted when it is no longer required, subject to legal, security and technical retention requirements.
Safety information
Safety Pins or other safety reports may be retained where necessary to provide and improve Joyna’s safety functionality.
Where appropriate, information may be retained in anonymised or aggregated form after it is no longer associated with the user who submitted it.
Communications with Joyna
Support requests, feedback and related correspondence may normally be retained for up to 2 years after the matter is resolved, unless longer retention is necessary for legal, security or dispute-resolution purposes.
Technical, diagnostic and security data
Technical information such as crash information, security records, device information and logs may normally be retained for up to 12 months, unless a longer period is required to investigate security incidents, fraud, abuse or legal claims.
Payment and transaction records
Payments made through Apple App Store or Google Play are processed by those platforms. Joyna does not store full payment-card information.
Where Joyna receives transaction or accounting records, information may be retained for up to 7 years where required for tax, accounting or legal purposes.
Account deletion
When you request account deletion, personal information associated with your account will normally be deleted or anonymised from Joyna’s active systems within 45 days, except where retention is required or permitted by law.
Some information may remain temporarily in secure backups. Backup copies are removed through ordinary backup-rotation processes and may take up to 90 days to be fully removed.
Backups are not used to restore a deleted account unless required for disaster recovery, security or legal reasons.
Anonymised information
Joyna may retain information indefinitely where it has been irreversibly anonymised so that it can no longer reasonably be linked to you.
This may include aggregated information used to understand or improve routes, safety information, service performance and usage patterns.
Legal requirements
We may retain information for longer where reasonably necessary to:
comply with legal, tax, accounting or regulatory requirements;
establish, exercise or defend legal claims;
investigate fraud, misuse or security incidents;
protect users or other people.
Questions
If you have questions about retention or deletion of your information, contact: