Privacy policy
Version 2026-10-01, published 1 October 2026.
This privacy policy explains what personal data Lekaos collects and uses, why we use it, who we share it with, how long we keep it, and your rights.
1. Who is responsible
RootPi AB, Sweden, is responsible for the processing of personal data in Lekaos.
If you have questions about your personal data, contact us at info@rootpi.se.
2. What data we collect
Depending on how you use Lekaos, we may process:
- Account information, such as your name, email address and profile picture.
- Content and activity, such as gyms, walls, wall photos, climbs, sends, grades, likes, comments and invitations.
- Safety and moderation information, such as reports and blocked users.
- Technical information, such as your IP address and information recorded in security and server logs, including request paths and app version information.
Some information you add to Lekaos is visible to other users. For example, your name, profile picture and activity may be visible to users who can access the same gym. Your email address is not shown to other users.
Lekaos does not use advertising or third-party analytics or tracking, and we do not sell your personal data.
Lekaos is intended for people aged 13 and over. If we learn that an account belongs to someone under 13, we may delete the account and its personal data.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Providing your account and the features of Lekaos, including gyms, walls, climbs, activity, comments and invitations | Performance of our agreement with you (GDPR Art. 6(1)(b)) |
| Sending account-related messages, such as password resets and email verification | Performance of our agreement with you (GDPR Art. 6(1)(b)) |
| Protecting Lekaos against abuse, keeping the service secure and handling reports | Our legitimate interest in operating a safe and reliable service (GDPR Art. 6(1)(f)) |
| Complying with legal obligations and valid requests from authorities | Compliance with a legal obligation where applicable (GDPR Art. 6(1)(c)) |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. Who we share data with
We use service providers to run Lekaos, including Google Cloud for hosting and storage, Resend for account emails, and Google Firebase only to migrate accounts from an earlier version. They process personal data for us and under our instructions.
We may also disclose information where required by law.
Apple and Google process information relating to downloading and using their app stores under their own privacy policies.
Where a service provider processes personal data outside the EU/EEA, we use an applicable lawful transfer mechanism, such as an adequacy decision, including the EU–US Data Privacy Framework where applicable, or the European Commission's standard contractual clauses.
5. How long we keep your data
We keep your account data and activity for as long as your account exists. Gym content such as walls and wall photos is kept for as long as it remains part of the gym.
6. Deleting your account
You can delete your account at any time in the app Settings → Delete account. More information is available on our account deletion page.
7. Your rights
Depending on the circumstances, the GDPR gives you the right to:
- access your personal data and receive a copy of it;
- correct inaccurate personal data;
- request deletion of your personal data;
- request restriction of certain processing;
- object to processing based on our legitimate interests; and
- receive certain data you provided to us in a commonly used, machine-readable format.
To exercise your rights, contact info@rootpi.se. We may need to verify that the request relates to your account.
8. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse.
If a personal data breach occurs, we will notify IMY and affected users when required by law.
9. Changes to this policy
If we change this policy, we will update the version date above. If a change materially affects how we use personal data, we will make the change clear in the app or by another appropriate method.