Privacy

Runway is run by ProgrammingJosh, a one-person operation. This page says what it collects, why, and what happens to it if you leave. It is deliberately short, because Runway deliberately holds very little.

The short version

• No bank connection. Runway never asks for banking credentials, never connects to a bank or an aggregator, and cannot read your transactions. Every figure in your forecast is one you typed in.
• No password. There is nothing to store, and nothing to leak.
• No third-party tracking. This site loads no analytics, no advertising scripts, no embedded fonts and no external images. It makes no requests to any host but its own.
• Deleting means deleting. Closing your account removes your data from the live database, and backups age out.

This site

The marketing site you are reading is a set of static files served by Cloudflare Pages. It sets no cookies. Cloudflare processes the request in order to serve it, which necessarily involves your IP address, and keeps aggregate request logs as any host does.

One preference is stored in your browser: which colour theme you chose. It lives in localStorage on this domain, never leaves your device, and is never sent to the server.

The waitlist

If you ask for early access, Runway stores the email address you typed, the date you typed it, the page you came from, and the country code Cloudflare attaches to the request. That last pair exists so I can tell genuine interest from a script filling in forms.

The address is used for exactly one thing: telling you when Runway opens up. It is not added to a newsletter, not sold, not shared, and not used to advertise to you anywhere. Reply to any email from Runway asking to come off the list and the record is deleted.

The app

Once Runway is open and you have an account, it holds what you put into it, and no more:

• Your email address, which is how you sign in.
• Your accounts and the balances you record for them — names you chose and figures you typed.
• Your cash flows — what money moves, how much, in which direction, and on what cadence.
• Your settings, which today means the reserve floor you set.
• Session records, so a browser you have signed in on stays signed in.

There is no analytics or behavioural tracking in the app either. Server logs record requests, as servers do, and are kept only as long as they are useful for diagnosing faults.

Who else touches it

As few parties as the thing can be built with, and each of them does one job:

• Cloudflare serves this site and stores waitlist addresses.
• Resend delivers email — the sign-in links, and the one message telling you Runway is open. It therefore handles your address.
• Amazon Web Services hosts the app and its database.

None of them is given your data for their own purposes, and there is no advertising network involved at any point.

Where it is

The app and its database run in the United States. If you are elsewhere, using Runway means your data is processed there.

Getting it back, or getting rid of it

Ask, and you will get a copy of everything Runway holds about you, or it will be deleted — whichever you asked for. There is no retention period being served out and nothing kept back for legitimate interests. Deleting your account removes your data from the live database immediately; encrypted backups are kept for 30 days and then expire, so a deletion is complete within a month.

Depending on where you live you may have statutory rights to access, correct, export or erase your data, and to object to its processing. The answer to all of them here is the same: write to help@programmingjosh.com and it gets done.

Changes

If this policy changes in substance, the date at the top changes with it, and anyone with an account is emailed. Reformatting is not a change in substance.

Asking

Everything above is one address: help@programmingjosh.com.