Runway Privacy Policy

This policy explains how Eisenlabs LLC, the operator of Runway, collects, uses, shares, and protects information when you use the debt-planning service.

Information we collect

We collect identifiers and account information, including your email address, user ID, authentication records, and passkey public-key metadata when you choose biometric or device-PIN sign-in; the financial-planning information you choose to enter, including income, expenses, debts, payment history, notes, and payoff preferences; subscription and purchase status; feedback and support messages; Copilot requests and minimized calculation context when you invoke an AI feature; and limited device, network, usage, and diagnostic information needed to operate and secure the service. Runway never receives or stores your fingerprint, face scan, device PIN, bank credentials, or full payment-card details.

Sources of information

We receive information directly from you, automatically from your use of Runway and its security systems, and from service providers such as authentication providers, Stripe, and Google Play when they confirm account or subscription status.

How we use information

We use information to authenticate you, store and synchronize your plan, calculate payoff projections, provide features you request, process subscriptions, prevent abuse, diagnose failures, respond to support requests, and improve Runway.

AI features

Runway sends a minimized calculation summary to an AI provider only when you run Copilot. Passwords and authentication credentials are not included. Refinance research may use a web-search provider. Runway requires its AI gateway to route each Copilot request only through providers that support zero data retention and no prompt training. Runway does not store Copilot requests or responses as conversation history in your account; it keeps limited usage, cost, request, and error metadata needed to operate and protect the feature. Providers may retain limited security or transaction metadata when permitted by their contracts or required by law. Do not include information in a Copilot request that is not needed for the calculation or research you requested.

Service providers

Runway uses service providers including Supabase for authentication and cloud data; Vercel for hosting, operational analytics, and AI Gateway; Stripe for web subscription billing; Google Play for Android subscription billing and app distribution; OpenAI for Copilot generation; Perplexity for current web research when requested; Google or Apple when you choose their sign-in option; and Cloudflare Turnstile for abuse prevention when enabled. These providers process information under their own contractual and security obligations.

Sharing and advertising

Runway does not sell your personal information, share it for cross-context behavioral advertising, or use a financial plan for targeted advertising. We disclose information to the service providers listed above for the business purposes described in this policy; when required by law; to investigate fraud, abuse, or security incidents; to protect users or the service; or as part of a business transaction subject to appropriate safeguards. We do not knowingly disclose personal information for purposes materially unrelated to providing Runway without giving notice and obtaining consent when required.

Retention and deletion

We retain account and plan information while your account is active. We retain billing, security, support, usage, and transaction records only as reasonably necessary for the service, fraud prevention, dispute resolution, tax, accounting, and other legal obligations. Retention periods depend on the record's purpose, sensitivity, legal requirements, and provider settings. Copilot request content is subject to the zero-data-retention control described above; limited AI usage and operational metadata may persist. You can download your plan, erase plan data, or request complete account deletion from Account & Sync or the public account-deletion page. Deletion removes active Runway account and plan data, while limited provider backups and records required for security, billing, or law may persist until their applicable retention periods expire.

Security

Runway uses encrypted network connections, authenticated cloud access, database row-level security, restrictive browser security headers, and minimized data sharing. No internet service can guarantee absolute security.

Your privacy rights

You may correct plan information in Runway, download a copy, erase the plan, delete the account, or stop using Copilot. Depending on where you live, you may also request access to, correction of, deletion of, or a portable copy of personal information; appeal a denied privacy request; and opt out of certain sale, targeted-advertising, profiling, or sensitive-data uses. Runway does not currently sell personal information, use it for targeted advertising, or make legally significant decisions through profiling. Send a request to support@eisenlabs.io. We may verify your identity and authority before fulfilling a request, will respond within the period required by applicable law, and will not discriminate against you for exercising a privacy right.

Children

Runway is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will delete it.

United States processing

Runway is operated from the United States. Information may be processed in the United States and other locations where our service providers operate, subject to their contractual and legal safeguards.

Changes to this policy

We will update the date above when this policy changes. If a change materially expands how existing personal information is used, we will provide additional notice and obtain consent when required by law.

Contact

Questions or privacy requests can be sent to support@eisenlabs.io.