Home

    Privacy Policy

    Last Updated: July 30, 2026

    This Privacy Policy describes how Pocket Runway ("we," "us," or "our") collects, uses, and shares information about you when you use our website (pocketrunway.com) and related services (collectively, the "Service"). Pocket Runway is a software service based in Minnesota, United States.

    By using the Service, you agree to the collection and use of information in accordance with this policy.

    1. Information We Collect

    Information You Provide Directly

    • Account information: email address and password (stored as a hashed value, never in plain text).
    • Financial inputs: information you manually enter, such as income, recurring bills, transfers, savings goals, and account balances. This data is stored to provide the Service and is never shared, sold, or used for advertising.
    • Payment information: when you subscribe, your payment details (credit card number, billing address) are collected and processed by Stripe, our payment processor. We do not store full payment card information on our servers. We retain a Stripe customer ID, subscription status, and the last four digits of your card.
    • Communications: if you contact us by email, we retain the content of your message and your email address to respond.

    Information Collected Automatically

    • Usage data: pages visited, features used, timestamps, and aggregate interaction patterns.
    • Device information: browser type, operating system, screen resolution, and IP address.
    • Analytics data (Google Analytics): our public pages and the web app at pocketrunway.com load Google Analytics 4, provided by Google LLC as our service provider. It collects the page or screen you view, the site that referred you, your browser and device type, approximate location derived from your IP address, and a randomly generated identifier stored in the _ga and _ga_<container ID> cookies so that repeat visits and a single browsing session can be recognized. We also send it a small number of specific events: page views, account sign-ups, logins, clicks on our sign-up buttons, and starting a subscription checkout. We use this only to understand how people find and use the Service — which pages work, where people get stuck, and whether new users are able to get set up. We do not send Google Analytics your financial inputs, balances, transactions, or the contents of your account, and query strings on in-app links (which can carry password-reset and sign-in tokens) are stripped before a page view is recorded. We do not use it for advertising, remarketing, or cross-site tracking. You can opt your browser out at any time — see the Cookie Policy for how.
    • Error and performance data: when the Service encounters errors or performance issues, we collect technical diagnostic information through Sentry (a third-party error monitoring service). We strip personally identifiable information from error reports before transmission.

    Optional: Bank Connection Data

    If you choose to link a bank account via our Plaid integration, Plaid will collect and provide us with account balance and transaction data. Plaid's use of this data is governed by Plaid's own privacy policy at plaid.com/legal/#end-user-privacy-policy. You may disconnect linked accounts at any time from the Accounts page in the Service.

    2. How We Use Your Information

    We use your information to:

    • Provide, maintain, and improve the Service
    • Process subscriptions and payments
    • Send transactional emails (verification, password reset, billing receipts, trial expiration reminders)
    • Monitor for errors and performance issues
    • Respond to your support requests
    • Detect and prevent fraud or abuse
    • Comply with legal obligations

    We do not use your financial data for advertising, sell your data to third parties, or share it with data brokers.

    3. How We Share Your Information

    We share your information only with the following categories of third-party service providers, each bound by their own privacy and security obligations:

    We may also share information:

    • To comply with applicable laws, court orders, or government requests
    • To protect our rights, property, or safety, or that of our users
    • In connection with a merger, acquisition, or sale of business assets, in which case users will be notified before their data is transferred

    4. Data Retention

    We retain your account and financial input data for as long as your account is active. If you delete your account, we will delete your data within 90 days, except where retention is required by law (e.g., financial records for tax purposes). Backups may persist for up to 30 days after deletion. Stripe retains payment records as required by financial regulations independent of our retention policy.

    5. Your Rights

    Depending on your location, you may have the right to:

    • Access the personal information we hold about you
    • Request correction of inaccurate information
    • Request deletion of your information ("right to be forgotten")
    • Request a copy of your information in a portable format
    • Object to or restrict certain processing of your information
    • Withdraw consent at any time

    To exercise any of these rights, email us at support@pocketrunway.com. We will respond within 30 days.

    California Residents (CCPA / CPRA)

    California residents have additional rights, including the right to know what personal information we collect and to request its deletion. We do not sell personal information. To exercise CCPA rights, contact us at the email above.

    European Residents (GDPR)

    If you are in the European Economic Area, the legal basis for processing your information is the performance of our contract with you (providing the Service), your consent (for optional features), and our legitimate interests (security, fraud prevention, service improvement).

    6. Security

    We take reasonable technical and organizational measures to protect your information, including:

    • Encryption of data in transit (HTTPS/TLS)
    • Hashed password storage (never plain text)
    • Access controls limiting who can view user data
    • Use of established third-party services (Stripe, Plaid) for sensitive data handling

    No system is completely secure. You are responsible for keeping your password confidential and notifying us of any unauthorized access.

    7. Children's Privacy

    The Service is not directed to individuals under 18 years of age. We do not knowingly collect information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly.

    8. Cookies and Tracking

    We use cookies and similar technologies to operate the Service. Cookies are small text files stored on your device that help us keep you logged in, remember preferences, and understand how the Service is used.

    We also set first-party analytics cookies (_ga and _ga_<container ID>) through Google Analytics, as described in section 1. These identify a browser, not a person, and are used to measure how the Service is used. We do not use cookies for advertising, remarketing, or cross-site tracking.

    You can control cookies through your browser settings, though disabling them may affect Service functionality. You can also switch off analytics for a browser without changing any other setting by visiting pocketrunway.com/?ga_opt_out=1. Our Cookie Policy lists every cookie and local-storage item we use and how to manage each of them.

    9. International Data Transfers

    The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your jurisdiction.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice in the Service at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

    11. Contact

    If you have questions about this Privacy Policy, contact us at:

    Email: support@pocketrunway.com