Home

    Privacy Policy

    Last Updated: November 5, 2026

    This Privacy Policy describes how Pocket Runway ("we," "us," or "our") collects, uses, and shares information about you when you use our website (pocketrunway.com), our Android app, and related services (collectively, the "Service"). The Android app displays the same web app inside the app, so everything in this policy applies to it in the same way. Pocket Runway is a software service based in Minnesota, United States.

    By using the Service, you agree to the collection and use of information in accordance with this policy.

    1. Information We Collect

    Information You Provide Directly

    • Account information: email address and password (stored as a hashed value, never in plain text). If you sign in with Google, we receive your name and email address from Google instead of a password.
    • Financial inputs: information you manually enter, such as income, recurring bills, transfers, savings goals, and account balances. This data is stored to provide the Service and is never shared, sold, or used for advertising.
    • Payment information: when you subscribe, your payment details (credit card number, billing address) are collected and processed by Stripe, our payment processor. We do not store payment card information on our servers. We retain a Stripe customer ID and your subscription status; card details stay with Stripe.
    • Communications: if you contact us by email, we retain the content of your message and your email address to respond.

    Information Collected Automatically

    • Usage data: pages visited, features used, timestamps, and aggregate interaction patterns.
    • Device information: browser type, operating system, screen resolution, and IP address. We store the IP address used when you signed up and when you last signed in, to protect against abuse and fraud.
    • Analytics data (Google Analytics): our public pages and the web app at pocketrunway.com load Google Analytics 4, provided by Google LLC as our service provider. It collects the page or screen you view, the site that referred you, your browser and device type, approximate location derived from your IP address, and a randomly generated identifier stored in the _ga and _ga_<container ID> cookies so that repeat visits and a single browsing session can be recognized. We also send it a small number of specific events: page views, account sign-ups, logins, clicks on our sign-up and Google Play buttons, starting a subscription checkout, and a few product milestones (for example, that a free calculator was used, that onboarding or an import finished, or that a Runway Reset was completed). Those milestones carry only counts and categories, such as which calculator or how many bills were added, never an amount. We use this only to understand how people find and use the Service — which pages work, where people get stuck, and whether new users are able to get set up. We do not send Google Analytics your financial inputs, balances, transactions, or the contents of your account, and query strings on in-app links (which can carry password-reset and sign-in tokens) are stripped before a page view is recorded. We do not use it for advertising, remarketing, or cross-site tracking. You can opt your browser out at any time — see the Cookie Policy for how.
    • Analytics data (our own servers): we also count page views ourselves, without cookies and without a third party. For each page view we store the page path (with any query string removed), the referring website's hostname (never the full referring URL), whether the request came from a search-engine crawler, and a one-way hash of your IP address combined with your browser's user agent. That hash is re-salted every day, so it lets us count how many distinct people visited today and cannot be used to recognize you tomorrow or to work backwards to your IP address, which we do not store. We do not record your account, your name, or your email address alongside a page view, so this data cannot tell us which pages a particular person looked at. These records are deleted automatically after 90 days. Opting out of analytics for a browser (see the Cookie Policy) also switches off the in-app part of this counting.
    • Product funnel events (our own servers): in the same way, without cookies and without a third party, we record a short list of anonymous steps: that a public page was the first one viewed in a visit, that a free calculator was started, completed or its result shown, that a free tool's results were printed or downloaded, or a free spreadsheet template was downloaded (and in which format, such as CSV, calendar file or spreadsheet), that a call-to-action button was clicked, that a plan was saved from a free tool or set up during onboarding, that the sign-up form was shown, that an account was created, and that onboarding was finished. Each record holds only the step's name, the page, which calculator (if any), the first page of that visit and the kind of site that referred it (for example "search engine" or "social media", never the site's address), the name of one of our own campaign links if you arrived through one, and the same daily re-salted hash described above. Nothing you type into a calculator is ever sent, files you download are either made in your browser or are the same blank template for everyone, and nothing you type into them is uploaded, and no account, name or email address is stored with these records. To link a sign-up to the page a visit started on, your browser remembers that first page in session storage until the tab is closed. These records are deleted after 90 days, and opting out of analytics for a browser switches them off as well.
    • Save My Plan (only if you choose it): the paycheck calendar, the rent split calculator and the paycheck allocation calculator offer a "Save My Paycheck Plan" button. Nothing is kept unless you press it and then choose to continue. If you do, the inputs you entered (your pay schedule, take-home pay, bills and their due dates, savings goals with their targets and per-paycheck amounts, and any balance you typed) are stored in your browser's local storage (pr_saved_plan) on that device only, together with the first page of your visit and the kind of site that referred it. They are not sent to us at that point. They expire 72 hours after you save them and are deleted from your browser the next time any Pocket Runway page is opened there after that (a browser cannot delete them on a timer while Pocket Runway is closed), and also when you finish setting up your account, when you choose "Start without it", or when you sign out. One exception: if you confirm savings goals during setup but your account does not include savings goals until you subscribe, only those confirmed goals (each goal's name, target, amount per paycheck and any balance you confirmed) are kept in your browser's local storage (pr_pending_goals), linked to your account, so you can set them up once your subscription is active. They are not sent to us until you confirm them again at that point, and they expire after 7 days and are deleted the next time any Pocket Runway page is opened in that browser after that, and also when you set them up or choose "Don't set these up", or when you sign out. They are never shown to a different account on the same browser: if another account uses Pocket Runway there, they are deleted instead. They do not follow you to another device. During account setup you review each item, and only what you confirm is saved to your account, where it is kept and deleted like any other plan details you enter. The calculator's projected totals are never imported, and a balance typed into a calculator, including a savings goal balance, is never used unless you confirm it again during setup. While a saved plan is in your browser, our sign-up and setup funnel events record which of those tools it came from (the tool's name only). If you set up a saved plan while creating your account, your account also records which tool it came from (again, the tool's name only, never what you entered), so we can see which free tools lead people to keep using Pocket Runway. It is removed from our active database when you delete your account and, like the rest of your account data, may remain in backups for up to 30 days afterwards (see Data Retention).
    • Which of our links brought you here (sign-up attribution): if you arrive through one of our own campaign links (an address beginning pocketrunway.com/go/) and create an account within 30 days, we store the short name of that link and when you clicked it on your account. Only the first of our links you clicked counts, and only for a new account; an existing account is never changed. Opting out of analytics for a browser (see the Cookie Policy) also switches this off. We use it to learn which of our marketing links lead to people signing up and using the Service. It is not your browsing history: we do not record the other pages you visited, and it is not linked to our page-view records. The Cookie Policy describes the cookie that carries it and how to switch it off.
    • Error and performance data: when the Service encounters errors or performance issues, we collect technical diagnostic information through Sentry (a third-party error monitoring service). We remove your email address and IP address from error reports before they are sent; an error report can still include technical details of the page or request that failed.

    Optional: Bank Connection Data

    If you choose to link a bank account via our Plaid integration, Plaid will collect and provide us with account balance and transaction data. Plaid's use of this data is governed by Plaid's own privacy policy at plaid.com/legal/#end-user-privacy-policy. You may disconnect linked accounts at any time from the Accounts page in the Service.

    Optional: ChatGPT Integration

    If you choose to connect Pocket Runway to ChatGPT, OpenAI receives the figures you ask for. This happens only after you connect the integration, and only in response to a question you ask in ChatGPT.

    What is sent: your safe-to-spend amount and daily allowance, your current checking balance, your pay-period summary, the names, amounts and dates of bills, transfers and savings contributions in your plan, and the result of any hypothetical purchase you ask about. What is not sent: your individual transaction history, your account numbers, your bank credentials, and your Pocket Runway password.

    The connection is read-only. ChatGPT cannot log spending, move money, make payments, or add to, edit or delete anything in your plan. You approve exactly what it may read when you connect it, and you can disconnect it at any time from ChatGPT; signing out of Pocket Runway or changing your password also ends the connection immediately.

    Once the figures reach ChatGPT they are held in your ChatGPT conversation and handled under OpenAI's own privacy policy at openai.com/policies/privacy-policy, not this one. Deleting a Pocket Runway account does not delete a ChatGPT conversation.

    2. How We Use Your Information

    We use your information to:

    • Provide, maintain, and improve the Service
    • Process subscriptions and payments
    • Send transactional emails (verification, password reset, billing receipts, trial expiration reminders)
    • Monitor for errors and performance issues
    • Respond to your support requests
    • Detect and prevent fraud or abuse
    • Comply with legal obligations

    We do not use your financial data for advertising, sell your data to third parties, or share it with data brokers.

    3. How We Share Your Information

    We share your information only with the following categories of third-party service providers, each bound by their own privacy and security obligations:

    • Stripe — payment processing (stripe.com/privacy)
    • Resend — transactional email delivery (resend.com/legal/privacy-policy)
    • Sentry — error monitoring (sentry.io/privacy)
    • Google — website and product analytics via Google Analytics (policies.google.com/privacy; see also How Google uses information from sites or apps that use our services). Google receives the analytics data described in section 1 — page views, referrer, device and browser details, approximate location from IP address, and the sign-up, login, CTA-click, checkout and product-milestone events we send. It does not receive your financial data.
    • ipwho.is — approximate location (city, region, country) looked up from a stored IP address, for our internal account administration and fraud review (ipwho.is)
    • Railway — application hosting (railway.app/legal/privacy)
    • Plaid — optional bank account connections (plaid.com/legal/#end-user-privacy-policy)
    • Anthropic — AI-powered insight generation (anthropic.com/privacy). To generate insights, we send a summary of your financial data: balances, spending totals and the descriptions you gave transactions, and the names, amounts and dates of bills and goals. To suggest whether a bank-reported transaction matches one you entered, we send the bank's merchant name and your description, amount and date for the few entries involved. We do not send your name, email address, password, bank credentials or account numbers.
    • OpenAI — optional ChatGPT integration (openai.com/policies/privacy-policy). If you connect Pocket Runway to ChatGPT, OpenAI receives the derived figures described in section 1 — your safe-to-spend amount, daily allowance, current checking balance, pay-period summary, and the names, amounts and dates of the bills, transfers and savings contributions in your plan — so that ChatGPT can answer the question you asked. This happens only if you connect the integration and only in response to something you ask. We do not send your individual transaction history, account numbers, or bank credentials. The connection is read-only and can be disconnected at any time.

    We may also share information:

    • To comply with applicable laws, court orders, or government requests
    • To protect our rights, property, or safety, or that of our users
    • In connection with a merger, acquisition, or sale of business assets, in which case users will be notified before their data is transferred

    4. Data Retention

    We retain our own page-view records for 90 days, after which they are deleted automatically. We retain your account and financial input data for as long as your account is active. If you delete your account, we will delete your data within 90 days, except where retention is required by law (e.g., financial records for tax purposes). Backups may persist for up to 30 days after deletion. Stripe retains payment records as required by financial regulations independent of our retention policy. Figures sent to ChatGPT through the optional integration are retained by OpenAI under its own policy and are not deleted by deleting your Pocket Runway account; remove them by deleting the relevant ChatGPT conversation.

    5. Your Rights

    Depending on your location, you may have the right to:

    • Access the personal information we hold about you
    • Request correction of inaccurate information
    • Request deletion of your information ("right to be forgotten")
    • Request a copy of your information in a portable format
    • Object to or restrict certain processing of your information
    • Withdraw consent at any time

    To exercise any of these rights, email us at support@pocketrunway.com. We will respond within 30 days.

    California Residents (CCPA / CPRA)

    California residents have additional rights, including the right to know what personal information we collect and to request its deletion. We do not sell personal information. To exercise CCPA rights, contact us at the email above.

    European Residents (GDPR)

    If you are in the European Economic Area, the legal basis for processing your information is the performance of our contract with you (providing the Service), your consent (for optional features), and our legitimate interests (security, fraud prevention, service improvement).

    6. Security

    We take reasonable technical and organizational measures to protect your information, including:

    • Encryption of data in transit (HTTPS/TLS)
    • Hashed password storage (never plain text)
    • Access controls limiting who can view user data
    • Use of established third-party services (Stripe, Plaid) for sensitive data handling

    No system is completely secure. You are responsible for keeping your password confidential and notifying us of any unauthorized access.

    7. Children's Privacy

    The Service is not directed to individuals under 18 years of age. We do not knowingly collect information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly.

    8. Cookies and Tracking

    We use cookies and similar technologies to operate the Service. Cookies are small text files stored on your device that help us keep you logged in, remember preferences, and understand how the Service is used.

    We also set first-party analytics cookies (_ga and _ga_<container ID>) through Google Analytics, as described in section 1. These identify a browser, not a person, and are used to measure how the Service is used. We do not use cookies for advertising, remarketing, or cross-site tracking.

    Our own page-view counting, also described in section 1, sets no cookie at all and stores no identifier that lasts beyond a single day. Arriving through one of our own campaign links sets one first-party cookie, pr_first_touch, which holds only the name of that link and when you clicked it, can be read only by our servers, and expires after 30 days; it is used only for the sign-up attribution described in section 1.

    You can control cookies through your browser settings, though disabling them may affect Service functionality. You can also switch off analytics for a browser without changing any other setting by visiting pocketrunway.com/?ga_opt_out=1. Our Cookie Policy lists every cookie and local-storage item we use and how to manage each of them.

    9. International Data Transfers

    The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your jurisdiction.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice in the Service at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

    11. Contact

    If you have questions about this Privacy Policy, contact us at:

    Email: support@pocketrunway.com