Infrastructure
- Platform
- Hosting, network, patching, physical security.
- Us
- Choosing the platform and configuring it correctly.
- You
- —
Trust
Your numbers stay yours.
Horizon Runway is a calculator, not a bank.
Horizon Runway is not a bank, broker, or financial advisor. We don't hold or move money, and we don't guarantee future balances.
Where does my money data live?
Balances, bills, income, and scenarios are stored in your own browser by default, and never leave it unless you turn on cloud backup.
Backup is optional: one copy of the same forecast, held on Lovable Cloud and reachable only through your signed-in account. Cloud sync is optional and encrypted in transit and at rest. Our server can decrypt your cloud copy to serve sync, so it is not end-to-end encrypted. You can delete that copy from Settings at any time.
The only other things we hold are your email address — plus the account identifier Google returns if you sign in with Google — anything you write to us and our replies, the records the hosting platform keeps whenever a page loads, and crash reports with personal details stripped out, and those only if you switch them on.
What do you never have?
No bank username or password. There is no field for one anywhere in Horizon Runway, and Horizon Runway does not connect to financial institutions today. If that ever ships it will be opt-in, and this page will change first.
No card numbers — payments are handled entirely by Stripe, and card details never reach us. No Social Security or government ID numbers. No credit reports or scores.
No advertising trackers and nothing that follows you between sites. Visitor analytics is switched off at the platform level, so no page-view analytics script, tracking cookie, or session identifier runs on this site. Horizon Runway is not funded by advertising and does not sell or share your data.
How do I get it out, or delete it?
Settings → Save your forecast hands you a plain file of everything you entered.
Settings → Clear everything removes the copy on your device and the cloud copy. Deleting your account closes the account, removes the cloud copy, and we email a confirmation; the platform's stored backups of it are gone within 30 days.
Messages you send us are kept for up to 24 months so we can follow a conversation, and deleted sooner if you ask — email hello@horizonrunway.com and we delete the records held for that address, within the timeframe applicable law requires. The records the hosting platform keeps are held for a short rolling period and used only for keeping the service up and handling abuse.
What the saved file contains
- • Every account, bill, habit, and scenario you entered.
- • Today's forecast, row by row.
- • The version of the math that built it, and the settings it used.
Plain JSON, readable in any text editor.
Who else touches it?
| Vendor | Purpose | What it can see | When |
|---|---|---|---|
| Lovable | Application hosting and content delivery. | Standard web request metadata: IP address, browser identification string, timestamps. | Always |
| Lovable Cloud | Managed database, authentication, and optional cloud backup. | Account email, and forecast data only for people who turn cloud backup on. Encrypted in transit and at rest; not end-to-end encrypted because Horizon Runway's server serves sync. | Always |
| Resend | Transactional email delivery — invites, replies, account mail. | Recipient email address and the contents of the message being sent. | Always |
| Optional sign-in with Google. | Only for people who choose it: the email address and account identifier Google returns. | Only if you use it | |
| Stripe | Payment processing for Plus subscriptions. | Billing details entered directly with Stripe. Horizon Runway receives a subscription status, never card data. | Only if you use it |
- Lovable
- PurposeApplication hosting and content delivery.
- What it can seeStandard web request metadata: IP address, browser identification string, timestamps.
- WhenAlways
- Lovable Cloud
- PurposeManaged database, authentication, and optional cloud backup.
- What it can seeAccount email, and forecast data only for people who turn cloud backup on. Encrypted in transit and at rest; not end-to-end encrypted because Horizon Runway's server serves sync.
- WhenAlways
- Resend
- PurposeTransactional email delivery — invites, replies, account mail.
- What it can seeRecipient email address and the contents of the message being sent.
- WhenAlways
- PurposeOptional sign-in with Google.
- What it can seeOnly for people who choose it: the email address and account identifier Google returns.
- WhenOnly if you use it
- Stripe
- PurposePayment processing for Plus subscriptions.
- What it can seeBilling details entered directly with Stripe. Horizon Runway receives a subscription status, never card data.
- WhenOnly if you use it
We keep this list current. If we add a company that can see customer data, we update this page, and organizational customers on a signed agreement get notice before the change takes effect.
Who is responsible for what
The split between the hosting platform, us, and youShow
Data storage
- Platform
- Encryption at rest, backups, availability.
- Us
- Keeping each account's data reachable only from that account, and keeping stored data minimal.
- You
- Deciding whether to enable cloud backup at all.
Access
- Platform
- Authentication service and session handling.
- Us
- Which routes require an account, and admin discipline.
- You
- Protecting their own sign-in and device.
Financial decisions
- Platform
- —
- Us
- An accurate forecast from the numbers entered.
- You
- The numbers entered, and the decision made from them.
What we have not done
Horizon Runway does not hold SOC 2, ISO 27001, PCI-DSS, HIPAA, or GDPR audit status. Those audits describe how a company protects the customer data it holds. If your institution requires audited software regardless, Horizon Runway isn't the right fit yet.
There is no third-party penetration test of Horizon Runway. None has been done yet, and one is planned.
This page is maintained by Horizon Runway LLC to answer common security and privacy questions about Horizon Runway. It describes our own practices and the platform features we rely on. It is not an independent audit, a certification, or a legal guarantee.
Report a security issue
Write to hello@horizonrunway.com with “Security report” in the subject line. Test only against your own data, do not degrade the service for others, and give us a reasonable window to fix an issue before publishing it.
The detail behind the promise
Hosting, vendors, and how long each record is kept live in the privacy policy. What Horizon Runway is and isn't lives in the terms.
Shorter questions about how the forecast works? Read the answers.