Privacy

By default, everything lives in your browser’s local storage, not on our servers.

• Money data you enter: balances, income, bills, habits, plans, and scenarios.
• A local backup copy, so a partial write can’t lose your work.
• Your onboarding draft, small preference flags, and a local record of the Terms version, timestamp, and screen where you accepted.

Clearing browser data removes local browser data. Using “Clear everything” in Settings removes your forecast data stored on this device and, if you are signed in to a Plus account, the associated cloud forecast copy. Without an account, there is no server forecast copy to restore.

Horizon Runway Plus includes cloud backup and sync across devices. Backup begins automatically when you sign in to a Plus account. Core forecasting works without an account or Plus.

If you create an account, we store your email address. For Horizon Runway Plus, cloud backup and sync begin automatically when you sign in, and we store one copy of your money data on Lovable Cloud. It is sent over HTTPS. After it reaches our server, it is encrypted with a key derived for your account for database storage, on top of the platform’s encryption at rest. Access controls restrict the row to your signed in account. It is not end to end encrypted: our server can decrypt the copy while serving your own sync request. We do not analyze the cloud copy for advertising or sell it, and you can wipe the cloud copy from Settings at any time. If an account exists, your Terms acceptance record may also be mirrored to the account. If you purchase Horizon Runway Plus, the transaction is processed through Stripe Managed Payments, provided by Sold through Link, LLC, as merchant of record. The payment service handles the payment details you enter and the customer billing transaction, including receipts, refunds, cancellations, and subscription management. Horizon Runway receives and stores a Stripe customer identifier and subscription status, but not your full card number. We also store a checkout acceptance record tied to your user ID showing the Terms version, Billing Terms version, selected plan, price shown, currency, acceptance surface, and timestamp.

• Bank credentials or bank connections; Social Security numbers, government identifiers, credit reports, or credit scores. Horizon Runway does not receive or store your full payment card number. Stripe Managed Payments, provided by Sold through Link, LLC, handles the payment transaction as merchant of record.
• Advertising pixels, cross site trackers, session recorders, or third party behavioral analytics. Lovable visitor analytics is disabled on the published site. Under the current product design, your financial inputs are not sent to an AI model.

We do not sell your personal information, share it with data brokers, or share it for cross context behavioral advertising. We do not allow third parties to collect information through Horizon Runway about your activity over time and across unrelated websites or services for targeted advertising. Because Horizon Runway does not use that kind of cross site tracking, browser Do Not Track and Global Privacy Control signals do not change our current practices.

Share anonymous usage in Settings is off by default. When on, Horizon Runway keeps a local log of event names and timestamps, with no amounts, descriptions, dates, or account details. You can review or clear the log, and turning it off wipes it instantly.

Sending that log to us takes a second, separate opt in. Until you turn it on, the log stays on this device. When it is on, Horizon Runway posts the same event names and timestamps you can see in Settings, along with a random installation identifier that is not tied to you or your account and resets whenever you clear browser data.

Lovable. Horizon Runway is served by Lovable, which processes standard request metadata such as IP address, user agent, requested URL, and timestamp. Your forecast contents stay on your device unless you sign in to a Plus account. For Plus users, cloud backup and sync then begin automatically. Lovable visitor analytics is disabled on the published site. Lovable also receives a scrubbed diagnostic report only if you separately turn on crash reporting in Settings.

Lovable Cloud. Stores account email and authentication information. For Plus users, it stores the cloud copy created automatically when the account signs in, along with account linked records such as Terms acceptance, checkout acceptance, and subscription status when applicable. It also receives anonymous usage events if you turn on both usage opt ins.

Stripe Managed Payments, provided by Sold through Link, LLC. Serves as merchant of record for Plus transactions and handles payment details, receipts, refunds, cancellations, and subscription management. Horizon Runway receives subscription status and a customer identifier, not your full card number. Google Workspace. Provides business email for hello@horizonrunway.com and processes sender addresses, message contents, and related email metadata. Resend. Sends transactional email and receives the recipient address and message contents. Cloudflare. Provides network delivery and security infrastructure and may process standard request metadata such as IP address, user agent, requested URL, and timestamp. Fonts. Instrument Sans and Instrument Serif are bundled with the app. No third party font content delivery network is contacted.

Crash reporting is off by default. If you turn it on in Settings and Horizon Runway catches a crash, it sends the error type, a scrubbed message, up to five stack frames, the current page path, locale, and app version to our hosting platform. It does not contain balances, transactions, income, form values, or anything you’ve typed. Turning it off clears any queued report and stops future diagnostic uploads.

Data that reaches our servers is deleted on the following schedule:

• Anonymous usage events (only if you turned both usage opt ins on), 6 months.
• Coarse region counts for a page view (country, region, and city, with no identifier), 6 months.
• Anonymous “I’d want this” taps, such as the bank sync waitlist toggle, 1 year.
• Delivery history for replies we sent you, 1 year.
• Short lived counters that keep forms from being flooded, 2 days.

Messages you send us, including a waitlist signup, an access request, a press or contact message, or feedback on an invite, are kept until you ask us to remove them. Ask through Support and we will delete the records tied to that address. Account and subscription records are kept as needed to provide the account and paid service, process cancellations or refunds, prevent abuse, and satisfy legal or accounting obligations. Paid checkout acceptance records are retained for the longer of three years from acceptance or one year after the applicable subscription ends. After that period, we delete those acceptance records unless continued retention is reasonably necessary for a legal hold, dispute, chargeback, fraud or security investigation, or another legal or accounting obligation. Stripe may retain payment records under its own privacy practices.

From Settings, you can export your ledger, clear forecast data, and, if you have an account, delete the account. “Clear everything” removes the local forecast and the cloud forecast copy if one exists. Signing out does not itself delete a cloud copy. Deleting your account closes the account and removes the cloud forecast copy, subject to the limited records described above. Depending on where you live, applicable law may give you additional rights to access, correct, or delete personal information; request them through Support or hello@horizonrunway.com. Horizon Runway is a general audience service and is not directed to children under 13. You must be at least 18 to create an account or purchase Plus. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it.

We may update this page as Horizon Runway changes. This Privacy Policy is version 2026.09.18. Material changes will be surfaced in the app before they apply to future use, and we will provide any additional notice required by applicable law. Questions? Reach us through Support or at hello@horizonrunway.com.