Trust
It's math, not AI.
The whole method, in four steps.
Step 1
It starts with your paydays and bills
We take today's balance and walk forward day by day, adding pay when it lands and taking out bills when they're due. Same numbers in, same answer out, every time.
Step 2
Dates land the way they really do
A bill comes out on the date you gave unless you set it to move. Pay and pensions land early off a weekend or holiday. Most other income lands the next business day.
Step 3
If income moves, we show low, typical, and high
Shift work, tips, commission and gig pay don't fit one line. So you see what a slow stretch would do, not just an average.
Step 4
You pick the number that feels safe
Tell us the lowest balance you're comfortable with. We show your low point, the date, and how far off it is. Nothing is ever blocked or judged.
What it isn't
No AI guessing what you'll spend.
Who can reach anything
| Control | What it means |
|---|---|
| Accounts come with Plus | The forecast works without an account. An account comes with Plus or an access code, and keeps your forecast on every device you sign into, even if a browser clears it. |
| Row-level isolation | Every account's records are scoped to that account at the database level, so one account's data is not reachable from another. |
| Least privilege | Administrative access is limited to authorized team members and used only for support and incident response. There are no shared logins. |
| Encryption in transit and at rest | All traffic is served over HTTPS. After a backup reaches Horizon Runway's server, it is encrypted with a per-account key for database storage, on top of the platform's at-rest encryption. This is not end-to-end encryption: Horizon Runway's server decrypts a copy to serve sync. |
- Accounts come with Plus
- What it meansThe forecast works without an account. An account comes with Plus or an access code, and keeps your forecast on every device you sign into, even if a browser clears it.
- Row-level isolation
- What it meansEvery account's records are scoped to that account at the database level, so one account's data is not reachable from another.
- Least privilege
- What it meansAdministrative access is limited to authorized team members and used only for support and incident response. There are no shared logins.
- Encryption in transit and at rest
- What it meansAll traffic is served over HTTPS. After a backup reaches Horizon Runway's server, it is encrypted with a per-account key for database storage, on top of the platform's at-rest encryption. This is not end-to-end encryption: Horizon Runway's server decrypts a copy to serve sync.
If something goes down
| Arrangement | What it means |
|---|---|
| Nothing to restore, for most people | Because forecasts are device-local by default, a platform outage does not take a person's data with it. |
| Managed backups | The cloud database is backed up by the managed platform. |
| Portable by design | One tap exports a plain JSON copy of everything. If Horizon Runway disappeared tomorrow, the data still opens in a text editor. |
- Nothing to restore, for most people
- What it meansBecause forecasts are device-local by default, a platform outage does not take a person's data with it.
- Managed backups
- What it meansThe cloud database is backed up by the managed platform.
- Portable by design
- What it meansOne tap exports a plain JSON copy of everything. If Horizon Runway disappeared tomorrow, the data still opens in a text editor.
Shorter questions about how the forecast works? Read the answers.