Trust
It's math, not AI.
The whole method, in five steps.
Step 1
It starts with your paydays and bills
We take today's balance and walk forward day by day, adding pay when it lands and taking out bills when they're due. Same numbers in, same answer out, every time.
Step 2
Bills land the way banks land them
A bill due Saturday clears Monday. We move it the way your bank would, and still show you the original due date.
Step 3
When we can't be exact, we say so
If several things hit the same day, we show a range instead of one confident number, and we assume the unfriendly version: money out early, money in late.
Step 4
If income moves, we show low, typical, and high
Shift work, tips, commission and gig pay don't fit one line. So a yes means yes even on a slow week — not yes on average.
Step 5
You pick the number that feels safe
Tell us the lowest balance you're comfortable with. We show your low point, the date, and how far off it is. Nothing is ever blocked or judged.
What it isn't
No AI guessing what you'll spend. No spending categories.
Who can reach anything
| Control | What it means |
|---|---|
| Accounts are optional | Horizon Runway works fully without an account. Signing in exists to sync devices and survive a cleared browser. |
| Row-level isolation | Every stored record is scoped to its owner at the database level, so one account's data is not reachable from another. |
| Least privilege | Administrative access is limited to authorized team members and used only for support and incident response. There are no shared logins. |
| Encryption in transit and at rest | All traffic is served over HTTPS. After a backup reaches Horizon Runway's server, it is encrypted with a per-account key for database storage, on top of the platform's at-rest encryption. This is not end-to-end encryption: Horizon Runway's server decrypts a copy to serve sync. |
- Accounts are optional
- What it meansHorizon Runway works fully without an account. Signing in exists to sync devices and survive a cleared browser.
- Row-level isolation
- What it meansEvery stored record is scoped to its owner at the database level, so one account's data is not reachable from another.
- Least privilege
- What it meansAdministrative access is limited to authorized team members and used only for support and incident response. There are no shared logins.
- Encryption in transit and at rest
- What it meansAll traffic is served over HTTPS. After a backup reaches Horizon Runway's server, it is encrypted with a per-account key for database storage, on top of the platform's at-rest encryption. This is not end-to-end encryption: Horizon Runway's server decrypts a copy to serve sync.
If something goes down
| Arrangement | What it means |
|---|---|
| Nothing to restore, for most people | Because forecasts are device-local by default, a platform outage does not take a person's data with it. |
| Managed backups | The cloud database is backed up by the managed platform with point-in-time recovery. |
| Portable by design | One tap exports a plain JSON copy of everything. If Horizon Runway disappeared tomorrow, the data still opens in a text editor. |
- Nothing to restore, for most people
- What it meansBecause forecasts are device-local by default, a platform outage does not take a person's data with it.
- Managed backups
- What it meansThe cloud database is backed up by the managed platform with point-in-time recovery.
- Portable by design
- What it meansOne tap exports a plain JSON copy of everything. If Horizon Runway disappeared tomorrow, the data still opens in a text editor.
Shorter questions about how the forecast works? Read the answers.