1. Information We Collect

When you use RunApps, we collect the following types of information:

Account Information: Email address, name, and password when you register. If you sign in via Google or GitHub OAuth, we receive your public profile information from those providers.
Payment Information: Billing details are processed securely through Stripe. We do not store your full credit card numbers on our servers.
Usage Data: AI usage (tokens and calls), the apps you open, and activity logs.
Files: Files you upload, and files apps save on your behalf, are stored in cloud storage associated with your account.
Technical Data: IP address, browser type, and device information collected automatically for security and service improvement.

2. How We Use Your Information

Provide and operate the service, including serving apps and processing AI model requests on your behalf.
Process payments and track usage for billing.
Keep usage and billing history so you can see what you were charged for.
Send transactional emails related to your account, billing, or service updates.
Improve our platform, troubleshoot issues, and ensure service security.

3. AI Data Processing

When an app makes an AI request, the request is sent through our gateway to third-party model providers (such as OpenAI, Anthropic and Google) for processing. We transmit only the data needed to generate a response and do not use it to train AI models. Apps are built by independent creators; the data an app sends is determined by that app.

4. Data Sharing

We do not sell your personal information. We share data only with:

LLM Providers: OpenAI, Anthropic, Google or other AI model providers, to process AI requests made by the apps you use.
Payment Processors: Stripe and PayPal for payment processing.
Law Enforcement: When required by applicable law or legal process.

5. Data Retention

Account data is retained as long as your account is active. Files persist until you delete them, remove the app that saved them, or delete your account. You may request deletion of your account and associated data by contacting us at [email protected].

6. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), JWT-based authentication, and isolated Docker instances per user. However, no system is 100% secure, and we cannot guarantee absolute security of your data.

7. Cookies

We use secure, HttpOnly cookies to store your authentication token. User preferences may be stored in your browser's local storage. We do not use third-party tracking cookies.

8. Contact

If you have questions about this Privacy Policy, contact us at [email protected].