Privacy Policy

1. What we collect

Nothing. We do not receive, store or process any personal data about you. We have no servers, no database, no logs and no analytics pipeline. The developer of Runs Out has no technical means of seeing what you track in the app, how often you open it, or that you have installed it at all.

This is not a promise about what we choose to do with data we hold. It is a description of an app that has nowhere to send it. The one exception is a share code you create yourself, and even then the copy is encrypted with a key we never receive (section 4).

2. What the app stores, and where

Runs Out stores the things you type and attach so it can show them back to you and remind you about them. That content stays inside the app's own storage on your device:

• Items: title, category, expiry date, emoji and colour, notes.
• Optional details: purchase or issue date, price and currency, retailer or issuer, serial / policy / reference number, country.
• Attachments: up to three photos and one PDF per item.
• Settings: your reminder hour, the "hide titles in notifications" switch, app-lock preference, and widget preferences.

None of this is transmitted to us. It lives in the app's private container on your iPhone or iPad, protected by iOS's standard file protection, and (if you use it) in your own iCloud. The only thing that ever travels further is an item you deliberately share with a code, and that copy is encrypted (section 4).

3. iCloud sync

If you are signed in to iCloud, Runs Out mirrors your items into the private database of its iCloud container so that your iPhone and iPad show the same list. This uses Apple's CloudKit service and your own Apple Account storage. We are not a party to that transfer: we cannot read, query, export or delete anything in your private database, and no copy is sent to us. The only copy that goes anywhere else is one you create yourself with a share code (section 4).

Data held in iCloud is handled by Apple under Apple's Privacy Policy and iCloud terms. If you sign out of iCloud, or turn Runs Out off in iOS Settings ▸ [your name] ▸ iCloud, the app keeps working entirely on the device and simply stops syncing.

4. Sharing an item with a code

Runs Out Pro can turn one item into a twelve-character code that you send to someone. This is the only part of the app that puts anything of yours somewhere another person can reach it, so it is worth being exact about how it works:

• You decide, every time. A code exists only because you tapped Share on that one item. Nothing is ever shared automatically, and an item with no code has never left your device.
• The code is the key. The copy is uploaded to the app's iCloud container as encrypted bytes, and the key is derived from the code itself. The code never reaches us, so we cannot read what you shared, and neither can anyone who does not have it.
• Photos and PDFs are never included. Neither is the reference, serial or policy number, unless you switch that on before creating the code.
• It expires. A code stops working 14 days after you create it. You can end it sooner with Stop sharing, which deletes the copy immediately, and Erase all data ends every code you have created.
• It is a copy, not a link. Whoever uses the code gets their own item. Nothing you change afterwards reaches them, and nothing they do reaches you.

A shared copy carries nothing about you: no name, no device, no Apple Account, nothing that ties it to your other items. CloudKit does stamp every record with an opaque identifier for whoever created it; it resolves to no name, email or Apple Account, and we never look at it. If you never create a code, nothing about your items ever leaves your device and your own private iCloud.

5. Photos, scans and PDFs

Photos you pick, documents you scan with the in-app scanner, and PDFs you attach are copied into the app's own storage and treated exactly like the rest of your items: on the device, and in your private iCloud if sync is active. They are not uploaded to us, not sent to any third party, not processed by any remote service, and never included in a share code.

Runs Out does read your scans and PDFs, for exactly one purpose: to suggest an expiry date. Text recognition (OCR) on images uses Apple's Vision framework, the text layer of an attached PDF is read with PDFKit, and on a passport or ID card the machine-readable zone is parsed as well. All of it runs on your device. Nothing is uploaded to us, sent to any third party, or handed to a remote service or cloud OCR. And it stays a suggestion: the date is pre-filled for you to confirm, and it is only stored once you do.

6. Notifications

All reminders are local notifications scheduled on your device by iOS. There is no push server, so no reminder ever leaves your iPhone or iPad. Notification text contains the item's name and how many days remain. It never contains a reference, policy or serial number. If you switch on "hide titles in notifications", alerts fall back to a neutral wording such as "1 item expires in 7 days".

7. Permissions the app may ask for

• Notifications: asked the first time you save an item, so reminders can be scheduled. Decline and the rest of the app still works.
• Camera: only when you open the document scanner. Captured images go into the item you are editing, nowhere else, and they are read on the device to suggest an expiry date for you to confirm.
• Photo library: only when you pick a photo, via Apple's picker. The app receives the picture you chose and no access to the rest of your library.
• Face ID / Touch ID: only if you turn on the app lock. Authentication happens through iOS; the app is told "yes" or "no" and never sees biometric data.
• Calendars: write-only, and only if you switch on "Mirror to Calendar". Runs Out creates its own "Runs Out" calendar and adds your expiry dates to it; it never reads your own calendars.

Runs Out never requests your location, contacts, microphone, health data or advertising identifier.

8. Purchases

Runs Out Pro is a one-time in-app purchase processed entirely by Apple through the App Store. Apple tells the app whether the purchase is active; that is the whole of the exchange. We never receive or see your name, payment card, billing address or Apple Account details. Refunds, receipts and purchase history are handled by Apple under Apple's terms.

9. What we never do

• No advertising, ad networks or ad identifiers.
• No analytics, telemetry, crash-reporting SDKs, attribution or fingerprinting.
• No third-party SDKs at all: the app is built with Apple frameworks only.
• No accounts, no email addresses, no profiles, no user identifiers.
• No selling, renting or trading of data: we hold none to sell. Sharing an item is something you do, deliberately, to a person you choose.
• No tracking across apps or websites, and nothing that would require App Tracking Transparency consent.

10. Keeping and deleting your data

Your data stays for exactly as long as you keep it, because you are the only one holding it.

• Deleting an item removes it from the device and from your iCloud copy.
• Settings ▸ Erase all data removes everything the app has stored, locally and in your private iCloud database, and ends any share codes you had created.
• Deleting the app removes its on-device storage. If you had iCloud sync on, the synced copy can remain in your Apple Account. Use Erase all data before deleting the app.

There is no “delete my account” request to send us, because there is no account and no copy of your data on our side beyond a share code you created, which you can end at any time and which expires on its own.

11. Children's privacy

Runs Out is a general-audience utility. It is not directed at children, contains no ads, no social features, no feed and no way for anyone to contact you through the app. A share code is one-way and one-off: you hand it to someone yourself, and it carries nothing about you. Since we collect no data from anybody, we do not knowingly or unknowingly collect data from children.

12. Your rights

Laws such as the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data a company holds about you. We hold none, so there is nothing for us to disclose, correct or erase. A share code you create leaves an encrypted copy in the app's iCloud container until it expires; it is not linked to you and we cannot read it, and Stop sharing deletes it at once. You already have direct and complete control: the data is on your device, and Pro can export all of it to CSV at any time.

13. Changes to this policy

If this policy changes, the effective date at the top changes with it and the current version always lives at this address. Material changes will also be noted in the app's What's New. We will never quietly start collecting data under an unchanged policy.

14. Contact

Questions about privacy, or anything else:

jyl.iosapp@gmail.com