Privacy Policy

App: Runs Good Operator: Advanced Performance Solutions LLC Contact: support@runsgood.app Effective date: to be set at launch

Draft. Runs Good is in development and has no public release yet. This policy describes how the app is built and will take effect, with a set date, before the first release.

The one unusual thing, up front

Runs Good is a maintenance logbook that belongs to the machine, not to you. When you sell a machine and the buyer claims it, the machine's service history — entries, meter readings, settings, receipts — transfers to the buyer as part of the machine's record. That is the product.

Because of that, deleting your account does not delete a machine's history. Deletion permanently erases your personal information (email, login, handle) and disconnects you from every machine, but the maintenance records themselves survive, because after a sale they are also the buyer's record of their machine. Records you created carry an internal marker that afterwards resolves only to “a previous owner” — not to your name, email, or anything else about you.

What we collect

Account: your email address and a password (stored only as a hash). A display handle is generated for you. We do not ask for your name, phone number, or address.
Machines: VIN, year, make, model, category, drivetrain, engine, an optional exact-model designation, and a nickname you choose.
Maintenance records: service entries, notes, meter readings, setting changes, parts, and the dates involved. The recording timestamp is set by our server and entries are append-only — corrections are new entries that reference the old one, and both stay visible.
Photos you choose to add: receipt photos attached to service entries, and photographs or PDFs of your machine's manual if you use the supply-your-own-manual feature. Every photo is re-encoded on your phone before upload so that camera metadata — including the location where it was taken — never leaves your device. We verified this on the wire: what survives is orientation and resolution, nothing else.
Optional: your weight with gear, if you enter it for suspension setup suggestions.
Push notifications, if you allow them: a device push token, so we can tell you when a safety recall matches one of your machines. It is tied to the account signed in on that phone and removed when you sign out.
Records about our service: for the AI features, a ledger of each request's token usage and cost, used for quota enforcement and abuse prevention.

What we deliberately do not collect

✓No location data. The app never requests location permission, and location metadata is stripped from photos on-device (see above).
✓No analytics or advertising SDKs, no trackers, no fingerprinting.
✓No cookies. The website at runsgood.app sets none and runs no analytics, which is why there is no cookie banner to click through.
✓No contacts, no browsing history, nothing from other apps.
✓We do not sell or rent personal data. To anyone. Ever.

How your data is used

To provide the service: storing your machines and records, syncing them between our servers and your device so the app works offline, and computing what maintenance is due.
AI features (Pro): when you ask for setup suggestions or a factory schedule lookup, we send the relevant machine details (year, make, model, category, drivetrain, engine, current setting names and values, and your rider weight if you entered it) — and, for the manual-upload feature, the manual pages you supplied — to our AI provider, Anthropic, to generate the answer. Under the API terms we use, this data is not used to train their models. Manual pages you upload are read only for your machine, are never shared with other users, and are never stored in the shared results cache.
The shared factory-data cache: when a web lookup succeeds for a given year/make/model, the resulting factory figures (with their sources) are cached so the next owner of the same model gets them instantly. This cache contains manufacturer data about machine models — never your records, your uploads, or anything about you.
Email: we send email only for account actions you initiate (such as a password reset). No marketing email without separate, explicit opt-in.

What other users can see

Nothing, by default. Machine histories are never publicly searchable, and a VIN cannot be used by another user to look up your records.
During a sale: when a buyer claims your machine with the transfer code you gave them, you see the buyer's handle to confirm the sale — that is the only identity exchange in the flow. Once you confirm, the buyer receives the machine's full history, including entries recorded before they owned it. They do not receive your email, handle, or identity alongside it.
Share links (when this feature ships): a link you create shows that one machine's history, read-only, to whoever holds the link. Links carry no owner identity or location, can be revoked by you at any time, expire on their own, and are automatically revoked when the machine is sold.
Reports you export (PDF or JSON) are files on your device; sharing them is your choice and under your control.

Where your data lives, and who processes it

Your data is stored and processed by these service providers acting on our behalf. Each one sees only what its job needs:

Supabase — our database, sign-in and file storage, in a United States region (AWS us-west-2). Everything you record lives here.
PowerSync — keeps the copy on your phone and our database in sync so the app works offline. It relays your records; it is not a second home for them.
Cloudflare — hosts runsgood.app and runs the “quick check” at signup that keeps scripted signups out (Turnstile). Turnstile sees the technical details of your device's browser component during that check, and nothing about your machines.
Anthropic — AI processing for setup suggestions and factory lookups, exactly as described under “How your data is used”. Not used to train their models.
Fly.io and Inngest — run and schedule our background jobs: factory lookups, and the weekly safety-recall check. The recall check sends only year, make and model to the public recall databases (NHTSA and CPSC); no personal data.
Sentry — crash and error reports so we can fix what breaks. A report carries your device model, operating-system version, app version and the error itself — never your records, VINs, email or location.
Expo — relays push notifications (for example, a recall that matches your machine) to Apple and Google. It holds the device push token that addresses your phone, which we delete when you sign out.
An email delivery provider — for account email such as password resets, once enabled.
Apple and Google — process subscription and pack purchases through their stores. We never see or store your card number.

If we add or change a provider that handles personal data, we will update this list before it takes effect.

A copy of your machines and records is also stored on your device, so the app works offline. Signing out wipes that on-device copy.

Retention

Your account data is kept until you delete your account.
Machine histories are kept as long as the machine's record exists, because they are the record — including for a buyer after a sale, as described above. Receipt photos attached to entries follow the entries.
Uploaded manual pages are kept privately for your machine so you can re-run extraction; deleting the machine's records removes them.
The AI usage ledger is retained for billing integrity and abuse prevention.
Failed-attempt logs (rate limiting) are pruned automatically after 30 days.

Deleting your account

Delete your account from inside the app (Garage → Delete account). It takes effect immediately and is not reversible:

Your email, login, and handle are permanently erased.
Your ownership of every machine ends. Your machines' records persist unowned and can only be re-attached to a new owner through a manual, human-reviewed claim process.
Records that transferred to buyers stay intact, anonymised as described in “The one unusual thing” — we retain them on the basis of the buyer's legitimate interest in their own machine's record.

No longer have the app? Email support@runsgood.app from the address on your account and we will delete it, with the same effects as above, within 30 days.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar), you have rights to access, export, correct, and delete your personal data, and to complain to a supervisory authority. Practically:

Export: the app exports any machine's complete history as a PDF report or a machine-readable JSON file, on-device, at any time.
Correction: the log is append-only by design; you correct a record by adding a correction entry, and both remain visible.
Deletion: in-app, as above.
Access / anything else: contact support@runsgood.app.

We do not discriminate against you for exercising any of these rights.

Security

The database enforces access rules on every row — deny by default; history tables accept inserts only (no edits or deletes exist to be abused); photo storage is private, addressed by random keys, and every access is checked against the database record that owns the file. Traffic is encrypted in transit. Passwords are stored only as hashes. Location metadata is stripped from photos before they leave your phone.

No system is perfectly secure. If a breach affects your personal data, we will notify you as required by law.

Children

Runs Good is not directed at children under 13 (or the higher age your jurisdiction sets), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes materially, we will notify you in the app before the change takes effect, and the effective date above will change. The current version always lives at runsgood.app/privacy.

Contact

Advanced Performance Solutions LLC
support@runsgood.app
A mailing address will be listed here when the effective date is set.