Privacy Policy

Last updated: 23 August 2026 · Pre-launch version

RUNU hasn't launched yet. This policy covers the pre-launch website and waitlist at this domain only — not the RUNU app itself, which doesn't exist publicly yet. We expect to expand this policy before the app launches, and we'll update the date above when we do.

• Scope
• Information we collect
• How we use it
• Marketing consent
• Legal bases
• Service providers
• Cookies & local storage
• Data retention
• Your rights
• International transfers
• Security
• Children
• Changes
• Contact

Scope

This policy explains what happens when you visit this website or join the RUNU waitlist. It does not cover the RUNU mobile app, because RUNU has not launched — when it does, we'll publish a separate (or expanded) policy covering the app itself, and this page will link to it.

RUNU is currently operated by David de Sousa Coelho as an individual — there is no incorporated RUNU company at this time. We use "RUNU," "we," or "us" in this policy to refer to this operator. See Contact for how to reach us.

Information we collect

When you join the waitlist, we collect:

• Your email address, so we can send you a confirmation link and, later, let you know when RUNU is ready.
• Whether you've confirmed your email and roughly when — so we know your signup is real and not a mistyped address.
• Your marketing-consent choice (on or off), tracked separately from the fact that you joined the waitlist.
• Attribution information, if present in the link you arrived from: UTM campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and a referral code (ref), each checked against an allowed pattern and length before we store or send it. We never store the full URL or query string you arrived on — only these individual, bounded fields.

We do not currently collect your name, a password, payment details, or any profile information — the waitlist form only asks for an email address, an optional marketing-consent checkbox, and (invisibly, for spam prevention) a honeypot field that a real visitor never fills in.

How we use your information

• To operate the waitlist — record your signup and send a confirmation email.
• To send you a one-time confirmation link (double opt-in), and later, a message when RUNU is ready.
• If you've opted in, to send occasional product updates and news.
• To measure, in aggregate, which campaigns and referrals bring people to the waitlist.
• To detect and prevent abuse of the waitlist form (for example, automated bot signups).

We do not sell your information, and we do not use it for advertising.

Marketing consent

Joining the waitlist and agreeing to receive marketing updates are two separate things:

• The marketing-consent checkbox on the waitlist form is off by default — we never pre-check it for you.
• Declining marketing consent does not stop you from joining the waitlist or receiving the one confirmation email needed to secure your spot.
• We are not currently sending marketing or newsletter emails. The only email we send today is the one-time, transactional double opt-in confirmation described above — that email is not marketing and isn't affected by your marketing-consent choice either way.
• Your marketing-consent choice is recorded now so that if and when we do start sending updates, we already know who agreed. You'll be able to withdraw consent at that point (for example, via an unsubscribe link).

Legal bases

For visitors in the EU/EEA and UK, we rely on the following legal bases under GDPR, depending on the activity:

• Consent — for sending marketing communications, and for any non-essential storage that requires it (see "Cookies & local storage").
• Legitimate interest — for operating the waitlist, sending the confirmation email needed to complete your signup, measuring aggregate campaign attribution, and preventing abuse.

Service providers

We use a small number of third-party services to run this website and waitlist:

• Railway — hosting and infrastructure for this website and the RUNU backend.
• Resend — sends the transactional confirmation email when you join the waitlist.

We only name providers we've actually confirmed are in use. We don't have further detail here on their data locations, certifications, or contractual terms — see "International transfers" below.

Cookies & local storage

This site does not currently use advertising or analytics cookies, and there is no analytics vendor connected to this website's code as of this policy's last-updated date.

The site does use your browser's local storage (not a cookie) to remember, on your device only, the campaign/referral information from the first link you arrived on — so that if you later complete the waitlist form, that information travels with your signup. This is stored under a single key (runu_attribution_v1) and never leaves your device until you submit the form.

Data retention

Our retention policy is:

• Unconfirmed signups — if you join the waitlist but never click the confirmation link, that entry is deleted after 30 days.
• Confirmed waitlist entries — kept through the pre-launch period and for up to 12 months after RUNU's public launch, unless you ask us to delete your information earlier or we have a legitimate reason to keep it longer.

Your rights

Depending on where you live, you may have rights to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Restrict or object to certain processing.
• Receive a copy of your information in a portable format.
• Withdraw consent at any time, where processing relies on consent.

To exercise any of these rights, use the contact details in "Contact" below.

International transfers

Some of our service providers may process information outside the country you're located in.

Security

We use reasonable technical measures to protect your information, including encrypted connections (HTTPS) and restricted access to systems that hold waitlist data. This website's own server does not log request URLs — so confirmation links (which contain a one-time token) are never written to server logs by this codebase.

No system is perfectly secure, and we can't guarantee absolute security.

Children

The RUNU waitlist is intended for people aged 16 or older. We do not knowingly collect information from anyone under 16. If you believe someone under 16 has joined the waitlist, contact us at privacy@runu.ink and we'll remove the entry.

Changes to this policy

We may update this policy as the pre-launch site evolves, and again when RUNU launches publicly. We'll update the "Last updated" date at the top whenever we do.

Contact

RUNU is operated by David de Sousa Coelho. There is currently no incorporated RUNU company — for now, this policy is between you and this individual operator.

For privacy questions, or to exercise any of the rights listed above (access, correction, deletion, restriction, objection, portability, or withdrawing consent), contact:

privacy@runu.ink