Runo

Effective[DATE_TO_BE_FILLED_AT_PUBLICATION] · Last updated [DATE_TO_BE_FILLED_AT_PUBLICATION]

EN ES

Privacy Policy

1. Introduction

This Privacy Policy explains how Runo HQ LLC (“Runo,” “we,” “us”) handles information when you visit our website at runohq.com or use the Mora app for iOS (“Mora”).

We are a company based in Wyoming:

Runo HQ LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States

If you have questions, email us at admin@runohq.com.

2. Information We Collect Through Our Website

When you visit runohq.com:

We do not use cookies. Our website does not set cookies, does not use third-party analytics services (such as Google Analytics), and does not include tracking pixels, advertising networks, or behavioral profiling tools.

We do not collect personal information from website visitors. You can browse runohq.com without providing any personal data. We do not require an account to access any part of the website.

Hosting infrastructure. Our website is hosted by Cloudflare. As is standard for any web hosting service, Cloudflare’s servers may automatically log technical information for security and operational purposes, including the visitor’s IP address, browser type, referring website, and time of access. Runo HQ LLC does not access these logs directly. For more information about how Cloudflare handles this data, see Cloudflare’s Privacy Policy at cloudflare.com/privacypolicy.

Email contact. If you choose to email us at admin@runohq.com, we will receive your email address and the content of your message. We use this information only to respond to your inquiry. We do not add your email to any marketing list, and we do not share it with third parties.

3. Information We Collect Through the Mora App

Mora is designed so that most of your data stays on your device and is never accessible to Runo HQ LLC. Below we describe (a) what stays on your device, (b) what leaves your device when you use AI features, and (c) the limited automatic data exchanges required for the app to function.

3.1 Data Stored Only on Your Device

The following data is stored locally on your device and is never transmitted to Runo HQ LLC or any other server we control:

  • Your expense records. Every expense you log in Mora — including amount, category, date, name, notes, currency, and happiness rating — is stored in your device’s local storage. We do not have a database of your expenses.
  • Your categories and budgets. Any categories you create and any monthly budget limits you set are stored locally on your device.
  • Your settings. Your language preference, currency preference, daily AI usage limits, and other in-app settings are stored on your device.
  • Your OpenAI API key. If you provide your own OpenAI API key to use AI features, the key is stored in your device’s secure storage (iOS Keychain on iPhone). The key is used only to communicate directly with OpenAI; it is never transmitted to Runo HQ LLC.
  • Consent flags and trial information. Information about whether you have accepted in-app consent notices, and the start date of your 7-day Pro free access period, are stored on your device.

You can delete all of this data at any time by:

  • Using the “Delete All Data” button in Settings → Data & Privacy. This removes all your expenses, categories, and settings.
  • Uninstalling the Mora app, which removes all data along with the app.

Runo HQ LLC does not maintain a copy of this data and cannot recover it after deletion.

3.2 Data Sent When You Use AI Features

Mora includes two optional AI features: receipt scanning and voice expense entry. These features are disabled by default. They become available only after you provide your own OpenAI API key.

When you use these features:

  • Receipt scanning: The image you select is sent directly from your device to OpenAI’s API (api.openai.com) using your own API key. OpenAI processes the image and returns a structured expense (amount, merchant, suggested category). The image is then deleted from your device.
  • Voice expense entry: The audio you record is sent directly from your device to OpenAI’s API using your own API key. OpenAI transcribes the audio and returns a structured expense. The audio is then deleted from your device.

These requests do not pass through Runo HQ LLC’s servers. We do not see, log, or store the image, audio, transcription, or any data exchanged between your device and OpenAI. Your use of OpenAI’s service is governed by your direct agreement with OpenAI and OpenAI’s privacy policy, which you can review at openai.com/policies/privacy-policy.

3.3 Automatic Data Exchanges Required for App Function

When you launch Mora, the app performs limited automatic communications with two third-party services. These exchanges do not include your expense data or any personal financial information.

  • RevenueCat (subscription management). Mora uses RevenueCat to verify your subscription tier (Free, Pro Annual, or Pro Lifetime). When the app launches, it sends an anonymous device identifier to RevenueCat’s servers and receives your current subscription status in response. RevenueCat does not receive your expense data, your name, your email, or your payment information. RevenueCat’s privacy practices are described at revenuecat.com/privacy.
  • Apple App Store / StoreKit (purchases). When you choose to upgrade to Mora Pro, your purchase is processed entirely by Apple’s App Store and StoreKit framework. Apple handles all payment processing. Apple may share with us limited transaction information (such as confirmation that a purchase succeeded and your subscription type), but we never receive your payment card details, your Apple ID, your real name, or your billing address.

3.4 Information We Do Not Collect

For clarity, Mora does not include any of the following:

  • Analytics or telemetry of any kind. Mora does not use Google Analytics, PostHog, Mixpanel, Amplitude, Segment, RudderStack, Firebase Analytics, or any other analytics service.
  • Crash reporting or error logging services. Mora does not use Sentry, Bugsnag, Crashlytics, or any other crash reporting service.
  • Push notifications. Mora does not register for push notifications or send push messages.
  • Behavioral tracking or user profiling.
  • Advertising identifiers or tracking IDs.
  • Location data.
  • Photos other than the specific receipt you choose to scan.
  • Audio other than the specific voice expense you choose to record.
  • Contact lists.
  • Camera roll access (except for the specific receipts you choose to scan).

4. How We Use Information

Because most of your data never reaches Runo HQ LLC, our uses of information are limited. We use the limited information we do receive only for the purposes described below.

4.1 Email Communications

When you email us at admin@runohq.com (for support, feature requests, privacy questions, or any other reason), we receive your email address and the content of your message. We use this information to:

  • Respond to your inquiry
  • Diagnose and fix technical issues you report
  • Improve Mora based on user feedback

We do not add your email address to a mailing list. We do not send marketing emails. We do not share your email address with third parties.

We retain support email correspondence for as long as necessary to resolve the matter and to keep a reference of past inquiries (typically up to two years). You may request deletion of your support emails at any time by emailing admin@runohq.com.

4.2 Subscription Verification

Mora uses RevenueCat to verify your subscription tier when the app launches. RevenueCat informs us only of your current subscription status (Free, Pro Annual, or Pro Lifetime) tied to an anonymous device identifier. We use this information to:

  • Determine which features to unlock in the app
  • Confirm that purchase transactions completed successfully
  • Provide support if you contact us with a subscription issue

We do not receive your name, your Apple ID, your email address, your payment information, or your real identity through this process.

4.3 Aggregate Financial Reporting

Apple’s App Store sends Runo HQ LLC periodic payment reports that show aggregate sales data — for example, total revenue from Mora Pro Annual subscriptions in a given month, or the total number of Mora Pro Lifetime purchases in a given country. We use these reports to:

  • Track Runo HQ LLC’s business performance
  • Pay taxes and meet regulatory financial reporting requirements
  • Make business decisions about Mora’s future

Apple’s reports identify aggregate numbers, not individual purchasers. We do not receive a list of who bought Mora Pro or when. We do not receive your personal information through these reports.

We may use information we receive (such as the content of a support email) to comply with applicable laws, respond to lawful requests from government authorities, or to defend Runo HQ LLC’s legal rights. This is standard for any business operating in the United States.

5. How We Share Information

Runo HQ LLC does not sell, rent, or trade your personal information. We do not share your information with advertisers, data brokers, marketing companies, or analytics providers. Our limited sharing is described below.

5.1 Third-Party Service Providers

As described in Section 3, three third-party services receive limited information when you use Mora:

  • OpenAI receives the receipt image or voice recording you submit when you use Mora’s AI features. This data goes directly from your device to OpenAI using your own API key. Runo HQ LLC does not see, store, or relay this data.
  • RevenueCat receives an anonymous device identifier and your subscription tier (Free, Pro Annual, or Pro Lifetime). RevenueCat acts as our service provider for subscription management.
  • Apple receives information related to your App Store purchases, which is governed by Apple’s standard App Store and Apple ID terms.

Each of these third parties operates under its own privacy policy. We have no control over how they process the data they receive.

We may disclose information when we believe in good faith that disclosure is necessary to:

  • Comply with applicable law, regulation, or legal process (such as a court order, subpoena, or government request)
  • Enforce our Terms of Service or other agreements
  • Protect the rights, property, or safety of Runo HQ LLC, our users, or the public
  • Investigate or prevent suspected fraud, security issues, or illegal activity

5.3 Business Transfers

If Runo HQ LLC is acquired by, merges with, or sells substantially all of its assets to another company, information we hold may be transferred to that successor entity as part of the transaction. Any successor entity would be bound by this Privacy Policy with respect to information transferred, unless they update the policy in accordance with Section 11 (Changes to This Privacy Policy). We would notify users of any such transfer.

5.4 What We Do Not Do

For clarity, Runo HQ LLC does not:

  • Sell your personal information to any third party, for any purpose
  • Share your information with advertisers or for advertising targeting
  • Share your information with data brokers or aggregators
  • Use your information to train AI models (your own AI use with OpenAI is governed by OpenAI’s terms)
  • Disclose your information to other Mora users
  • Participate in any “cross-context behavioral advertising” as defined under California law

6. Third-Party Services

Mora and runohq.com rely on the following third-party services. Each operates under its own privacy policy, which we encourage you to review.

6.1 OpenAI

When you use Mora’s AI features (receipt scanning or voice expense entry), data is sent directly from your device to OpenAI, L.L.C. using your own OpenAI API key. OpenAI processes the data and returns a structured expense.

  • What OpenAI receives: The specific receipt image or voice recording you submit for processing.
  • What OpenAI does with it: OpenAI processes the request and returns a result. By default, OpenAI does not use API customer data to train its models. Your relationship with OpenAI is governed by your own OpenAI account terms.
  • Privacy Policy: openai.com/policies/privacy-policy
  • API Data Usage Policies: openai.com/policies/api-data-usage-policies

6.2 RevenueCat

RevenueCat, Inc. provides subscription management infrastructure for Mora. When the Mora app launches, it communicates with RevenueCat to verify your subscription tier.

  • What RevenueCat receives: An anonymous device identifier and your current subscription status (Free, Pro Annual, or Pro Lifetime). RevenueCat does not receive your name, email address, expense data, or payment information through this process.
  • What RevenueCat does with it: RevenueCat uses this information to verify your entitlements and provide subscription analytics to Runo HQ LLC. RevenueCat’s analytics show us aggregate subscription metrics (such as total subscribers, churn rate, and revenue), not individual user details.
  • Privacy Policy: revenuecat.com/privacy

6.3 Apple

Apple Inc. (and its subsidiaries) processes all purchase transactions for Mora through the App Store and StoreKit framework.

  • What Apple receives: Your payment information, Apple ID, and purchase details. This is between you and Apple — Runo HQ LLC does not receive your payment card information, Apple ID, or full transaction details.
  • What Runo HQ LLC receives from Apple: Aggregate sales reports (total revenue, subscription counts, country-level data) for business and tax purposes. We do not receive individual purchaser identities through these reports.
  • Privacy Policy: apple.com/legal/privacy

6.4 Cloudflare

Our website, runohq.com, is hosted on Cloudflare’s infrastructure. As is standard for web hosting, Cloudflare’s servers may log technical information about visits (such as IP address, browser type, time of access) for security and operational purposes. Runo HQ LLC does not access these logs directly.

7. Data Retention

Because the design of Mora minimizes the data Runo HQ LLC collects, our retention practices are limited to a small number of categories.

7.1 Data on Your Device

All data created or stored by Mora — including your expenses, categories, budgets, settings, and your OpenAI API key — remains on your device for as long as Mora is installed. This data is under your direct control. You can delete it at any time by:

  • Using the “Delete All Data” button in Settings → Data & Privacy. This removes all your expenses, categories, and settings without affecting the app itself.
  • Editing or removing individual expenses within Mora.
  • Uninstalling the Mora app, which removes all of its data along with the app.

Runo HQ LLC does not maintain a copy of this data and cannot recover it after deletion.

7.2 Support Email Communications

When you email us, we retain the contents of your message and any related correspondence for a period of up to two years from the date of the most recent interaction. After two years, we delete the correspondence from our email systems.

You may request earlier deletion of your support email correspondence at any time by emailing admin@runohq.com.

7.3 Subscription and Purchase Records

Information about your subscription status (which we receive from RevenueCat) and aggregate purchase records (which we receive from Apple) are retained for as long as necessary to:

  • Manage your active subscription, while you have one
  • Comply with tax and accounting laws in the United States (which generally require seven years of financial records)

Aggregate purchase data from Apple does not identify individual purchasers, so deletion of individual records is not technically possible. Subscription status from RevenueCat is tied to an anonymous device identifier, not to your personal identity.

If we are required to retain information to comply with a legal obligation, court order, or active legal claim, we will retain that information for as long as required by law, regardless of any deletion request.

8. Your Rights

Depending on where you live, applicable law may grant you specific rights over your personal information. Below we describe the rights commonly granted under laws such as the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar regulations, and explain how those rights apply to information held by Runo HQ LLC.

8.1 Right to Access

You have the right to ask us what personal information we hold about you.

For Mora specifically: Because Mora stores your data on your device, the information we hold about you is limited to:

  • Any email correspondence you have initiated with us (admin@runohq.com)
  • Your subscription status (received from RevenueCat, tied to an anonymous device identifier)
  • Aggregate financial information (which does not identify you individually)

You can request a copy of any data we hold about you by emailing admin@runohq.com.

8.2 Right to Deletion

You have the right to ask us to delete personal information we hold about you.

For Mora specifically:

  • Data on your device can be deleted at any time by using the “Delete All Data” button in Settings → Data & Privacy. This removes all your expenses, categories, and settings.
  • Email correspondence can be deleted on request by emailing admin@runohq.com.
  • Subscription records are retained for tax compliance purposes (see Section 7.3) and cannot be deleted on request while these obligations apply.

8.3 Right to Portability

You have the right to receive your personal information in a structured, commonly used format.

For Mora specifically:

  • Your expense data can be exported from within the Mora app as a CSV file at any time (see the Reports feature). This export contains your complete expense history.
  • Other information we hold about you (email correspondence, subscription status) can be provided on request by emailing admin@runohq.com.

8.4 Right to Correction

You have the right to correct inaccurate personal information we hold about you.

For Mora specifically:

  • Data on your device can be edited directly within the Mora app at any time.
  • Information held in our systems (email correspondence) can be corrected by emailing admin@runohq.com.

8.5 Right to Object to Processing

You have the right to object to certain types of processing of your personal information, particularly processing based on legitimate interests or for direct marketing purposes.

Runo HQ LLC does not process personal information for direct marketing, profiling, or automated decision-making.

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

For Mora’s AI features specifically: Mora’s AI features (receipt scanning and voice expense entry) are opt-in. You can withdraw your consent to use these features at any time by clearing your OpenAI API key from Settings → AI: tap the API key input field, delete the contents, and tap “Save OpenAI Key” with an empty field. Once cleared, no further data will be sent to OpenAI. You can also reduce your daily usage limits using the Daily Usage Limit controls in Settings → AI.

8.7 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

  • The right to know what categories of personal information we have collected about you in the past 12 months
  • The right to know whether we have sold or disclosed your personal information (we have not)
  • The right to opt out of the sale of your personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your CCPA rights

You can exercise these rights by emailing admin@runohq.com.

8.8 European Union Residents (GDPR)

If you are located in the European Union, European Economic Area, or the United Kingdom, you have additional rights under GDPR, including:

  • The right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection law
  • The right to have your data processed only for the purposes for which it was provided (purpose limitation)
  • The right to information about the legal basis for our processing

Our legal bases for processing the limited information we receive are:

  • Performance of a contract (for processing your subscription and providing Mora’s features)
  • Legitimate interests (for responding to your support inquiries and maintaining business records)
  • Legal obligation (for retaining tax and financial records)

8.9 How to Exercise Your Rights

To exercise any of these rights, email us at admin@runohq.com with:

  • A description of the right you wish to exercise
  • Sufficient information for us to identify you (the email address you used to contact us, or the device identifier for subscription-related requests)
  • Any relevant context (for example, the date range of a request)

We will respond within 30 days of receiving your request, unless an extension is permitted under applicable law (for complex requests).

9. Children’s Privacy

Mora is intended for use by individuals aged 13 and older. Mora is not designed for, marketed to, or directed at children under the age of 13.

In the European Union, European Economic Area, and the United Kingdom, applicable law requires parental consent for the processing of personal data of users under the age of 16. In jurisdictions where this requirement applies, Mora is intended for users aged 16 and older, or for users between 13 and 16 with verifiable parental consent.

Runo HQ LLC does not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where this applies). If you are a parent or legal guardian and believe your child has provided personal information to us, please contact us at admin@runohq.com. We will promptly delete any such information from our records.

By using Mora, you confirm that you are at least 13 years of age (or 16 years of age in jurisdictions where this requirement applies), or that you have the legal capacity to enter into this agreement.

10. International Users

Mora is offered to users worldwide. Runo HQ LLC is based in the United States, and our processing of information occurs in the United States.

10.1 Users Located Outside the United States

If you are accessing or using Mora from outside the United States, you understand and acknowledge that the limited information we receive (such as support emails, subscription status, and aggregate purchase data) is transferred to and processed in the United States. By using Mora, you consent to this transfer and processing.

The information we receive is processed under the protections described in this Privacy Policy, regardless of where you are located.

10.2 Users Located in the European Union, European Economic Area, and United Kingdom

If you are located in the EU, EEA, or UK, the General Data Protection Regulation (GDPR) and equivalent UK legislation apply to your personal information. Our processing of your data is governed by the rights described in Section 8 (Your Rights).

When we transfer personal information from the EU, EEA, or UK to the United States, the transfer is based on your consent, given when you use Mora and accept this Privacy Policy. You have the right to withdraw consent at any time by ceasing to use Mora and contacting us to request deletion of any information we hold.

10.3 Users Located in California, United States

If you are a California resident, your rights under the California Consumer Privacy Act (CCPA) are described in Section 8.7.

10.4 Users Located in Other Countries

If you are located in a country with its own data protection laws, those laws may grant you specific rights over your personal information. To the extent applicable law grants you rights regarding personal information that we hold, you may exercise those rights by contacting us at admin@runohq.com.

We will respond to lawful requests in a timely manner and in accordance with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or our services. When we make material changes to this Privacy Policy, we will:

  • Update the “Last Updated” date at the top of the policy
  • Post the updated Privacy Policy at runohq.com/privacy-policy
  • Provide at least 30 days advance notice before the updated Privacy Policy takes effect, either through an in-app notification, an email to the address you have provided to us (if applicable), or a notice on our website

For non-material changes (such as correcting typographical errors or clarifying existing language), we may update the policy without advance notice.

Your continued use of Mora after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you should stop using Mora and may request deletion of any information we hold about you by emailing admin@runohq.com.

12. Contact Us

If you have questions about this Privacy Policy, your rights regarding your personal information, or any of our privacy practices, please contact us:

By email: admin@runohq.com

By mail:

Runo HQ LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States

We aim to respond to privacy inquiries within 30 days of receipt, in accordance with applicable law. For inquiries requiring formal data subject requests (such as deletion, access, or portability), we will respond in the manner described in Section 8 (Your Rights).

If you have a complaint about our privacy practices that we are unable to resolve through direct communication, you may also have the right to lodge a complaint with your local data protection authority.