Privacy Policy
Runway Brand Builder
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Runway Brand Builder is a private workspace for one clothing brand per iPhone installation. The app stores the brand name, slogan, values, positioning, up to six palette colors, selected logo and moodboard images, collections, product photographs and details including references, materials, prices, status and notes, dated tasks and reminder preferences, and manually entered goals and measurements. This content is stored locally in the app’s Application Support folder and synchronized to the application server. A random installation secret is held in the iOS Keychain; the server stores its cryptographic hash, the current content document and revision, and any separately uploaded images. Language and appearance preferences stay on the device. No user account, email address, password, contacts, precise location or social-network connection is required. Requests to the API and this public website necessarily reach Railway hosting infrastructure, which may process network addresses, timestamps and technical request metadata. The app does not include advertising or third-party analytics SDKs.
How we use information
Your content is used to manage your brand identity, collections, products, deadlines and manually recorded progress; keep a local copy available offline; and synchronize changes when connectivity returns. The installation secret authorizes access to that installation’s content. Selected images are resized and re-encoded as JPEG before synchronization. Local notifications remind you of eligible deadlines 24 hours in advance and are scheduled on your iPhone, without a remote push provider. PDF brandbooks are generated on the device and shared only through the iOS sharing options you choose. Technical request processing is used to operate and protect the service, validate requests, diagnose failures and maintain data integrity.
Service providers and sharing
The backend and public website are hosted by Railway, which processes stored content and technical infrastructure data to provide hosting, networking and persistent storage. Authorized service operators can administer the application infrastructure. There are no advertising networks, social-network integrations, outbound email services or analytics recipients in this product. The application does not log your content, photographs, installation secrets or IP addresses in its own application logs; Railway infrastructure may retain request and operational metadata. If you export a PDF and choose a sharing destination, the recipients and services you select receive that file under their own practices. Apple provides the operating-system photo picker, Keychain, local notifications and system sharing interfaces.
Data retention
The app keeps the current brand content and pending local changes until you delete them. The server retains the current document and uploaded images for the installation until its deletion; it does not maintain an application-level revision history or create application backups. No Railway volume backups or backup schedules were configured at the effective date of this policy. Infrastructure log retention and any host-level recovery copies are controlled by Railway, and no unverified fixed retention period is promised. Local content may be included in device backups according to your Apple and device settings; the installation secret is configured as device-only and is not transferred through a Keychain backup. Temporary PDF files can remain in the app’s temporary directory until the app or iOS removes them. Copies you share outside the app remain with their recipients.
Deleting your information
Use Settings, Delete all data in the app to request deletion of the installation’s server document and private images. A network connection is required. The app clears its local brand data, scheduled reminders and Keychain secret only after the server confirms deletion; on failure it retains them so you can retry. The server removes the active installation record and its images, uses SQLite secure deletion and checkpoints its write-ahead log. Deletion does not erase files already exported or shared, device backups you control, or independently retained provider infrastructure records or recovery copies; these remain subject to the relevant provider’s procedures. Uninstalling the app alone is not a server deletion request. There is no account-based recovery if the installation secret is lost.
Permissions and your choices
The system Photos picker lets you choose individual images without granting broad photo-library access. You can decline selection or remove an image from a brand or product; after saving, the change is synchronized. Notification permission is requested only when you save a task with reminders enabled. You can refuse or withdraw notification permission in iOS Settings, or disable an individual task reminder in the app. Tasks continue to work without notifications. Sharing a PDF uses the destination you select in the system share sheet. The app requests no location, camera, microphone or contacts permission.
Your privacy rights
You can view and correct your content in the app, export a PDF brandbook and delete the data for your installation. Depending on your location, applicable law may give you additional rights of access, correction, deletion, restriction, objection or complaint to a data-protection authority. For privacy questions or requests, contact alwyn.willowby@icloud.com. This address is a public privacy contact, not an in-app account or email-delivery system. Because the service uses an installation secret rather than identifying accounts, requests concerning server content require a way to establish control of the relevant installation. Do not send the secret by email. We cannot promise to locate or recover data after that secret is lost.
Security
The deployed API uses HTTPS. Private API requests require the random installation secret, and server authorization scopes documents and images to its hash. The secret is stored in the iOS Keychain and is not embedded as a shared credential. Local document writes are atomic and use iOS file protection until first authentication after restart. Revision checks prevent silent overwrites of conflicting server versions. Requests and image sizes are bounded and validated. The server uses a persistent Railway volume and does not add application-layer database encryption. Infrastructure storage protections are provided by the host. These measures reduce risk but do not guarantee absolute security; protect access to your iPhone and do not disclose the installation secret.
Children’s privacy
Runway Brand Builder is intended for independent clothing designers and people managing a fashion brand. It is not directed to children under 13, and no child profile or child-specific data collection is provided. Do not enter children’s personal information in brand notes or images. If you believe a child’s information has been submitted, contact alwyn.willowby@icloud.com so the request can be assessed and appropriate action taken.
Changes to this policy
This policy describes the app and backend practices as of its effective date. It may be updated when features, processing or hosting practices change. The current policy is published at this public /privacy page and is accessible from the app’s Settings. The effective date will be updated when the policy changes. Material changes will be communicated through the app or this page as appropriate.