Last updated August 21, 2026.
This policy is written in plain language on purpose. It is not a substitute for legal advice, and if you're relying on it for a commercial launch you should have it reviewed by a lawyer familiar with your jurisdiction — this covers the practical basics, not every regulatory nuance.
By default, everything you enter into NeverRunShort — accounts, transactions, budgets, settings — is saved in your browser's local storage on your own device. This never leaves your device unless you create an account and sign in.
If you create a NeverRunShort account, we store: your email address and authentication credentials (handled by our authentication provider, Supabase — we never see or store your password in plain text), and your planner data (the same accounts/transactions/budgets described above), synced to a private database row tied to your account. If you sign in with Google, we receive only the basic profile information Google shares for authentication (your email address) — never your Google password.
If you have an account, a lightweight audit log of transaction create/edit/complete/delete actions is kept for your own history and troubleshooting, visible to you in the Sync tab. It's private to your account, same as your planner data.
We send transactional emails through Resend, our email delivery provider — never for marketing, only for things tied to your account: a welcome email when you join, confirmations when you subscribe or unsubscribe, and, only for Premium accounts that turn it on in Settings, a daily digest listing bills due in the next 7 days. Building that digest means a scheduled server job reads the relevant slice of your synced planner data (which bills are due, their names and amounts) once a day, strictly to generate that one email — it isn't stored anywhere beyond your existing planner data, viewed by no one, and used for nothing else. If you're on the free plan, this never applies to you: free-plan planner data is never synced to our servers in the first place, so there's nothing for this job to read. Turn the digest off anytime from Settings to stop it.
If you subscribe to product updates, we store the email address you provide and nothing else. That list is used only to send you updates about NeverRunShort, and every email includes an unsubscribe option.
NeverRunShort's free trial doesn't require a card. If you subscribe afterward, your payment is handled entirely by Stripe: your card details are entered directly into Stripe's own checkout page and go straight to Stripe — our servers never see, receive, or store them. We do send Stripe your email address and account ID so it can tell us which account to activate, and we store back the minimum needed to show your subscription status and let you manage billing: your Stripe customer/subscription IDs, your plan, and its renewal date. Stripe is PCI-compliant and is its own data controller for the payment details it collects — see Stripe's privacy policy for how it handles that information.
We use Cloudflare Web Analytics on neverrunshort.com to see aggregate traffic — things like page views, referring sites, and approximate country and device type. It's designed by Cloudflare to run without cookies, without fingerprinting, and without tracking you across other sites. It's completely separate from your planner: it has no access to your account, email, or planner data, and we can't use it to identify or track an individual visitor — only to see traffic in aggregate.
We don't use advertising trackers, and our analytics (described above) can't identify or track you individually. We don't sell, rent, or share your data with advertisers or data brokers. We don't ask for your bank login — NeverRunShort has nothing to connect to your bank in the first place. We never see or store your payment card details — that only ever goes to Stripe.
The site and app are hosted on Cloudflare. Account and planner data, when you choose to sync, is stored with Supabase, our database and authentication provider, protected by row-level security so only your own signed-in account can read or write your row. Subscription and billing records are stored with Stripe, our payment processor, and referenced from a small record in Supabase (plan, status, renewal date, and Stripe's IDs for your customer/subscription — never card details). Account, subscription, and Premium digest emails are sent through Resend, our email delivery provider, which briefly handles your email address and the message content for each send. The app's static files also load the Supabase client library from the jsDelivr CDN — this is a code library, not a tracker, and does not receive your data unless you're actively syncing.
If this policy changes in a material way, we'll update the date at the top of this page. Continued use of NeverRunShort after a change means you accept the updated policy.
Questions about this policy or your data: hello@neverrunshort.com.