Privacy Policy — Rune

Last updated: 2026-10-09.

Rune helps you pick the best credit card for each purchase. This policy explains what we collect and why.

What we collect

Without an account (guest)

With an account

Email address and sign-in details (via Google or Apple), handled by AWS Cognito. Rune does not store passwords.
Your cards: which cards you hold, application month, and optional nicknames.
Family sharing (optional): the people you add, who carries or applied for each card, and the email addresses of members you invite. Members of your family group can see the cards in that group.

Store category reports (optional)

If you report a wrong store category, we receive the store name, the categories, and a one-way hash of a random ID created on your phone. It is not linked to your account.

Location. Used to find nearby stores and, if you turn on Store alerts, to notice when you enter one. Your location is never uploaded to us.
Reminder marks (credits used, bonuses activated), language choice, and cached card data.

Apple Maps (MapKit): store searches near you are sent to Apple under Apple's privacy policy.
Sign in with Google / Apple: if you use them, they share your name and email with us.
Amazon Web Services: hosts our servers and database in the United States.

We do not sell your data, show ads, or use third-party analytics or tracking.

You can delete your account in the app: Settings → Delete account. This permanently removes your account and your cards. If you own a family group, ownership rules apply before deletion.
Hash-only store reports are not linked to you and may remain.
Cards stored only on your phone are removed when you delete the app.

Data is sent over HTTPS and stored in access-controlled AWS services. No system is perfectly secure.

You can use Rune without an account, turn off Store alerts and notifications at any time, and delete your account in the app.

Rune is not directed to children under 13.

We will update the date above when this policy changes.