Privacy & your data
Status Runner exists to track your travel — so we treat that travel history as yours. This is the plain-English overview of what we collect and how you stay in control. The full policy has every detail.
No advertising or analytics SDKs — no Firebase Analytics, AdMob, Facebook SDK, Crashlytics or similar. We don't collect advertising IDs or track you across other apps and sites.
We collect the minimum required to run your account and the features you use: your email for passwordless sign-in, secure auth tokens, and the travel data you enter.
Card features track rewards, not payments. We store a nickname, bonus, fee and dates — never card numbers, CVV or expiry. No payments are processed in the app.
Auth tokens are held in your device's secure storage — iOS Keychain or Android Keystore — never in plain text. Server-side logs are operational only.
Export a machine-readable copy of your data or delete your account whenever you want — see below.
Built around the GDPR's principles and your rights, with an Australian developer as the data controller. The full policy sets out each lawful basis.
Your data & rights
See a copy of everything we hold, correct it, take it with you, or delete it entirely.
A machine-readable copy of what you've given us.
Fix anything wrong — most of it in the app.
Erase your account and personal data for good.
Under the right to data portability (GDPR Article 20) and the right of access (Article 15), you can ask for a copy of the personal data you've given Status Runner, in a structured, commonly used, machine-readable format.
Write to privacy@statusrunner.app from the email on your account and ask for a copy of your data.
We may ask a question or two to confirm your identity before releasing any data.
Account details, loyalty programs, goals, logged flights and reward-card entries — within one month, at no charge in normal circumstances.
Under the right to rectification (Article 16), you can fix anything inaccurate or complete anything missing.
Under the right to erasure (Article 17) — the "right to be forgotten" — you can ask us to delete your personal data.
Email privacy@statusrunner.app from your account email [TODO: if there's an in-app "Delete account" option, name the path here].
We verify the request is really from you, then delete your account and the personal data tied to it.
Deletion is permanent. A small amount may be retained only where the law requires — see how long we keep your data.
To exercise any of them, email privacy@statusrunner.app. We respond within one month and won't charge you in normal circumstances.
Ask for a copy of the personal data we hold about you and how we use it.
Correct inaccurate data or complete anything incomplete.
Ask us to delete your personal data, e.g. by deleting your account.
Ask us to limit how we use your data in certain situations.
Ask for the data you gave us in a machine-readable format.
Object to processing based on our legitimate interests.
Where we rely on your consent, withdraw it at any time.
One address for everything
Send any data request to privacy@statusrunner.app. We aim to respond within one month.
Read the full privacy policy