Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how BillRunway (“we,” “us,” or “our”) handles information when you visit billrunway.com (the “Site”) and when you use the BillRunway macOS app (the “App”).

We built BillRunway to help you plan bills and income on your Mac. We do not sell your personal information, and we do not run advertising inside the App.

In short: the App keeps your financial data on your Mac and, if you turn it on, in your private iCloud database. The one exception is the optional Grok Bot connection (Section 6). If you turn it on, a copy of your plan is uploaded to our Grok Bot server so the bots you add can read it.

1. Who We Are

BillRunway is developed and operated by Luis Barragan.

• Website: https://billrunway.com
• Feedback: [email protected]

2. Information We Collect

A. When You Visit the Site

If you only browse the Site, we collect very little:

• Basic server and security logs (for example, IP address, browser type, pages requested, and timestamps) to keep the Site secure and running.
• Contact information if you email us directly.

We do not use third-party advertising trackers on the Site at this time. If we add analytics or cookies in the future, we will update this policy.

B. When You Use the App

BillRunway stores the financial information you choose to enter, such as:

• Income sources (name, amount, pay schedule, notes)
• Bills and debts (name, amount, due dates, categories, notes)
• Debt details (balance, APR, credit limit, last four digits of a card, monthly fees)
• Payment status and planning data (scheduled, paid, skipped, per-occurrence changes)
• Household labels (names you assign to bills)
• App preferences (sort order, pay-period horizon, utilization target, onboarding flags)

We do not ask for or require:

• Full bank account numbers
• Full credit or debit card numbers
• Social Security numbers
• Online banking passwords

You are responsible for what you choose to store in the App.

Usage Analytics

The App sends feature-usage analytics to PostHog, our analytics provider.

This includes:

• Features used (such as opening the debt planner or marking a bill paid)
• App lifecycle events (opened, closed)
• App version and build number
• Whether the Demo profile or a personal profile is active
• A random identifier the analytics software creates for your installation of the App, so events from the same Mac can be grouped together

Because events from one installation share that identifier, this usage data is linked to your device, not anonymous. It is not linked to your name, email address, or Apple Account, and we do not use it to identify you. These events never include your financial data: no bill names, amounts, balances, income details, notes, or other information you enter in the App.

Feature Requests and Roadmap Votes

If you send a feature request from the App, we receive what you type (the type of request, a title, and details), the App version and build, whether the Demo profile is active, and your email address only if you choose to include it. Requests go through our feedback server to the issue tracker we use to plan the App. If you vote on a roadmap item, the vote is stored with a random identifier for your installation so it is counted once.

3. Where Your Data Is Stored

On Your Mac

Your data is stored locally using Apple’s SwiftData framework.

Optional iCloud Sync

If you’re signed into iCloud, BillRunway can sync your data to your private CloudKit database.

• Sync is tied to your Apple ID.
• iCloud Sync does not use our servers. Your synced data goes only to your private CloudKit database.
• We cannot access your synced data.
• If iCloud is unavailable, the App continues working locally on your Mac.

Your income and bills stay on your Mac

BillRunway stores the income, bills, and household names you enter in a local database on your Mac. If you’re signed into iCloud, that data can sync to your private CloudKit database as described above. Unless you turn on Grok Bot (Section 6), your financial data is not sent to our servers.

4. What We Do Not Collect

We do not:

• Require an account to use the App. (Grok Bot is optional; turning it on creates a Grok Bot account on our server, as described in Section 6.)
• Collect your financial data through analytics.
• Sell or rent your personal information.
• Use your financial data for advertising.
• Automatically connect to your bank or import transactions.

Your bill and income data are not sent to our servers unless you turn on Grok Bot.

5. Apple Intelligence (Optional)

On supported Macs, BillRunway may offer an optional assistant powered by Apple Intelligence.

• Conversations are processed locally using Apple’s on-device models.
• We do not receive copies of those conversations.
• Apple’s handling of these features is governed by Apple’s privacy policies and your device settings.

If Apple Intelligence is unavailable or disabled, BillRunway continues to work normally.

6. Grok Bot (Optional)

BillRunway can connect to Grok Bot, an AI assistant from a third-party provider, so bots you set up there can read your plan and, if you allow it, ask for changes. Grok Bot is off until you turn it on in Settings → Grok Bot, agree to the data sharing screen, and sign in with Apple. If you never turn it on, nothing in this section applies to you.

What Is Uploaded

When Grok Bot is on, the App uploads a copy of your plan to our Grok Bot server, and updates that copy as your plan changes. The copy includes:

• Pay periods: income, the bills due in each one, totals, and projected balances
• Bills and debts: names, categories, amounts, due dates, payment status, balances, APRs, credit limits, monthly fees, and who each one belongs to (owner names)
• Income sources: names, owners, amounts, and pay schedules
• Your checking and savings balances

These are not uploaded unless you turn them on in Settings → Grok Bot (each is off by default): bill and income notes, card last four digits, and loan or account IDs.

What Our Grok Bot Server Keeps

• Your plan copy. Only the latest copy is kept, and it is encrypted at rest with a key unique to your account.
• Your account. The user identifier that Sign in with Apple gives us for BillRunway. We do not ask for or receive your name or email address from Apple.
• Linked Macs and bots. The names you give your bots, whether each one can only read or can also ask for changes, and when each Mac or bot was created and last used. Access tokens are stored only as one-way hashes.
• Change requests. If you turn on Changes, each change a bot asks for is kept with its details (for example, which bill, the new amount or balance, the text of a note, and the bot’s reason), the bot’s name, and the result. Unlike your plan copy, change requests are not encrypted with your account key; they are stored as plain text, protected by our hosting provider’s storage security.
• Network information. IP addresses are used briefly to limit abuse (rate limiting) and are not stored with your plan.

Changes Made by Bots

Changes are off by default. If you turn them on, bots you allow can ask BillRunway to change your plan (for example, mark a bill paid or update a balance). Your Mac checks each request against your current numbers before anything changes, and the App lists what changed. By default every change waits for your approval; some kinds of changes, including adding a bill and adding a note, always wait for your approval.

How Long Grok Bot Data Is Kept

• Your plan copy is deleted 90 days after the last upload from your Mac.
• A change request that is still waiting expires after 48 hours. Change requests, with their details and results, are deleted 30 days after the bot made them.
• Bots you revoke are deleted 30 days after you revoke them.
• An account with no plan copy and no active bot is deleted after 7 days, and an account with no linked Mac seen for 180 days is deleted with everything in it.

How to Stop or Delete

• Revoke a bot in Settings → Grok Bot. Its token stops working right away.
• Unlink this Mac to stop uploading from it. Bots you’ve connected can still read the last uploaded copy until it is deleted as described above.
• Delete Server Data (or “Unlink and Delete Server Data”) removes your plan copy, bots, linked Macs, change requests, and Grok Bot account from our server right away.

The Grok Bot Provider

When a bot reads your plan or asks for a change, the information it receives is handled by the Grok Bot provider. What the provider does with it, including any conversations you have with your bots, is governed by the Grok Bot provider’s own terms and privacy policy, not this policy. We do not control how the provider uses or stores that information.

7. How We Use Information

We use information only to:

• Provide App features
• Sync data through iCloud (when enabled)
• Let the bots you connect read your plan and ask for changes (when Grok Bot is on)
• Understand feature usage to improve the App
• Respond to support requests
• Maintain and protect the Site and App

We do not use your financial data to build marketing profiles.

8. When We Share Information

We do not share your App data except in the following situations:

Apple / iCloud

When you enable iCloud Sync.

Grok Bot

When you turn on Grok Bot and connect bots, as described in Section 6. Our Grok Bot server and feedback server run on a cloud hosting provider that processes data on our behalf.

PostHog

Feature-usage events are processed by PostHog on our behalf. These events contain no personal financial data.

Legal Requirements

If required by law or necessary to protect rights, safety, or security.

Business Changes

If BillRunway is involved in a merger, acquisition, or asset sale.

We do not share your data with advertisers.

9. App Store Purchases

If you download BillRunway through the Mac App Store, Apple processes payments under Apple’s Privacy Policy. We never receive your full payment card information.

10. Data Retention and Deletion

App Data

You can edit or delete your data inside the App. Removing the App deletes local data unless it still exists in iCloud.

iCloud Data

You can manage or remove synced data through your Apple ID and iCloud settings.

Grok Bot Data

See Section 6 for how long Grok Bot data is kept and how to delete it.

Analytics Data

Usage events are retained by PostHog according to our project settings.

Feedback Emails

Feedback correspondence is kept only as long as needed to provide assistance and maintain records.

11. Security

We rely on Apple’s platform security, local device protections, and CloudKit’s private database model. No storage or transmission method is 100% secure, but BillRunway is designed so your financial data remains on your devices and in your iCloud account—not on our servers—unless you turn on Grok Bot. If you do, your plan copy is encrypted at rest on our Grok Bot server, and a bot can read it only with a token you create.

12. Children’s Privacy

BillRunway is not intended for children under 13, and we do not knowingly collect personal information from children.

13. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information.

Because BillRunway stores most data on your Mac and in iCloud:

• You can view and edit most information directly in the App.
• You can delete data through the App or your Apple device settings.
• You can delete Grok Bot server data at any time in Settings → Grok Bot.
• You can contact us with privacy questions.

14. International Users

If you use iCloud Sync, your data may be processed by Apple according to Apple’s privacy practices. BillRunway does not transfer your financial data to our own servers unless you turn on Grok Bot.

Usage analytics, feature requests, and Grok Bot data may be processed by our service providers in countries other than the one where you live.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we’ll update the Last updated date above. Material changes may also be announced on the Site.

16. Contact Us

Questions about this Privacy Policy?

• Email: [email protected]
• Website: https://billrunway.com