Privacy Policy
Run Out is a pool score tracker. This policy explains exactly what the app
collects, where it goes, and what we do with it.
We do not sell your data, we do not use advertising or tracking SDKs, and we do
not build advertising profiles. There is no analytics or crash-reporting SDK in
the app.
---
## 1. The short version
- You can score matches **without an account**. Nothing leaves your device.
- If you **sign in**, your match history syncs to our servers so it survives a
reinstall or a new phone.
- If you **share a live match**, that match becomes readable by anyone who has
the 5-character code — see section 5, which is the one part of this policy
worth reading closely.
- The camera is used **only** to scan a match QR code.
- **No data is sent to any AI service in this version of the app.**
---
## 2. What we collect and how we collect it
**Every piece of data below is collected in one way only: you type it into the
app.** There is no passive or background collection. The app contains no
analytics SDK, no crash-reporting SDK, no advertising SDK and no tracking
technology of any kind, so we do not collect device identifiers, usage
behaviour, or anything you have not deliberately entered.
The only data we receive that you did not type is the standard server log a web
request produces — IP address, timestamp, and which endpoint was called — which
our hosting provider records automatically when your phone talks to our API.
### 2.1 Account information
Only if you choose to create an account.
| Data | Why | Where it lives |
| Email address | To sign you in and recover your account | Supabase Auth |
| Apple account identifier, and name/email if you allow it | To support Sign in with Apple | Supabase Auth |
| Password (email sign-up only) | To sign you in | Supabase Auth, stored hashed — we never see it |
Our own database stores only an opaque user identifier issued by Supabase. It
does not store your email address or password.
If you use Sign in with Apple, you may choose Apple's **Hide My Email** option.
The app works normally with a relay address.
### 2.2 Match data
When you are signed in, matches you score sync to our servers:
- Player names **as you type them** — these are free-text, so if you enter a
real name, that is personal data about that person
- Scores, sets, racks won, break-and-runs, fouls
- Game type, race length, and match timestamps
Player names are entered by you and may refer to other people. Please only enter
names you are comfortable storing, and tell the other player if you are sharing
the match publicly.
### 2.3 Profile preferences
An optional display name, and your preferred game, skill level and table size.
Used only to pre-fill the app.
### 2.4 What we do **not** collect
- No location data — the app never requests location permission and does not use
GPS. (The IP address in our server logs is not used to derive or store your
location.)
- No contacts, calendar, or health data
- No advertising identifiers, and no cross-app or cross-site tracking
- No behavioural analytics — the app contains no analytics SDK
- No photos or microphone recordings in this version
---
## 3. How we use your data
We use it only to:
1. Run the app's features — scoring, match history, live sharing
2. Sync your history across your devices and restore it after a reinstall
3. Answer you when you contact support
We do not use your data for advertising, profiling, or training any machine
learning model.
---
## 4. Who we share data with
We share data only with the infrastructure providers needed to run the app. Each
one acts as our data processor: it may process your data only on our documented
instructions, only to deliver the service listed below, and never for its own
purposes.
**We confirm that every third party listed here is contractually bound, under a
data processing agreement, to provide the same or equal level of protection for
your data as this policy commits us to** — including confidentiality, encryption
in transit and at rest, breach notification, deletion on our instruction, and
the GDPR Article 28 processor obligations. None of them is permitted to sell
your data, use it for advertising, or use it to train any model.
| Provider | Role | What it handles |
|---|---|---|
| **Supabase** | Authentication and live match sync | Email address, password hash, Apple identifier, live match state |
| **Neon** | Database hosting | Match history and profile preferences |
| **Vercel** | API hosting | Requests in transit; standard server logs |
| **Apple** | Sign in with Apple | Handled by Apple under Apple's privacy policy |
We do not share your data with advertisers or data brokers. We may disclose data
if legally required to do so.
**We do not share your data with any AI or machine learning service.** See
section 6.
All traffic between the app and our servers uses HTTPS.
---
## 5. Live match sharing — please read
When you share a live match, the app creates a **5-character code**. While that
share is active:
- **Anyone with the code can view the match**, including both player names and
the running score. No account or password is needed to watch.
- The code is short, so it is guessable. Treat a shared match as **public**.
- A second person can join with the code and co-score the match.
- Shared matches **expire automatically** and are deleted after they expire.
Only share a match when you are happy for the player names and score to be
publicly visible, and check with the other player first. If you do not share a
match, it is never publicly readable.
---
## 6. Artificial intelligence
**This version of Run Out does not send any of your data to a third-party AI
service.**
There is no AI feature reachable anywhere in the app, and the app makes no
network request to any AI or machine learning provider. Match scoring, live
sharing, the tournament bracket generator, the shot clock and the kick & bank
visualizer all run entirely on your device or on our own servers, using ordinary
arithmetic and geometry.
Nothing you enter — player names, scores, match history, profile preferences —
is sent to an AI service, used as training data, or used to generate anything.
We are developing AI-assisted table analysis and stroke coaching for a future
release. Those features are **not enabled in this version**. If and when they
ship, we will update this policy first, and the app will tell you exactly what
would be sent and to whom, and ask for your explicit permission before sending
anything.
---
## 7. Data stored only on your device
The following never leave your phone and are not sent to us:
- Tournament brackets created in the bracket generator
- Shot clock settings
- Kick & bank visualizer settings
- App preferences and your local match history when signed out
Deleting the app deletes all of it permanently.
---
## 8. Retention
- **Match history:** kept while your account exists, so you can look back at
past matches. Deleted when you delete your account.
- **Shared live matches:** deleted automatically when the share expires.
- **Account records:** deleted when you delete your account.
- **Server logs:** retained briefly by our hosting providers for reliability and
abuse prevention.
## 9. Your rights
You can ask us to:
- Give you a copy of your data
- Correct anything that is wrong
- Delete your account and everything attached to it
- Stop syncing — sign out and the app keeps working locally
Email **support@tryrunout.com** and we will respond within 30 days. Depending on
where you live you may also have rights under the GDPR or CCPA, including the
right to complain to your data protection authority.
## 10. Children
Run Out is not directed at children under 13, and we do not knowingly collect
data from them. If you believe a child has given us personal data, email us and
we will delete it.
## 11. International transfers
Our providers listed in section 4 may store and process your data in countries
other than your own, including the United States. Where data leaves the UK or
the European Economic Area, the transfer is covered by the Standard Contractual
Clauses (or the UK equivalent) in our agreement with that provider. Email us at
the address below for a copy of the safeguards that apply to your data.
## 12. Changes to this policy
If we change what we collect or who we share it with — particularly if we add
any AI feature — we will update this page and change the date at the top before
the change takes effect.
## 13. Contact
**support@tryrunout.com**
Published at https://www.tryrunout.com/privacy