UPDATED 8 OCTOBER 2026

Privacy policy

RuneKind is provided by WHO DEVELOP LTD (company 09096989), 124 City Road, London, EC1V 2NX, United Kingdom. We are responsible for the personal data described here. Contact contact@runekind.com about privacy or your rights.

Your questions and journal stay on your device

Readings, questions, reflections, favourites, learning progress and preferences are stored locally. RuneKind has no app-managed cloud sync or remote AI interpretation. We do not receive your journal through ordinary app use. Your operating system may separately back up app data under its settings.

Manual exports contain your private text. You choose where to save or share them using your device’s controls. Copies outside RuneKind are controlled by you and the destination you select.

Purchases

Apple or Google processes payments; RuneKind does not receive your card details. RevenueCat helps validate purchases and restore access using store transaction information and an app-scoped customer identifier. Purchase and subscription events may also be sent to our internal analytics and operational notification services, without your journal or questions. This processing supports the purchase contract, access, fraud prevention and necessary records.

Usage and diagnostics

When enabled in distributed builds, PostHog EU receives an app-scoped identifier and a restricted set of events such as viewing a rune, completing a reading or opening a paywall, with limited feature identifiers and counts. These are pseudonymous records, not your written questions or reflections. Sentry receives filtered error and device/app diagnostics to investigate failures. Session replay, screenshots, console breadcrumbs, advertising IDs and advertising profiles are not used by RuneKind. Local development analytics is disabled.

Our purposes are to understand whether features work and keep the app reliable. Our interests are improving and protecting the service; where applicable law requires consent, that requirement applies before the relevant optional processing. You can contact us to object to processing based on legitimate interests or ask about your data.

This website and support

This website does not set analytics cookies, run marketing trackers, collect journal text or provide a mailing-list form. Cloudflare hosts the site and processes connection information such as IP address and technical request data to deliver and protect it. Emailing support provides us with your email address and whatever you choose to send. Please do not send your journal, payment-card information or passwords. Support information is used to answer your request, resolve problems and protect the service.

Storage, retention and deletion

Local journal data remains until you remove it. A reading moved to Recently deleted remains on the device until restored or removed through data removal. Delete all local data in Today → Settings → Data removal. Exported copies and operating-system backups must be deleted separately.

Service records are retained according to their purpose: purchase records while needed to validate access, handle refunds/disputes or comply with legal obligations; support correspondence while needed to resolve and follow up on the request; usage and diagnostic records under the relevant provider’s configured retention. We do not promise that deleting local data also deletes provider records. Ask us to locate and delete service data using the process below. We will explain any necessary retention and the applicable period in our response.

Providers and international processing

Service providers include RevenueCat, PostHog, Sentry, Cloudflare, our email provider and your platform store. PostHog and Sentry are configured for their EU services. EU hosting does not mean every provider operation takes place exclusively in the EU. Provider policies and data-processing terms describe their locations and transfer safeguards. Contact us for information about safeguards relevant to your data.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability, object to processing, and withdraw consent where processing relies on it. Email us with “RuneKind privacy” or use our deletion instructions. We may ask for limited information to verify and locate your record, never your store password or journal. You may complain to the UK Information Commissioner or your local data-protection authority.

Changes

We will update this page when RuneKind’s data practices change. The date above identifies this version. A new feature that sends your private text to a remote service would require a separate explanation before use.