Privacy Policy

What we collect

• Your account email. You sign in with Google or with an email and password. Your email address identifies your account and is used only for authentication and account management.
• The apps you create. The HTML/JS content and any icons you add are stored privately under your account so they can be restored on a new device. They are stored on Supabase (see “Service providers” below), in the EU.

What we do not collect

• No analytics, advertising, or usage tracking.
• No crash or diagnostic reporting.
• No access to your location, camera, or microphone by CanvasRunner itself. Those permissions are requested only at the moment one of your own loaded apps calls the matching browser API, and that data never leaves your device.
• No contacts, files, or other personal data.

Service providers

• Supabase — hosts the database, file storage, and authentication for your account and your synced apps (EU region). Data in transit is encrypted.
• Google — used for “Sign in with Google”.

We do not sell or share your data with anyone else, and we do not use it for advertising.

Retention

Your account email and the apps you have synced are kept for as long as your account exists. An individual app that has not synced for 30 days is automatically deleted from our servers (the copy on your device is unaffected). When you delete an app or your account, the data is removed immediately, as described below — nothing is kept afterwards.

Deleting your data

You control your CanvasRunner data from inside the app.

Delete a single app

In My Apps, open the menu (⋮) on any app and choose Delete. That app and its backup are removed from your account immediately. Your account, your email, and your other apps are not affected.

Delete your account and all data

1. Open the Settings tab in CanvasRunner.
2. Tap Delete account and type DELETE to confirm.

This immediately and permanently deletes your account, your email address, every app and icon you have backed up, and all associated database records, and it wipes CanvasRunner’s data from the device. Nothing is retained, there is no recovery period, and the action cannot be undone.

If you cannot reach the app, email pasqualehearthstone+canvasrunner@gmail.com from your account’s email address and we will delete your account and all associated data within 30 days.

Signing out is not deletion — it removes CanvasRunner’s data from that device but your apps stay backed up to your account and return when you sign back in.

Children

CanvasRunner is not directed to children. It is intended for adults (18 and over) and is not listed for younger age groups on Google Play.

Changes

If this policy changes materially, the “Last updated” date above will change and, where required, we will notify you in the app.

Contact

Questions about this policy or your data: pasqualehearthstone+canvasrunner@gmail.com.