This privacy policy applies to the Runway app for mobile devices, together with any related services operated by Finn McGuinness (collectively, the "Application"). Finn McGuinness is hereby referred to as the "Service Provider".
Independent Product
This Application is an independent preparation tool. It is not affiliated with, endorsed by, or connected to any airline, assessment provider, or aptitude test publisher, including AON Assessment Solutions and its subsidiaries.
Information We Collect
The Application collects a limited amount of pseudonymous data to operate a public leaderboard. Specifically:
Device Identifier: A randomly generated identifier stored on your device, used to prevent duplicate leaderboard entries and to distinguish your submissions from those of other users. This identifier is not linked to your real identity.
Auto-Generated Username: A random display name (e.g. "Eagle#1234") generated on your device when you first use the Application. This name is shown publicly on leaderboards.
Test Performance Data: The number of correct answers, total attempts, section played, and a timestamp, submitted to our leaderboard database when you complete a test.
We do not collect your name, email address, phone number, physical address, precise location, contacts, photos, IP address, browsing history, or any other personally identifiable information. The Application does not require you to create an account or sign in.
How We Use Information
The information collected is used exclusively to:
Display leaderboard rankings visible to other users of the Application
Distinguish your submissions from those of other users
Provide the functionality of the Application
We do not use your information for advertising, marketing communications, or cross-app tracking.
Third-Party Services
The Application uses the following third-party service to operate:
Supabase, Inc. — We use Supabase as our backend infrastructure provider. Leaderboard data is stored on Supabase's servers. Supabase's privacy practices are governed by their own privacy policy, available at supabase.com/privacy.
Supabase may automatically log server-side information (such as request logs) as part of standard infrastructure operation. The Service Provider does not access or use this data.
Your Rights
You may request access to, correction of, or deletion of the data associated with your device identifier. To exercise these rights, contact the Service Provider at finn6dev@gmail.com and provide the username visible on your leaderboard entry so we can locate and act on your data.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information), and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at finn6dev@gmail.com.
International Data Transfers
The Service Provider or its third-party service providers may store data on servers located outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, we rely on legally recognised mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms.
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, we will apply appropriate safeguards.
When We May Disclose Information
The Service Provider may disclose the information collected:
As required by law, such as to comply with a subpoena or similar legal process
When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
With trusted service providers who work on our behalf, do not have independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting new data, but does not automatically delete information that has already been submitted to our leaderboard database.
To request deletion of your existing data, contact the Service Provider at finn6dev@gmail.com with the username shown on your leaderboard entry.
Data Retention
The Service Provider retains data based on its necessity for the stated purposes:
Leaderboard Data: Retained indefinitely to preserve the historical leaderboard, unless deletion is specifically requested.
Aggregated or Anonymised Data: Retained indefinitely as it no longer identifies you.
Data required for legal compliance: Retained as long as required by applicable law.
You may request deletion of your data at any time, subject to any legal obligation to retain it.
Children
The Application is not intended for children under 13 years of age, or such higher age as required by applicable law (16 in parts of the European Union and United Kingdom). The Service Provider does not knowingly collect information from children under these ages.
If you have reason to believe that a child has provided information to the Service Provider through the Application, please contact us so we can take the necessary actions. If you are under the applicable minimum age in your jurisdiction, your parent or guardian must provide consent on your behalf where permitted by law.
Security
The Service Provider takes reasonable steps to safeguard the information collected through the Application. This includes using Supabase's built-in Row Level Security to restrict access to leaderboard data, and generating identifiers on your device rather than collecting them from external sources. No system is completely secure, and we cannot guarantee absolute security.
Data Breach Notification
If a data breach occurs that affects your data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. Material changes will be posted with an updated effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at finn6dev@gmail.com.
This privacy policy is effective as of 2026-07-23.
Your Consent
Where processing is based on consent, you provide that consent by using the Application. You may withdraw consent at any time by uninstalling the Application and requesting deletion of any data already submitted. Withdrawal of consent does not affect processing carried out before withdrawal.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at finn6dev@gmail.com.
If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at finn6dev@gmail.com.