Privacy Policy

Effective and last updated: September 26, 2026

The short version

We collect what we need to run MiniRunner: your account details, what you ask the agent to do, the files and sites it creates, and data from services you choose to connect.
We do not sell your personal information, share it for targeted advertising, or use it to train AI models.
We reach a connected service only to carry out a task you asked for or scheduled.
You can disconnect services, and delete your account and data, from inside the app.

This Privacy Policy explains how [COMPANY LEGAL NAME] (“MiniRunner,” “we,” “us,” or “our”) collects, uses, discloses and protects information when you use the MiniRunner mobile applications, the websites at minirunner.app, and related services (together, the “Service”). By using the Service you agree to this policy. If you do not agree, please do not use the Service.

Information we collect
How we use information
AI processing
Connected services
Google user data
How we share information
Retention and deletion
Your choices
U.S. state privacy rights
Security
Children
Where we process data
Changes to this policy
Contact us

1. Information we collect

Information you provide

Account information. Your email address and, if you sign in with Apple or Google, the name and account identifier those services share with us. We do not receive your Apple or Google password.
Content. The messages and instructions you send the agent; files, images and documents you upload; voice recordings you dictate; notes; scheduled tasks; the agent’s saved memory and skills; and the files, code and websites the agent creates for you in your workspace.
Website settings. For sites you publish, the site content, the custom domains you add, and environment variables you enter, which may include keys or credentials for other services.
Credentials you give the agent. If the agent asks you for a credential to finish a task and you provide it, we store it for that purpose.
Communications. Messages you send us for support or feedback.
Purchases. If you buy a plan or credits, a record of the purchase. Payments are processed by the app store or payment processor you use; we do not receive or store full payment card numbers.

Information collected automatically

Device and app information. Device type, operating system, app version, and a push notification token if you allow notifications.
Usage and log information. IP address, request timestamps, the features you use, errors, and records of the credits your tasks consume.

We do not use advertising identifiers, and we do not track you across other companies’ apps or websites.

Information from connected services

If you connect a third-party service, we receive an access credential from that service and the data the agent retrieves from it while carrying out your tasks. See Connected services.

2. How we use information

To provide the Service: run the agent, keep your workspace, perform tasks you request or schedule, publish your websites, and send notifications you enable.
To maintain your account, authenticate you, and provide support.
To measure usage for billing and to enforce plan limits.
To keep the Service secure: detect and prevent abuse, fraud and violations of our Terms of Service, and debug problems.
To communicate with you about the Service, including changes to our terms or policies.
To comply with law and protect the rights and safety of our users and others.

We do not use your content or connected-service data for advertising, and we do not sell it.

3. AI processing

To answer you and carry out tasks, we send the relevant parts of your content, and any connected-service data needed for the task, to AI model providers that process it on our behalf. We use these providers under terms that do not permit them to use your data to train their models. We do not use your content or connected-service data to train or improve AI models, ours or anyone else’s.

Voice recordings are sent to our transcription provider to be converted to text and are not stored by us after transcription. Web searches the agent runs are sent to our search provider as search queries.

AI output can be inaccurate. Review important results before relying on them, especially before the agent takes actions in services you have connected.

4. Connected services

You can choose to connect third-party services, such as Google Calendar, Microsoft 365 (Outlook Mail, Outlook Calendar, Outlook Contacts, OneDrive, Excel, Teams, To Do, SharePoint and OneNote), GitHub, Notion, Linear, HubSpot, Supabase and Dropbox. When you connect one:

You sign in on that service’s own page and approve the access shown there. We never see your password for that service.
We store the access credential it issues, encrypted, on our servers.
The agent uses the credential only to carry out tasks you request or schedule, for example reading your calendar to answer a question or creating an issue you asked for. We do not browse or copy your data from connected services for any other reason.
Data retrieved from a connected service is used to complete your task and may be kept in your chat history and workspace, like the rest of your content.
You can disconnect a service at any time in the app’s Settings, and you can also revoke our access from your account settings at that service.

Your use of each connected service is also governed by that service’s own terms and privacy policy.

5. Google user data

If you connect Google Calendar, we access your calendars and events so the agent can read, create, update and delete calendar events at your request. We use this data only to provide those user-facing features. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine-learning models. We transfer it to others only as needed to provide the feature you asked for (such as to our AI and hosting providers acting on our behalf), for security purposes, or to comply with law. Our staff do not read your Google user data unless you give us permission, it is necessary for security, or it is required by law.

MiniRunner’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We share personal information only as described here:

Service providers that process data on our behalf under contracts limiting their use of it:
- Hosting, databases and compute: Railway, Supabase, Fly.io and Cloudflare
- AI models and transcription: Anthropic, OpenAI and Google
- Image and video generation: fal.ai
- Web search: Brave
- Email delivery: Resend
- Push notifications: Expo, Apple and Google
- Sign-in: Apple and Google, when you choose to use them
Connected services, when the agent acts in them at your direction, for example sending an email or creating a document you asked for.
The public, for websites you publish. Anything you publish with My Web is available to anyone with the address.
Legal and safety reasons, when we believe in good faith it is necessary to comply with law or legal process, enforce our terms, or protect the rights, property or safety of MiniRunner, our users or others.
Business transfers, as part of a merger, acquisition, financing or sale of assets, subject to this policy’s protections.
With your consent, or at your direction.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law.

7. Retention and deletion

We keep your information for as long as your account is active, and afterwards only as long as needed for the purposes in this policy or as required by law. You can delete individual chats, files, notes and sites in the app.

You can delete your account in the app under Settings. When you do, we immediately delete the credentials for your connected services and ask those services to revoke them where they support it, and we delete or de-identify the rest of your personal information within 30 days. Copies in backups are removed as backups expire on their normal schedule. We may keep limited information longer where the law requires it, to resolve disputes, or to prevent fraud and abuse.

8. Your choices

Connected services: disconnect any service in Settings at any time.
Notifications: turn push notifications off in your device settings.
Account and content: view and delete your content in the app, or delete your account in Settings.
Requests: contact us at support@minirunner.app for anything you cannot do in the app.

9. U.S. state privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws, you may have the rights below. This section also serves as our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Categories of personal information we collect

Category	Examples	Disclosed for a business purpose to
Identifiers	Email address, name, account ID, IP address, device push token	Service providers
Customer records	Account and support records	Service providers
Commercial information	Plans and credits purchased, usage records	Service providers, payment processors
Internet or network activity	Logs of how you use the Service	Service providers
Audio and electronic information	Voice recordings you dictate; files and images you upload	Service providers
Content and connected-service data	Messages, files, calendar events, email, documents and other data you direct the agent to use	Service providers; connected services at your direction
Sensitive personal information	Account credentials for connected services; the contents of email or messages in services you connect	Service providers, only to provide the Service

Sources: you, your device, and the services you connect. Purposes: those described in How we use information. Retention: as described in Retention and deletion. We do not sell or share any category of personal information, and we have not done so in the past 12 months. We use sensitive personal information only to provide the Service you request and for the other purposes the CCPA permits, so we do not offer a right to limit its use.

Your rights

Know and access the personal information we have collected about you, and receive it in a portable format.
Delete personal information we collected from you.
Correct inaccurate personal information.
Opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We do not do these things.
Non-discrimination: we will not treat you differently for exercising your rights.

To make a request, email support@minirunner.app from the address on your account, or delete your account in the app. We will verify your request by confirming control of that email address, and we respond within 45 days, or longer where the law allows and we tell you why. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity directly. If we deny your request, you may appeal by replying to our decision, and we will respond within the time the law requires. If your appeal is denied, you may contact your state attorney general.

Global Privacy Control and Do Not Track. Because we do not sell or share personal information, there is nothing for these signals to opt you out of; we treat a Global Privacy Control signal as a valid opt-out request where the law requires. We do not respond to browser Do Not Track signals differently.

10. Security

We protect information with measures designed for its sensitivity, including encryption in transit, encryption at rest for connected-service credentials, access controls that keep each user’s workspace separate, and limits on who at MiniRunner can access production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as the law requires.

11. Children

The Service is intended for people 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

12. Where we process data

We and our service providers process information in the United States and other countries where they operate. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here and change the date at the top. If a change is material, we will tell you in the app or by email before it takes effect.

14. Contact us

Questions or requests about privacy: support@minirunner.app
[COMPANY LEGAL NAME]
[MAILING ADDRESS]