Security and trust

Your money data stays on your phone. Ramen to Runway never holds or moves your money, shows ads, or sells data. Here’s how that works, how the app is paid for, what happens if it ever shuts down, and how to tell us about a security problem.

How your data is protected

• It stays on your device. There are no accounts. What you enter is saved on your phone, and our server has no copy.
• Cloud backup is locked with your code. If you turn it on, your phone encrypts the backup (AES-256) with a recovery code only you see. We can’t read it or recover the code.
• Connected accounts are read-only. You sign in to Charles Schwab or Coinbase on their own site, so we never see your password. The access they give can’t trade or move money, and it’s kept encrypted on your device, not on our server.
• The app lock is your phone’s. Face ID, your fingerprint, or your passcode is checked by your phone. We never see it.
• Nothing from other companies runs in the app. No ads, analytics, or trackers. Strict browser rules block any script we didn’t ship, and stop other sites from framing the app or reading its data.
• Limits stop abuse. The server limits how many backups, reminders, and messages one network can start. It counts by a one-way fingerprint, never your address, and deletes each count within two days.

What we never do

• Hold, move, or trade your money. The app only records and estimates.
• Sell or share your data. We don’t have it to share.
• Show ads or track what you do. A test group you choose to join gets one anonymous count a day.
• Take money from banks or card companies. Links go to their own pages, with no referral codes.

How it’s paid for

Ramen to Runway is free, and the student who makes it pays to run it (see About). It costs little, because your data lives on your phone, not on our server.

Later, an optional paid plan may add extras that cost money to run, such as linking a bank account. Everything that’s free today stays free. The app will never make money from ads, selling data, or referral fees.

If Ramen to Runway ever shuts down

• We’ll tell you in the app at least 90 days before.
• Your records are already on your phone, and exporting them to a spreadsheet or a backup file keeps working.
• Cloud backups can be restored until the shutdown date. Then they’re deleted.
• The installed app keeps working on your phone, without live prices or cloud backup.

Report a security problem

Email hello@ramentorunway.app with “Security” in the subject, or use Contact us in the app and start your message with “Security”.

• We’ll reply within 3 business days, keep you updated, and credit you when it’s fixed if you’d like.
• Please don’t access or change other people’s data, run tests that slow the site down, or flood it with automated scans.
• Please give us a chance to fix the problem before you share it publicly.

We won’t take legal action against good-faith research that follows these rules. The same details are in security.txt.

Last reviewed October 5, 2026. See every change to the app.