Privacy Policy

Effective September 29, 2026

RUNBENCH ("RUNBENCH," "we," "us," or "our") is a free desktop application currently offered in beta by Alexander Krause. This Privacy Policy describes how we collect, use, store, and disclose information in connection with your use of the RUNBENCH application and website (collectively, the "Service"). By creating an account or using the Service, you acknowledge that you have read and understood this Policy. For any questions, contact us at support@runbench.app.

1. Information We Collect

Account information. To create an account, you must provide an email address and a password. These credentials are stored and managed by our authentication provider, Supabase Auth, at syfxeeujgygmosgiooiq.supabase.co. Your password is retained solely as a sign-in credential by Supabase; we do not maintain a separate copy. We may decline to authenticate an account until its associated email address has been confirmed. A sign-in session is stored locally on your device, encrypted by your operating system, and periodically refreshed through Supabase for the duration of your session.

Entitlement information. When you accept the beta, we create a single entitlement record associated with your account, consisting of an account identifier, an access status, the applicable tier (beta), and the date of sign-up. The payment-related fields of this record remain empty during the beta. While you are signed in, the application communicates with Supabase to verify your access status and to retrieve the current application configuration. These requests transmit your account authentication token, and Supabase may observe the associated account identifier, IP address, and request timestamp.

2. Information Stored Locally on Your Device

Your projects, prompts, notes, generated files, and any API keys you provide are stored locally on your device and are not transmitted to our servers. API keys and your sign-in session are stored using your operating system's encryption facilities. Uninstalling the application does not delete your account, and files stored on your device remain until you delete them. The Service is not a backup service, and we assume no responsibility for the preservation of locally stored data.

3. Third-Party Providers You Connect

The Service enables you to connect third-party artificial-intelligence providers using your own API keys. When you do so:

Chat providers. Chat requests are transmitted directly from your device to the provider you have connected, authenticated with your key. Supported chat providers are Anthropic, OpenAI, and Google.

Generation providers. Image and video generation requests, including any images you attach, are transmitted directly from your device to the provider you have connected, authenticated with your key. Supported generation providers are Black Forest Labs (Flux), Ideogram, Runway, and Stability AI.

We do not receive, intercept, or retain copies of these requests on our servers. Each provider processes your content under its own terms of service and privacy policy, and we encourage you to review them.

Midjourney. Midjourney is not accessed via API key. The application copies your prompt to your device clipboard and opens midjourney.com within the application's embedded browser. Your activity on that site, including any login, is governed solely by your relationship with Midjourney, and that site may set cookies within the embedded browser on your device. We do not receive your Midjourney credentials.

ComfyUI. ComfyUI operates on a computer of your choosing, and traffic to it does not pass through our servers.

4. Website, Downloads, and Updates

Our website, application installers, and the application's update-check mechanism are hosted by Cloudflare. In the course of serving a download or an update check, Cloudflare may observe your IP address and standard request metadata. Update checks do not transmit your email address, projects, or locally stored content.

5. How We Use Information

We use the information described above solely to provide, maintain, secure, and improve the Service — specifically, to authenticate your account, verify your entitlement, deliver application configuration, and operate our hosting and update infrastructure. We do not use your information for advertising or profiling.

6. What We Do Not Do

We do not sell your personal information. We do not share your personal information for advertising or cross-context behavioral advertising. We do not employ third-party analytics software-development kits. We do not track you across other websites or services, and because we do not track you, we do not respond to "Do Not Track" browser signals. In-application Stripe checkout is disabled, and no payment-card information is collected. Should a paid plan be introduced in the future, this Policy will be updated before any charge is imposed.

7. Data Retention

We retain your account and entitlement record until you request their deletion or until we discontinue the beta. Our infrastructure providers, Supabase and Cloudflare, maintain their own connection and operational logs as necessary to operate and secure their services; such logs may include IP address, timestamp, and, in the case of Supabase, the account identifier. We do not use these logs for advertising. Following a deletion request, residual copies may persist in Supabase's backups for a limited period before being overwritten.

8. Your Choices and Rights

You may contact us at support@runbench.app to request access to the information we hold about you, to correct the email address associated with your account, or to delete your account and entitlement record. Upon a deletion request, we will delete your Supabase login credential and your entitlement record. We are unable to delete files that remain on your device or content you have already transmitted to a third-party provider, as such content is outside our control.

9. Children

The Service is intended for individuals eighteen (18) years of age or older. We do not knowingly collect personal information from children under the age of thirteen (13). If we become aware that we have collected such information, we will delete it.

10. Users Outside the United States

The Service is operated from the United States and is not directed at users in the United Kingdom or the European Economic Area. We have not appointed a representative in those jurisdictions. If you are located outside the United States and use the Service, you may contact us at support@runbench.app to access or delete your account. By using the Service, you consent to the transfer and processing of your information in the United States.

11. Changes to This Policy

We may modify this Policy from time to time. When we do, we will revise the "Effective" date above and post the updated Policy on this page. Your continued use of the Service following any such change constitutes your acceptance of the revised Policy.

12. Contact

Questions regarding this Policy may be directed to support@runbench.app.