Privacy Policy

Last updated: 2026-07-01

Runway Ready AI S.L. ("RunwayReady", "we", "us") is the data controller for personal data processed through our mobile application and website https://runwayready.ai (the "Services").

1. Controller identity

• Legal name: Runway Ready AI S.L.
• Tax ID (CIF/NIF): B27598499
• VAT: ESB27598499
• Address: Calle Faraday 7, Parque Científico de Madrid, 28049 Madrid, Comunidad de Madrid, Spain
• Contact: privacy@runwayready.ai
• Data Protection Officer: dpo@runwayready.ai

2. Data we collect

• Account: name, email, Firebase UID, profile photo, locale.
• Images & wardrobe content: clothing photos, outfits, profile and try-on images you upload, stored in Google Cloud Storage (EU region europe-west1).
• Body measurements: measurements you enter or we estimate for sizing (we do not use biometric data for identification).
• Usage data: app interactions, technical logs, device identifiers, push tokens.
• Payments: processed by Stripe; we never store full card numbers.
• Marketplace: listings, orders, support messages for peer-to-peer sales.
• Legal consent records: document version, timestamp, bundle hash (GDPR audit trail).

3. Purposes & legal bases (GDPR Art. 6)

Purpose	Legal basis
Provide the service (account, wardrobe, outfits)	Contract performance
AI image processing (detection, flat-lay, try-on)	Contract / consent where applicable
Marketplace & shipping	Contract performance
Security, fraud, legal compliance	Legitimate interest / legal obligation
Non-essential analytics & marketing	Consent (cookies/SDKs)

4. AI & processors

We use AI-powered features. Your images and prompts may be sent to:

• Google Cloud / Vertex AI (Gemini) — vision, text, image generation; EU region where available.
• fal.ai — image generation and LLM failover; may involve transfer to the US under Standard Contractual Clauses.
• Stripe — payments.
• Google Firebase — authentication and technical operation.
• Termly — cookie consent management.

AI outputs (e.g. flat-lays, try-on renders) may be synthetic and not perfectly accurate. They are not professional advice.

5. Retention

We retain data while your account is active. After deletion request, we erase or anonymize personal data within a reasonable period, except where law requires retention (e.g. legal consent audit, account tombstone).

6. International transfers

Where processors operate outside the EEA (e.g. fal.ai in the US), we use appropriate safeguards including EU Standard Contractual Clauses.

7. Your rights

You may access, rectify, erase, restrict, port, or object to processing, and withdraw consent via privacy@runwayready.ai or in-app data export and account deletion (Privacy settings).

You may request human review where automated decisions have significant legal effects.

8. Children

Services are not directed at children under 16. We do not knowingly collect data from children.

9. Supervisory authority

You may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es.