Privacy Policy for DTI Outfits & Codes
App: Runway: DTI Outfits & Codes
Developer / Operator: The Solana Labs
Contact: [email protected]
Effective date: 2026-05-03
Last updated: 2026-05-03
This Privacy Policy explains how The Solana Labs (“we”, “us”, “our”)
collects, uses, and protects information when you use the Runway – for DTI mobile app (the “App”). Runway is a fan-made companion app for the
Roblox game Dress to Impress. Runway is not affiliated with, endorsed by, or sponsored by Roblox Corporation or the Dress to Impress development team.
The App is distributed on Google Play under the package namecom.thesolanalabs.runway and on the Apple App Store under the same
bundle identifier. This policy applies to both versions.
If you have questions about this policy, email
[email protected].
1. The short version
| Account required for posting? | Yes — you can browse most of the app anonymously, but creating posts, commenting, following, and liking require sign-in. |
| Sign-in providers | Apple (Sign in with Apple) and Google (Google Sign-In). We never see your password. |
| Do we sell your data? | No. |
| Do we use ads? | Yes — Google AdMob. You can opt out of personalized ads (and we honor the EU/UK consent flow on first launch). |
| Do we use analytics? | Yes — Sentry (crash diagnostics) and PostHog (anonymous product analytics). Analytics are opt-in via Settings → Preferences. |
| Can I delete my account? | Yes — Settings → Account → Delete Account. This is permanent and cascades to your posts, comments, follows, and likes. |
| Children | The App is intended for users 13 and older. We do not knowingly collect personal information from children under 13. |
2. Information we collect
2.1 Information you provide
- Account details when you sign in with Apple or Google: an email
address (to identify your account on our backend) and, for Apple, the
name your device shares on first sign-in. This is stored by our
backend provider Supabase and used to create a profile row keyed to
your Supabase user ID. - Profile information you choose to set: username, display name,
avatar image, bio, and (optionally) a verified Roblox username. - Content you post: images you upload, captions, theme tags,
comments, likes, follows, and reports. - Roblox handle verification: when you choose to verify your Roblox
account, we generate a short code and ask you to paste it into your
public Roblox bio. We then read your public Roblox profile to
confirm the code is present. We do not see your Roblox password and
never log into your Roblox account.
2.2 Information collected automatically
- Device + diagnostic data through Sentry when the App crashes or
hits an unexpected error: device model, OS version, the specific
error trace, and a randomly generated install ID. This is used to
fix bugs. - Anonymous product analytics through PostHog when you have
analytics enabled in Settings: which screens you open, which
features you use, and the time of day. This is used to understand
what to build next. Analytics are opt-in and disabled by default. - Advertising identifier through Google AdMob if you choose to
allow personalized ads via the on-device consent prompt that appears
on first launch (EU/UK users) or via your system-level “Reset
advertising ID” setting (other regions). - Network metadata like IP address that any internet-connected
service sees, used purely for delivering responses.
2.3 Information we do not collect
- We do not collect precise location data.
- We do not access your contacts, microphone, camera (other than via
the system Photo Picker when you tap to add a photo), SMS, or call
history. - We do not read your Photos library — the Android Photo Picker hands
us only the single image you select. - We do not read your Roblox account aside from the public profile
data needed to confirm a verification code.
3. Permissions we request
| Android permission | Why we ask for it |
|---|---|
INTERNET / ACCESS_NETWORK_STATE | Required for any online functionality (sign-in, feed, posting, drops). |
VIBRATE | Lets us provide subtle haptic feedback on key actions. |
com.android.vending.BILLING | Required by Google Play for in-app subscriptions (“Runway Pro”). |
com.google.android.gms.permission.AD_ID | Required by Google Mobile Ads SDK. We respect your “Delete advertising ID” choice and the EU/UK consent flow. |
We do not request any sensitive permissions (camera, microphone,
contacts, location, SMS, call log, body sensors, accessibility, or
notification listener access).
4. How we use information
We use the information described above to:
- Create and authenticate your account.
- Save your local fits, profile, and activity in a way that survives
reinstalls and works across iOS + Android. - Show the community feed, profile pages, drops feed, and other
features that depend on data shared by you and other users. - Verify ownership of a Roblox handle when you opt in.
- Process subscription purchases through Google Play (or Apple’s App
Store on iOS) via RevenueCat. - Show ads (free tier) and respect your ad-personalization choices.
- Diagnose crashes (Sentry) and understand which features are useful
(PostHog, opt-in only). - Enforce our Community Guidelines — review reports, hide content
reported by 5+ distinct users, ban accounts that repeatedly violate
guidelines, and respond to legal requests where required.
We do not use your data for any kind of profile-based ad targeting
beyond what Google AdMob does with the advertising identifier you
control via OS settings, and we never sell, rent, or trade personal
information to third parties.
5. Service providers and SDKs
The App relies on the following third-party services. Each provider
processes only the data needed to perform its function. Their privacy
policies govern how they handle data on their side.
| Provider | What it does in Runway | Data they receive | Privacy policy |
|---|---|---|---|
| Supabase | Backend database, authentication, image hosting | Your Supabase user ID, profile fields, posts, comments, likes, follows, reports, blocks, uploaded post images and avatars | https://supabase.com/privacy |
| Sign in with Apple | Apple authentication | Your Apple-provided identity token (we never see your password); on first sign-in, your name and email | https://www.apple.com/legal/privacy/ |
| Google Sign-In (Credential Manager) | Google authentication | A Google ID token verifying your account; your email and name from your Google profile | https://policies.google.com/privacy |
| Google AdMob | Banner / interstitial / rewarded ads on the free tier | Advertising identifier, IP address, ad interaction events. Personalized ads only with your consent. | https://policies.google.com/technologies/ads |
| Google User Messaging Platform (UMP) | EU/UK ad-consent dialog | Your consent state (stored locally by the SDK) | https://policies.google.com/privacy |
| RevenueCat | Subscription management for Runway Pro | An anonymous app-user ID, your purchase receipts | https://www.revenuecat.com/privacy |
| Sentry | Crash diagnostics | Crash stack trace, device model, OS version, anonymous install ID | https://sentry.io/privacy/ |
| PostHog (opt-in) | Anonymous product analytics — only when you’ve turned analytics on | Anonymous user ID, screen views, feature events | https://posthog.com/privacy |
| Coil | On-device image loading and caching of images already shown to you | Local cache only; no data sent to a third party | n/a |
| Roblox public API (only if you verify) | Read your public Roblox profile to confirm verification code | The Roblox username you typed | https://en.help.roblox.com/hc/en-us/articles/115004630823 |
We do not share your data with any third party not listed above.
6. User-generated content (UGC)
Posts, captions, tags, comments, and avatar images you upload are
publicly visible to other Runway users. Anyone who opens the
community feed, your profile, or a tag detail page can see them. Do not
post information you don’t want public.
We moderate UGC through:
- On-device filtering: caption text is checked against a profanity
list before submission. - Community reporting: any user can report a post. A post is
automatically hidden after 5 distinct users report it. - Admin review: our moderators can hide or delete posts and ban
users that violate our Community Guidelines.
If you’d like content removed for a reason other than your own deletion
(for example, a copyright concern), email
[email protected] with the post URL or screenshot.
7. Data retention
| Data | Retention |
|---|---|
| Your account, profile, posts, comments, likes, follows, blocks | Until you delete the account, or the account is removed for guideline violations |
| Anonymous diagnostic / analytics events | Up to 90 days |
| Ad consent state | Stored on your device by the UMP SDK |
| Image uploads | Until you delete the corresponding post or account |
When you delete your account through Settings → Account → Delete Account,
the App calls a server-side function that removes your Supabase
authentication row. The cascade deletes your profile, posts, comments,
likes, follows, blocks, and uploaded images. This is permanent and not reversible.
8. Your rights and choices
You can:
- Browse anonymously — the community feed is readable without
signing in. Only writes (posting, liking, commenting, following)
require sign-in. - Edit your profile at any time via Settings → Account → Edit
Profile (display name, bio, avatar). For privacy reasons, your
Runway username can be changed exactly once. - Block another user from a post or profile, hiding their content
from your feeds. - Report content or users for moderator review.
- Toggle analytics off in Settings → Preferences → Share anonymous
analytics. With analytics off, PostHog receives nothing. - Reset your advertising ID from Android system settings (Privacy
→ Ads). The App honors this and serves only non-personalized ads. - Withdraw EU/UK ad consent by reopening the consent flow from
Settings (or by reinstalling the app). - Delete your account entirely from Settings → Account → Delete
Account.
If you live in a jurisdiction with statutory data-subject rights
(GDPR / UK GDPR / CCPA / similar), you can also email
[email protected] to:
- Request a copy of the personal information we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data outside of the in-app flow.
- Object to processing (e.g. analytics) — for analytics this is
equivalent to toggling the in-app switch off.
We respond within 30 days.
9. Children
Runway is intended for users 13 and older. Parts of Dress to Impress are popular with younger players, but the social features
of Runway (community feed, comments, profiles) are not built for
under-13 users. We rely on the age-gate enforced by Apple and Google
at sign-in time and by your account creation with those providers.
We do not knowingly collect personal information from a child under
- If you believe a child has registered an account, email
[email protected] and we will remove the account.
10. International transfers
Our backend is hosted by Supabase. Depending on your region, your
data may be processed in the United States or another country where
Supabase or our other service providers operate. By using the App you
consent to those transfers.
11. Security
We use TLS for all traffic between the App and our backend.
Authentication tokens are stored in the operating system’s secure
preferences area. We do not see your Apple or Google password —
authentication is handled by the providers using OS-level identity
APIs.
No system is perfectly secure. If you suspect your account has been
compromised, email [email protected] and we will help you
recover or delete it.
12. Changes to this policy
We may update this policy as the App evolves. When we make material
changes, we will update the Last updated date at the top and, if
the change is significant, surface a notice in the app. Continued use
of the App after a change means you accept the updated policy.
13. Contact
The Solana Labs
Email: [email protected]
App: Runway: DTI Outfits & Codes · com.thesolanalabs.runway
If you live in the EU/UK, you also have the right to lodge a complaint
with your local data-protection authority.