RabbitLore
Privacy Policy
Last updated: August 20, 2026
Overview
RabbitLore ("we", "us") is a curiosity-journaling and social app for logging rabbit holes, connecting with people who share your interests, and messaging them privately. This policy explains what data we collect, why, and how you can control it.
Information we collect
Account data — email address, a securely hashed password (we never store your password in plain text), username, display name, bio, and avatar.
Content you create — the lores, comments, reactions, and direct messages you post. Direct messages are ephemeral: they are automatically and permanently deleted at 5am IST after being sent.
Media you upload — images and voice notes you attach to lores or messages, stored with our cloud storage provider.
Device & usage data — a push-notification token (if you enable notifications), IP address (used only for abuse/rate-limit protection, not stored long-term against your identity), and basic app-usage signals (streaks, activity timestamps) used to power in-app features like reminders.
Payment data — if you choose to support the app financially, payment is processed by our third-party payment processor (PhonePe). We do not receive or store your card, UPI, or bank details — only confirmation that a payment succeeded and which tier you purchased.
How we use your data
- To operate core features: your feed, DMs, notifications, and social graph (follows, blocks).
- To personalize your feed based on the topics you engage with.
- To send you push notifications about activity you've opted into (replies, follows, reactions) — you can disable these anytime in Settings.
- To detect and prevent abuse, spam, and policy violations (rate limiting, account lockouts on repeated failed logins, content moderation review).
- To generate optional AI-assisted suggestions (e.g. lore title/category suggestions) — the text you're actively writing may be sent to our AI provider for this single purpose and is not used to train models.
Who we share data with
We do not sell your data. We share the minimum necessary data with the infrastructure providers that run the app on our behalf: our database and caching providers (to store and serve app data), our cloud storage provider (for uploaded media), our push-notification provider (Expo), our real-time messaging provider (Ably, for live DMs and rooms), our transactional email provider (for account verification/password reset emails), and our payment processor (PhonePe, only for users who choose to make a payment). Each of these providers is contractually restricted to using your data solely to provide their service to us.
Blocking, reporting & moderation
You can block another user at any time from their profile or a conversation — this immediately stops them from following, messaging, or commenting on your content, and removes any pending follow/message requests between you. You can also report content or accounts for review. We retain reported content and moderation actions (warnings, suspensions, bans) as needed to enforce our community standards.
Data retention & deletion
Direct messages expire automatically within 24 hours (5am IST). You can delete individual lores, comments, or your account entirely at any time from Settings. Deleting your account permanently removes your profile, lores, comments, constellation data, and message history — this cannot be undone.
Children's privacy
RabbitLore is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can access, update, or delete your data at any time through the app (Settings → Account & Security, Edit Profile, Delete Account). If you need help with a data request beyond what's available in-app, contact us using the details below.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with an updated "Last updated" date.
This policy is provided for transparency about our data practices and to meet app-store disclosure requirements. It is not a substitute for legal advice — if you have specific legal or compliance obligations, please have this reviewed by counsel.