Privacy Policy
Last updated October 4, 2026
Rabbithole is made by Austin White, who publishes the Rabbithole app on the App Store and runs this website ("we", "us"). This policy explains what information we collect, why, who helps us handle it, and the choices you have.
The short version
- You can learn without giving us your name or email.
- We record what you do in lessons, never what you type, to save your progress and make lessons better.
- No ads. We don't sell your information, and the app has no advertising or third-party tracking tools.
- Apple handles payments. We never see your card details.
1. What we collect
An anonymous learner account
The first time you open the app, it signs you in anonymously: our sign-in provider creates a random learner ID with no name or email attached. The sign-in session is kept in your phone's keychain so the app can sign you back in. We use this ID to save your progress and sync it.
Your learning activity
As you use the app it keeps a log of what you do and syncs it to our servers under your learner ID:
- the course you chose, and your onboarding answers, picked from fixed lists (how you heard about us, your level, your reasons for learning, your daily goal and where you placed);
- lessons you opened and cards you read;
- each answer you checked: which exercise, whether it was right, which attempt it was, the option you picked in a multiple-choice question, and how long it took;
- practice steps: which step, how many hints and attempts you used, whether you skipped it, and how long it took;
- how long each session lasted, and energy refills and items you got in the shop with carrots;
- a rating for each exercise or practice step (how well you knew it), which we use to schedule reviews.
Each entry has a time. The log never contains text you type: not your typed answers and not the commands you enter in the practice terminal.
Your wallet (carrots, streak freezes, energy, XP boosts and the chests you've opened) is also saved to your account, so it comes back when you sign in on a new phone.
Your profile (optional)
If you create a profile, we store the name and username you choose. If you add your email to save your progress, we store that too, and send a one-time code to it to confirm it. Your email is used to sign you in and to reply to you; it is never shown to other learners.
Signing in with Apple or Google (optional)
Instead of an email code, you can sign in with Apple or with Google. Apple or Google then tells us only what you agree to share: an ID for your account in Rabbithole, your email address and your name. Apple shares your name only the first time you sign in, and only if you choose to. We use these to sign you in and, if you make a profile, to suggest its name; your email is never shown to other learners. Google also sends a link to your Google profile picture and whether Google has verified your email address; we keep these with your sign-in, and we don't show or use the picture.
Continue with Google uses Google's own sign-in software inside the app. Google says that software also collects some information for Google itself, such as a device identifier, your approximate location and how the sign-in is used. Google handles that under its own privacy policy (policies.google.com/privacy). As with every provider in section 5, we use Google's sign-in only on terms that bind Google to protect this information with the same or equal protection as this policy.
With Sign in with Apple you can choose Hide My Email. We then get a private relay address from Apple (ending in privaterelay.appleid.com or private.icloud.com) that forwards to your real one, which we never see. We never get your Apple or Google password, and nothing else from your Apple or Google account; we never post anything to it.
If you sign in with Apple, we also keep a token Apple gives us for your Rabbithole sign-in, stored encrypted on our servers where the app can't read it, only so that we can tell Apple to end Rabbithole's access when you delete your account. You can also stop using Sign in with Apple for Rabbithole at any time in your iPhone's Settings (your Apple Account › Sign in with Apple), and remove Rabbithole from your Google Account at myaccount.google.com/connections.
Your profile shows your username, name, avatar (if you make one), total XP and streak. Anyone using Rabbithole can see these and find you by typing the start of your username. The link you share to invite friends (rabbithole.pro/u/your-username) shows your username. We check new names and usernames against a list of words we don't allow, and turn away names that contain one.
Weekly leagues
Once you have a profile and have finished 10 lessons, you join a weekly league: a group of up to 30 learners ranked by the XP they earn that week. The others in your group see your name, username, avatar (if you make one), league tier, weekly XP and rank. We store your tier and each week's result (your XP, rank and whether you moved up or down).
Who you follow (optional)
If you follow other learners, we store who you follow and who follows you. A follow can be seen by the two people in it.
Who you block, and reports (optional)
If you block another learner, we store that you blocked them. Only you can see it; they aren't told. Blocking ends any follow between you, and neither of you can follow the other while the block stands.
If you report a learner, the app sends us the reason you pick (such as an inappropriate name) with their learner ID, username and name, and your learner ID. They aren't told, and can't see who reported them. We use the report to review their profile and act on it. If the app can't send it (for example, you're offline), your email app opens a message to us with the same details instead; we keep that email, with your email address, to answer you.
Purchases
Rabbithole Pro is sold by Apple through the App Store. Apple processes the payment; we don't receive your card details or billing address. The app asks Apple whether you have an active subscription so it can unlock Pro.
Technical data
When the app talks to our servers, our provider Supabase logs your IP address, the app's version and your iOS version (both are sent with every request), and the time, for security and debugging. These logs are kept for 7 days. Supabase also keeps an audit record of each sign-in, including the IP address it came from.
Messages you send us
If you email us, we keep your message and email address to answer you.
2. What stays on your phone
Some things are stored only on your device: your settings (appearance, course, reminder time), your Pro status, a copy of your activity log, and the data your home screen widget shows. Reminders are local notifications scheduled on your phone, and only if you allow notifications; we don't send push notifications. Deleting the app deletes this data from your phone.
3. How we use it
- To run the app: save and sync your progress, work out your XP, streak and reviews, and show your profile, friends and weekly league.
- To improve Rabbithole: for example, finding lessons or questions that confuse many learners.
- To answer you when you contact us.
- To keep the service safe and working, and to meet legal obligations.
4. What we don't do
- We don't show ads, and we don't sell or rent your personal information.
- The app contains no third-party analytics or advertising tools, and it doesn't use your device's advertising identifier or track you across other companies' apps and websites.
- The app doesn't access your location, contacts, photos, camera or microphone.
5. Who helps us
We use a small number of service providers who handle information on our behalf and only as we instruct. We share your information only with providers who are bound, by their terms with us, to give it the same or equal protection as this policy and as the App Store Review Guidelines require, and to use it only to provide their service to us:
| Provider | What they do |
|---|---|
| Supabase | Hosts our database and sign-in: your learner account, activity, wallet, profile, league standings, follows, blocks and reports, and creates the one-time codes we email you. It logs the IP address, app and iOS version and time of each request and each sign-in, for security and debugging. |
| Resend | Sends the emails with your one-time sign-in code. It receives your email address and the email itself (the code), only to deliver it. |
| Apple | Sells and bills Rabbithole Pro through the App Store, and tells the app whether your subscription is active. If you choose Sign in with Apple, signs you in and shares the details above. |
| Only if you choose Continue with Google: signs you in and shares your name, email address, Google account ID, profile picture link and whether your email is verified with us. Google's sign-in software also collects device and usage information for Google, under Google's privacy policy and with the same or equal protection as this policy. | |
| Vercel | Hosts this website. Like most web hosts, it may keep standard server logs (such as IP address and pages requested) for security and reliability. |
We may also share information if the law requires it, to protect the rights and safety of our learners or others, or as part of a merger or sale of our business (and then under this policy).
6. This website
rabbithole.pro sets no cookies and uses no analytics or tracking. Fonts and images are served from this site itself.
7. How long we keep it
We keep your account, profile and learning history while your account exists, so your progress is there when you come back. When you ask us to delete your account, we delete it and the information tied to it within 30 days, except where we must keep something by law.
We don't delete accounts automatically when they stop being used, and that includes anonymous accounts with no profile. Deleting the app from your phone doesn't delete your account from our servers. An account and the information tied to it are kept until you delete it in the app (Settings › Account › Delete account) or ask us by email to delete it.
8. Your choices and rights
- Reminders: turn them off or change the time in Settings › Notifications, or turn off notifications for Rabbithole in your phone's Settings.
- Your profile: change your name or username in Settings › Profile.
- Deleting your account: in the app, go to Settings › Account › Delete account. That deletes your account, profile, follows, blocks, wallet, league standings and learning history from our servers, and the copy on your phone. If you signed in with Apple, we also tell Apple to end Rabbithole's access to your Apple sign-in. To delete only your public profile and follows, use Settings › Profile › Delete profile.
- Access, correction and deletion by email: email team@rabbithole.pro from the address on your profile (or tell us your username) to get a copy of your information, correct it, or have us delete your account. We'll reply within 30 days.
- Blocking: tap a learner in Friends search, in Following / Followers or in your weekly league, then Block. You can unblock them under Blocked learners at the foot of Following / Followers.
Depending on where you live, you may have further rights under laws such as the GDPR (EU and UK) or the CCPA (California), including the right to object to or restrict some uses and to complain to your data protection authority. We don't sell or share personal information for cross-context behavioral advertising.
Legal bases (EU, EEA and UK)
If you are in the EU, the EEA or the UK, we rely on these legal bases under Article 6 of the GDPR (and the UK GDPR):
- To provide the app you asked for (performance of a contract): creating and running your learner account; saving and syncing your progress and wallet; working out your XP, streak and reviews; your profile, weekly leagues, follows and blocks; confirming your email with a one-time code and signing you in with it, or signing you in with Apple or Google; and checking with Apple whether your Rabbithole Pro subscription is active.
- Our legitimate interests, in keeping Rabbithole safe and working and in making it better, weighed against your rights: request and sign-in logs for security and debugging; checking names and usernames against the words we don't allow; reviewing reports and acting on them; finding lessons or questions that confuse many learners; and answering messages you send us. You can object to these uses by emailing us.
- Your consent: reminders, which are only scheduled if you allow notifications. You can withdraw it at any time in Settings › Notifications or in your phone's Settings.
- Legal obligations: keeping information when the law requires us to, and responding to lawful requests from authorities.
9. Children
You must be at least 13 to use Rabbithole. In EU and UK countries where the law sets a higher age for agreeing to online services on your own (up to 16), you must be that age, unless a parent or guardian has given consent. If you are younger than this, please don't use Rabbithole.
Rabbithole is not directed to children under these ages, and we don't knowingly collect personal information from them. If you believe a child under the minimum age has used Rabbithole or created a profile, email team@rabbithole.pro (with their username, if you know it) and we'll delete their account and the information tied to it.
10. Security
Information travels between the app and our servers over encrypted connections (HTTPS). Our database only lets each learner write their own activity and read their own history, and your sign-in session is kept in your phone's keychain. No system is perfectly secure, but we work to protect your information.
11. Where your information is stored
Our database is hosted by Supabase in the United States (Amazon Web Services, US East, Northern Virginia), which may be outside your country.
12. Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.
October 3, 2026: the app is published by Austin White, who is now named as responsible for your information (earlier versions named Rabbithole LLC), and Resend is listed as the service that sends sign-in code emails.
13. Contact
Austin White, who publishes Rabbithole on the App Store, is responsible for (the "controller" of) the personal information described in this policy. For any question about it, or to use any of your rights, contact us:
Austin White (Rabbithole)
Email: team@rabbithole.pro