Privacy Policy · Rabbit Hole

Overview

Rabbit Hole is a planning app that turns your goals into a daily schedule, with an AI coach and an optional spoken check-in. This policy says what we collect, what we do with it, who else handles it and what you control.

What we collect

Account. If you sign in with Google, your name, email address and profile picture. If you sign in with Apple, a stable account identifier and the email Apple gives us, which can be a private relay address. We never see your password.

What you put in. Goals, tasks, schedules, preferences, things you capture, and what you type or say to the planner and coach.

Calendar (optional). If you connect Google Calendar, we read events from the calendars you choose. We don't change anything in your calendar.

Canvas (optional, for students). If you connect Canvas, we read assignments and due dates. We don't submit or change anything in Canvas.

Device. If you allow notifications, a push token for this device. Sign-out removes it.

Subscription. Whether your subscription is active, its plan and its end date. Apple handles payment, and we never see your card.

Usage. Counts of AI requests per feature, including token counts, used to enforce limits and manage cost. Server logs (such as IP address, request path and time) are used for debugging and abuse prevention.

Voice and the microphone

The microphone is only on while you have it on. Rabbit Hole doesn't record in the background.
We never store audio.
Your speech is turned into text by your device's speech recognition. In the iPhone app that's Apple's, and Apple may process it on its servers under its own privacy policy. On the web, your browser's speech service does this.
The text is then treated like anything you type, as described below.
Any voice you hear from the coach is synthetic, not a person. To create it, what the coach says is sent to OpenAI, and this can include words you said, such as an if-then plan read back to you.

What the coach remembers

Check-in conversation text is deleted within 24 hours.
The coach can keep short summaries to be useful later, such as a planning preference. You can see and delete them in the app.
Health details and emotional details are not saved as memories.
If a message suggests you may be in crisis, coaching stops and the app offers crisis resources. Rabbit Hole is a planning coach, not a therapist or a medical service.

AI providers

Our AI features use OpenAI. When you use one, the text it needs goes to OpenAI so it can respond. Depending on the feature, that includes your message, your goals and tasks, and the titles and times of your calendar events and Canvas deadlines. Check-in messages may also be screened by OpenAI's moderation service for signs of crisis.

We don't use your data to train AI models and we use OpenAI's API, under its terms for API customers. We keep usage counts, not a log of your AI conversations, apart from the check-in text described above.

How we use your information

To provide planning, scheduling, coaching and the notifications you turn on.
To enforce usage limits, prevent abuse, and fix problems.
To manage your subscription.

We don't sell your data and we don't use it for advertising.

To see whether the app is working for people, we keep a first-party record of what happens in it, such as finishing setup, starting a check-in by voice or typing, logging work, or how long the first audio took. These records hold labels and numbers tied to your account. They never hold what you said or typed, or the names of your goals and tasks, and they aren't sent to any analytics company. They're deleted when you delete your account or reset your data.

Google API Services User Data Policy

Rabbit Hole's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google Calendar data to show your events, to plan around them, and to give the AI planner the context it needs to avoid conflicts.
To do that, event titles and times can be sent to OpenAI when you use an AI feature. We share Google data with no one else, apart from the hosting and database providers below, or where the law requires it.
We don't use Google Calendar data for advertising, and it isn't used to train AI models.
People don't read your Google Calendar data unless you ask us to, it's needed for security, or the law requires it.

Who else handles your data

Vercel: hosting.
Turso: database.
OpenAI: AI features, as described above.
Google: sign-in and Calendar, if you use them.
Apple: sign-in if you use it, speech recognition, push notifications, and subscription payments.
RevenueCat: subscription status, identified by an internal account number rather than your name.
Canvas (your school's instance): if you connect it.

We may also disclose information if valid legal process requires it, to protect people's safety, or in a corporate transaction with notice to you.

Subscriptions

Subscriptions are bought through Apple and renew automatically until cancelled. Deleting your Rabbit Hole account does not cancel an App Store subscription. Cancel it in your App Store account settings.

Keeping and deleting your data

We keep your content until you delete it or your account. You can delete your account in the app, under Settings. That removes your account and all data tied to it from our database straight away, revokes your Google and Apple sign-in grants, and removes your subscription record at RevenueCat. Copies in database backups are overwritten on the backup provider's normal cycle.

Signing out removes this account's cached data, reminders, widget content and push registration from the device.

Security

Traffic uses HTTPS. Google, Apple and Canvas credentials are encrypted at rest with a key held only by the server. No system is perfectly secure, so please tell us about anything suspicious.

Your rights

Depending on where you live, you may have rights to access, correct, port or delete your personal data, and to object to or restrict some processing. Email us at the address below and we'll respond within 30 days.

You can revoke Google access at any time on Google's permissions page, and Apple sign-in in your Apple ID settings.

Children

Rabbit Hole is not directed to children under 13 and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

International users

Rabbit Hole is operated from the United States, and your data is processed there and wherever our providers operate.

Changes to this policy

We'll update this page when our practices change, and tell you in the app or by email about substantive changes.

Contact

Questions or requests: privacy@rabbithole-ai.app. See also our Terms of Service.