Privacy

Rabbit Hole · Effective Nov 12, 2026

No account, no analytics, no trackingRabbit Hole has no account or sign-in, and your saved holes and progress stay on your device. We receive only feedback you choose to send and one Apple Ads attribution event when you start a free trial or make a purchase.
No accountsNo analyticsNo trackingApple Ads attribution
About this policy

Rabbit Hole (“the App”) is an iOS application developed and operated by HBKL Labs LLC. Rabbit Hole is a short-form deep-dive reader: you pick a topic and read a curated series of bite-sized explainers that take you deeper. This policy explains what the App does and does not do with data.

The short version

• Your saved holes, reading progress and display preferences are stored on your device and never leave it.

• The App's network requests fetch public article content, send feedback if you choose, and send that one attribution event.

• Purchases go through Apple. We never see your payment details.

No account, no sign-in, no analytics and no trackingThe App shows no ads. We receive only feedback you choose to send and one Apple Ads attribution event when you start a free trial or make a purchase (see below).
What we collect

Apart from feedback you choose to send and the Apple Ads attribution event (both below), nothing. The App has no accounts and no sign-in of any kind. It does not ask for your name or email address. The only identifier it makes is the random install ID described under Apple Ads attribution.

What stays on your deviceThe App keeps the following locally, in the App’s own storage on your iPhone or iPad. It is not sent to us or to anyone else, and deleting the App removes it. Holes you have saved; Your reading progress within a hole; Display preferences you set in the App.
Content deliveryArticle content is read from a public, read-only collection hosted on Firebase Firestore. Fetching it is an ordinary network request for public content. It is not tied to you, and nothing about your reading is written back.
Feedback you choose to sendThe Settings screen has a Leave feedback option. If you choose to send a message, we receive the message you write (1 to 4,000 characters) and, only if you enter one, your email address. The App also sends its version and build, your iOS version and your device model. Nothing is sent unless you tap Submit. Feedback goes to an HBKL Labs feedback service hosted on Cloudflare (a Worker and a D1 database), which stores it and emails it to our support inbox. For rate limiting we keep a salted hash of your IP address, never the IP address itself. Cloudflare processes feedback on our behalf.
Apple Ads attributionWe run ads for Rabbit Hole through Apple Ads, and we measure whether an ad led to a trial or a purchase. When you start a free trial or make your first purchase through the App Store, the App asks Apple for an attribution token (Apple’s AdServices; there is no tracking prompt and no advertising identifier) and sends one event to an HBKL Labs service hosted on Cloudflare (feedback.hbkllabs.com). The event holds the type (trial start or purchase), the product, the attribution token, a random install ID the App makes for itself, and the App version. Our service uses the token to ask Apple which campaign, ad group and keyword the install came from. This is Purchase History, Advertising Data and a random install ID, used for analytics only. It is not linked to you, it is not used to track you across other companies’ apps and sites, and it does not include your reading, your Apple Account or your device identifiers. Renewals are not sent. Cloudflare processes it on our behalf.
PurchasesRabbit Hole Plus is sold through Apple’s StoreKit as a monthly subscription or a one-time Lifetime unlock. Your purchase is tied to your Apple Account, not to anything in the App. Apple handles payment; we never see your card details or your Apple Account information.
What we do NOT collect

• Account information, email addresses or user identifiers (other than an email you choose to add to feedback)

• Analytics, usage events, screen views or crash reports

• Location data

• Contacts

• Photos, microphone or camera access

• Browsing history outside the App

• Advertising identifiers (IDFA). The attribution token above is not one.

• Data sold or shared with advertisers or data brokers

The App does not include any analytics or crash-reporting software.

Who else sees your data (processors)

Apart from feedback you choose to send and the attribution event, the App sends us nothing, so there is little personal data for anyone to process. Four third-party services are involved in running the App:

We do not share data with anyone else.

Firebase Firestore (Google)Read-only delivery of public article content. It stores no user data.
Apple StoreKitHandles subscriptions and the Lifetime unlock; we never see your card details.
CloudflareHosts the feedback service (a Worker and a D1 database) that receives feedback you choose to send and the attribution event. It processes them on our behalf.
Apple Ads (Apple)Resolves the attribution token to the campaign, ad group and keyword of the ad.
Your choices
Clear your local dataDeleting the App from your device removes your saved holes, progress and preferences.
Restore a purchaseOn a new device, open Settings in the App and tap Restore Purchases while signed in to the Apple Account you bought with. With no account in the App, this is how a Lifetime unlock or subscription comes back.
Manage a subscriptionIn the iOS Settings app, tap your name, then Subscriptions.
Data retention

We retain nothing other than feedback you choose to send and attribution events. Local data lives on your device for as long as the App is installed.

Data security

Content is fetched over encrypted HTTPS. Your local data is protected by your device’s own security. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Children’s privacy

The App is not directed at children under 13 and, because it collects no personal information beyond optional feedback and the attribution event, it does not knowingly collect any from children.

Changes to this policy

If we change this policy, we will update the effective date above. Material changes will be noted in the App.

Contact us

Questions about this policy? Email:

support@hbkllabs.com

AppTermsSupport
Made with AppPage