Privacy policy

Last updated: [DATE — set when your lawyer approves this page]

Introduction and the legal entity: who “rabithouse”, “we”, and “us” are (company name, registered address, and, if required, a data protection contact or representative). Your lawyer should also confirm which laws this policy is written for (for example CCPA/CPRA, COPPA, GDPR/UK GDPR) and the lawful bases, if applicable.

rabithouse is a private messaging app for parents, with an optional AI helper called Bunny. This page explains, in plain language, what personal data we keep, why, who can see it, how long we keep it, and how to delete it. The facts below describe how the app actually works today.

1. Our principles

Usernames, not phone numbers. Other parents see your username and optional display name — never your email or phone number. We don’t sell personal data or show ads.
Only the people who need it. Space content is visible only to active members of that Space. Your Pocket, your children’s profiles, and your AI conversations are visible only to you. These rules are enforced by the database itself and checked by automated tests.
AI only when you allow it. Bunny’s AI features are off until you tap “Allow Bunny”, and you can turn them off anytime.
Deletion that works. You can delete your account from the app, and we automatically delete many kinds of data on a schedule.

2. What we keep, and who can see it

Your account

Data	Why	Who can see it
Email address you sign in with	Sending your one-time sign-in code	Only our sign-in system. It is never shown to anyone in the app.
Username and optional display name	How you appear in Spaces	People who share a Space with you. Others can only check whether a username is taken.
Sign-in session on your phone	Keeping you signed in	Only that device; encrypted, with the key in the phone’s secure keychain.
Your Bunny AI choice (when you allowed or turned it off)	Respecting and recording your consent	Only you

Your family

Data	Why	Who can see it
Children you add: first name, birth date, school track	School and childcare milestones; answering questions about your family	Only you
Your city (if you enter it)	Local features	Only you

Spaces (group chats)

Data	Why	Who can see it
Messages, shared photos and PDFs, calendar events, sign-ups, and tables	The group chat and shared planning	Active members of that Space
Membership, roles, and read status	Access and unread counts	Members of that Space
Invite codes and failed code attempts	Joining safely; blocking guessing	Only our servers
Reports about a member (reason, optional note)	Keeping Spaces safe	Our moderators. You see your own reports; the reported person never does.

Bunny’s Pocket

Data	Why	Who can see it
What you save: text you type or dictate, links, photos, PDFs, and how they’re sorted (category, due date, reminder, done)	Your private to-dos, things to buy, ideas, and notes; reminders in your Daily Briefing	Only you. No Space or other parent can see your Pocket. If you choose “Share to a Space”, a copy of that one item is posted to that Space.

3. Bunny, our AI helper

Bunny uses Claude, an AI model provided by Anthropic, to read what you ask it to read: a chat message, a Pocket item, a link, a forwarded school email, or your question to Ask Bunny. Bunny only runs after you allow it, and our servers check that permission on every request.

What’s sent: only the content needed for what you asked — for example, the message you asked Bunny to read, or snippets from your own Spaces and Pocket that match your question. Message authors are withheld.
Your children: for Ask Bunny and Pocket sorting, the children in your profile are described only as “Child A” with an age and school track; their names and birthdays are removed from what’s sent, and each request is checked before it goes. Photos and PDFs you ask Bunny to read are sent as they are.
Nothing happens without you: Bunny suggests dates and tables; nothing is added to a Space calendar or table until you confirm it.
What we keep: Bunny’s suggestions (30 days after you decide, 60 if you don’t), your Ask Bunny history (30 days, or until you clear it), and usage counts for rate limits and cost (no content).
Links: when Bunny reads a public web page, our server fetches it without any information about you and keeps a copy for at most 10 minutes. We never open login-only school portals.

Anthropic’s data terms: confirm the exact commitments of the Anthropic API terms that apply to this account (for example, that API inputs and outputs are not used to train models, and how long Anthropic retains them) and describe them here.

4. Forwarded school emails

You can forward school emails to a private rabithouse address. Our email provider receives the email, Bunny reads it in memory, and we keep only a small record: the subject, the sender’s display name and domain (never an email address), a status, and Bunny’s suggestions. We do not store email bodies or attachments. You can remove a forwarded email and its suggestions anytime, and get a new forwarding address, which stops the old one immediately.

5. Services we use

Service	What they receive	Their retention
Supabase (our database, file storage, and servers)	All app data described above, plus request logs that include IP addresses	Data as described on this page; logs per their plan
Anthropic (Claude API)	What you ask Bunny to read (see section 3), only after you allow Bunny	Per Anthropic’s API data terms for our account
Resend (inbound email)	Emails you forward to your Bunny address	Up to 30 days on their standard plans
Sentry (crash reports)	Crash reports tagged with a random ID; emails, tokens, dates, phone numbers, and values are removed	Per their plan
Websites you share links to	A request from our server, with no information about you	Their own logs
[Website host — e.g. Vercel, Netlify, or Cloudflare]	Standard web request logs when you visit this website	Per their policy

Confirm the list of processors and sub-processors, where data is stored and transferred (our database is hosted in the United States), and any transfer mechanisms your lawyer requires.

6. How long we keep things

These deletions run automatically:

Data	Kept
Your account, profile, children, and Pocket	Until you delete them or your account
Pocket items you mark done	90 days after you tick them off
Messages, events, tables, and shared files in a Space	Until the Space is deleted (see account deletion below)
Bunny suggestions	30 days after you confirm or dismiss them; 60 days if undecided
Ask Bunny conversations	30 days, or until you clear the chat
Forwarded-email records	90 days (30 days if waiting for you to allow Bunny)
Bunny prep lists for events	7 days after the event
Usage records (no content)	30 days, then kept only as totals with no user ID
Invite codes / failed code attempts	30 days after they expire / 1 day
Reports about members	1 year
Beta list emails (from this website)	1 year

7. Deleting your account

Tap your avatar on the Home screen, then “Delete my account”. The app shows exactly what will be deleted before anything happens. When you confirm:

Spaces you own pass to the longest-standing member; a Space where you were the only member is deleted with everything in it.
Your messages stay in their Spaces as “Deleted user”, unless you choose “Also erase my messages”.
Your Pocket and all your files are deleted.
Your sign-in email, profile, children, settings, forwarding address, suggestions, and history are deleted.

Copies already held by our email, crash-reporting, and AI providers follow their own retention (see section 5).

8. Children

rabithouse is for parents and caregivers, not for children. Information about children is entered by their parent, is visible only to that parent, and is never sent to our AI provider with the child’s name or birthday.

Children’s privacy: the minimum age to use rabithouse, a COPPA statement (for example, that we do not knowingly collect personal information from children under 13 as users), how a parent can review or delete information about their child, and whom to contact.

9. This website and the beta list

This website does not use cookies, analytics, or ad trackers. If you join the beta, we store your email address and when you signed up, only to invite you to rabithouse and send beta updates. It isn’t visible to anyone outside our team and is deleted after one year, or sooner if you ask at support@rabithouse.com.

10. Your rights

You can see and edit your profile and children in the app, clear your Ask Bunny history, remove Pocket items and forwarded emails, turn Bunny off, and delete your account at any time.

Your rights under applicable law (for example access, correction, deletion, portability, and opt-out rights under CCPA/CPRA or GDPR), how to exercise them, how we verify requests, response times, the right to complain to a regulator, and a statement that we do not sell or share personal information for targeted advertising.

11. Security

Access rules are enforced by the database itself (row-level security), sign-in sessions are encrypted on your phone, AI and email keys are kept only on our servers, and files are private and shared through short-lived links. No system is perfectly secure.

Security and breach-notification language, if your lawyer wants more than the plain description above.

12. Changes and contact

If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. Questions or requests: support@rabithouse.com.

How material changes are notified and when they take effect; the company’s postal address and any required contact details.