Skip to content
Rabbits

Privacy Policy

What Rabbits stores, who else holds a part of it, and how to get rid of all of it.

Last updated: 4 October 2026

1. Introduction

Rabbits ("we", "our", "us") is a habit tracking app for iPhone and Android. This policy explains what we collect when you use it, what we do with it, who else sees it, and what you can do about that.

By using Rabbits you agree to this policy. If you do not, please do not use the app.

2. What we collect

2.1 What you give us

  • Account information. Your email address and a password, which is stored as a hash and never in plain text, and a display name if you set one.
  • If you sign in with Apple or Google instead. Apple or Google confirms who you are and gives us your email address, which with Apple can be a private relay address that forwards to you. We ask Apple for nothing else. Google also shares your name and profile picture, which we keep with your sign-in record but do not show to anyone. Either way there is no password.
  • Profile information. Optionally a profile photo, a short bio and a timezone.
  • Habit data. The habits you create, their schedule and time of day, your reminder settings, and the record of which days you completed them.
  • Social information. Your friends and friend requests, the challenges you send or accept, and the messages you send inside a challenge.

2.2 What is collected automatically

  • Device information. Device type, operating system version and device identifiers.
  • Usage data. Which features you use, and your completion, streak and warren statistics.
  • Push notification tokens. One per device you sign in on, so reminders and social notifications can be delivered.
  • Crash and performance data. What the app was doing when it stopped working.
  • Advertising data. On the free tier only. See section 4.

3. How we use it

  • To run the app: your habits, streaks, rabbits and reminders
  • To authenticate you and sync your warren across your devices
  • To operate friends and head-to-head challenges
  • To send push notifications you have asked for
  • To sell and validate a Rabbits Plus subscription, if you buy one
  • To show and measure ads on the free tier
  • To find and fix crashes and security problems
  • To answer you when you contact us, and to meet legal obligations

4. Advertising

The free version shows ads supplied by Google AdMob. The advertising SDK may process device information, an advertising identifier, your approximate location derived from your IP address, and your interactions with ads, in order to deliver and measure them and to detect fraud.

On iOS the app does not show the App Tracking Transparency prompt and never reads the IDFA, so ads there are less personalised. In the EEA, the UK and Switzerland, consent is collected through Google's UMP consent form before any ad is requested, and you can reopen your choices from Ad privacy choices in your profile.

A Rabbits Plus subscription removes ads entirely, and no ad request is made for a subscriber.

5. Subscriptions

Rabbits Plus is sold through the App Store and Google Play. We never see or store your card details: the store takes the payment and tells us only whether a subscription is active.

RevenueCat validates those receipts on our behalf and receives your user ID and your purchase history. Manage or cancel a subscription in your App Store or Google Play account settings, not in the app.

6. Storage and security

Your data is stored with Supabase, which encrypts it in transit over TLS and at rest, and enforces per-user access rules in the database itself. Your habit rows are readable only by your own account, which is a database policy rather than something the app chooses to draw or hide.

No method of transmission or storage is completely secure, and we cannot promise absolute security.

7. Who else holds your data

Every service that receives a part of your data, and what each one gets.

  • Supabase. Your email address, and the habits, check-ins, challenges and messages you create. It is the database and the sign-in behind the app.
  • Google AdMob. A device identifier, ad interactions, approximate location from your IP address, and crash and performance data. Free tier only.
  • RevenueCat. Your user ID and purchase history, to check whether a Rabbits Plus subscription is active.
  • Firebase Cloud Messaging. A push token for each device you sign in on, used to deliver notifications.
  • Firebase Crashlytics. Crash reports.
  • Apple and Google, only if you sign in with them. They confirm your identity to us, and know that you use Rabbits.

8. What other people can see

We do not sell your personal information.

Your habits, your check-ins and your notes are private to your account. Friends see your display name, your photo if you set one, your rabbit count, and the challenges you entered against them along with both sides of the progress. Your profile is visible to friends, not to everyone with an account.

We may disclose information if required by law or a court order, or where we believe it is necessary to protect someone's safety or our rights.

9. Your rights and choices

9.1 Access and correction

Edit your name, photo and bio in Account settings at any time.

9.2 Deletion

Delete your account, and everything in it, from Profile then Delete account. This removes your habits, check-ins, challenges, messages and profile. If you signed in with Apple, it also revokes Rabbits' access to your Apple ID, and you will see Rabbits disappear from the apps using it. We may retain a limited record where the law requires it.

9.3 Notifications

Reminders are off until you turn them on, per habit. You can also switch notifications off entirely in your device settings.

9.4 Social

You can remove friends, and block or report anyone, from the menu on their profile, a challenge or a message.

9.5 Data export

Ask us for a copy of your data in a portable format by writing to davidvucenovic02@gmail.com.

10. Children

Rabbits is not intended for children under 13 and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

11. International transfers

Your information may be processed in countries other than the one you live in, whose data protection laws may differ from your own. By using Rabbits you consent to that transfer.

12. How long we keep it

We keep your information for as long as your account exists. After you delete your account we may retain a limited amount for a limited time to meet legal obligations, resolve disputes, and prevent fraud and abuse.

13. Changes

We may update this policy. Material changes will be posted here with a new "last updated" date, and take effect when posted.

14. Contact

Questions about this policy go to davidvucenovic02@gmail.com, with "Privacy Policy Inquiry" in the subject. We will reply within a reasonable time.

You can delete your account and everything in it from inside the app, under Profile, then Delete account. Anything else, write to davidvucenovic02@gmail.com.

Back to Rabbits