Who we are
The controller of your personal data is NEXT RMM SOLUTIONS S.R.L., Str. Școlii nr. 13A, Brașov, Romania ("LORE", "we", "us"). You can contact us about privacy at privacy@feedthelore.app.
This policy applies to the LORE apps, the website feedthelore.app, and related services (the "Service"). It should be read together with our Terms of Service.
What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Email address, sign-in provider identifier, display name, optional profile photo (chosen from your library or taken with the front camera), birth year (we ask for your date of birth to check you are 16 or older and keep only the year), timezone, notification settings. | You, and your sign-in provider (Apple or Google, if you use one). With Sign in with Apple you can choose to share a private relay email address. |
| Groups | Group name and photo, Loreling name, Episode day and time, memberships, admin role, invite codes. | You and other group members |
| Drops | Photos, videos, voice notes, quotes (with who said them and optional context), moments, captions, song picks (title, artist, artwork and link), whether a Drop is hidden until Episode night, and when and by whom it was added. | You and other group members |
| Reacts | The emoji you react to a Drop with and when. If your group has LORE+, an optional selfie photo taken with your front camera. | You |
| Game activity | Streaks, Lore Energy, Drop counts, Episode answers and answer times, scores and XP, wins, and leaderboard positions calculated from them. | Your use of the Service |
| Safety | Reports you make or that are made about you or your content (including the reason given), blocks, the Drops you reported (so we can hide them for you), and moderation decisions. | You, other members, and our systems |
| Purchases | Subscription status, product, purchase and renewal dates, the group it applies to, which member paid, and store transaction events. RevenueCat receives your LORE account identifier and the group identifier so the subscription can be linked to the right group. We never receive your payment card details. | Apple, Google and RevenueCat |
| Device and diagnostics | Push notification token, device model, operating system and app version, crash reports, app performance data (for example how long screens take to load and how long network requests take), app integrity checks that confirm requests come from a genuine copy of the app, and app usage events (for example that a Drop was added or an Episode was played). Usage events are not linked to your name, email or account, and do not include the content of your Drops. We do not collect the advertising identifier or precise location. | Your device, through Firebase Crashlytics, Google Analytics for Firebase, Firebase Performance Monitoring and Firebase App Check (which uses Apple App Attest and DeviceCheck, and Google Play Integrity) |
| Song searches | The text you search for when adding a song. Our servers send it to Apple's search service without your account details and cache the results by query. Song previews and artwork load on your device directly from Apple, and "Find on Spotify" opens Spotify with the song's title. | You |
| On your device only | Your sign-in email, current group and app settings such as sound effects are kept in secure storage on your device. If you add a LORE widget, your group name, Loreling, streaks and next Episode time are stored on your device and shown on your home or lock screen, where anyone who can see your screen can see them. This data is removed when you sign out. | Your device |
| Waitlist and support | Your email address if you join the waitlist, and anything you send when you contact us. | You |
| Technical logs | IP address, request time and similar logs created by our hosting providers when you use the Service or the website. | Your device and our providers |
Please do not share sensitive information, such as health, religious or political details, in your Drops. If you choose to, you are making it visible to your group, and we process it only to provide the Service as you asked.
How we use it and our legal bases
Where the EU or UK GDPR applies, we rely on the following legal bases.
| Purpose | Legal basis |
|---|---|
| Create your account, run groups, Drops, streaks, the Loreling, Episodes and the Lorebook, and provide LORE+ | Performance of our contract with you |
| Check you meet the minimum age | Legal obligation and our legitimate interest in keeping LORE for people aged 16 and over |
| Handle reports and blocks, check that requests come from genuine copies of the app, enforce our Terms, prevent abuse and protect users | Legitimate interests in keeping users safe, and legal obligation where the law requires action, such as reporting child sexual abuse material |
| Send push notifications | Your consent, given through your device settings. You can switch notification types off in LORE's settings or turn them off in your device settings. |
| Fix crashes, measure which features are used and improve the Service | Legitimate interests in running a reliable service. Where the law requires consent for this, we will ask for it. |
| Tell you when LORE launches (waitlist) | Your consent. You can withdraw it at any time. |
| Answer support requests, keep records, handle legal claims, comply with tax, accounting and law enforcement obligations | Legitimate interests and legal obligation |
We do not sell your personal data, share it for targeted advertising, or use it to build advertising profiles.
Who can see your content
- Your groups. Your display name, profile photo, streak and stats (including your leaderboard position, your Episode scores and answers once an Episode ends, and, if the group has LORE+, stats such as your most active month and signature song), your Reacts (including selfie Reacts) and the Drops you add are visible to the members of the groups you belong to. If you pay for LORE+ for a group, its members can see that you paid. A Hidden Drop shows that you added something, and its content is revealed on Episode night.
- No public audience. LORE has no public profiles, public feeds, search for people or follower counts. Anyone who has one of your group's invite links can see the group name, the name of the member who shared it and how many members the group has. Invite links expire after 7 days.
- Share cards. If you choose to share a card outside LORE, it leaves our Service and is governed by the service you share it to. Cards show your Loreling and group stats, never Drops or photos. The group name is shown by default and can be turned off, and a winner's name is shown only if you turn it on.
- What members do. Members can remember, screenshot or copy what you share with them. We cannot control or undo that.
International transfers
Our main database and server functions run in the European Union. Some of our providers, including Google, Apple and RevenueCat, may process data in the United States or other countries. When personal data leaves the EU, EEA or UK, we rely on adequacy decisions (such as the EU and U.S. Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses and equivalent UK safeguards. You can ask us for more information at privacy@feedthelore.app.
How long we keep information
- Account and profile: until you delete your account.
- Groups: when the last member leaves a group, the group and everything in it (Drops, media and Episodes) is deleted within 30 days.
- Drops: until you delete them, they are removed by moderation, or you delete your account. A removed Drop may leave a record without its content so your group's history stays consistent.
- Reacts: until you remove them, the Drop is deleted, or you delete your account. Reacts stay on a Drop if you leave the group.
- Episodes: past Episodes keep their rounds as they were played, which can include quote and moment text, song details and members' display names, together with results and answers, for as long as the group exists.
- Group statistics: a group's Lore Energy and streak are numbers that stay with the group after a member leaves.
- Reports and moderation records: for as long as needed to keep users safe, prevent repeat abuse and handle legal claims, and for longer where the law requires us to preserve them.
- Purchase records: for as long as required for accounting, tax and legal purposes.
- Crash reports and usage events: no longer than 14 months.
- Waitlist: until 12 months after LORE launches, or earlier if you ask us to remove you.
- Support messages: for as long as needed to resolve your request and handle any follow-up or legal claim.
- Backups: deleted data can remain in backups for a limited period before it is overwritten.
See Delete your account for exactly what account deletion removes.
Your rights and choices
Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to how we use it (including processing based on legitimate interests), receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing.
- You can edit your profile, delete Drops, remove Reacts, leave groups, change notification settings and delete your account in the app.
- For any other request, email privacy@feedthelore.app from the address linked to your account. We may need to verify your identity. We respond within one month, which can be extended where the law allows.
- You can complain to a data protection authority, in particular in the country where you live or work. Our lead authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro). We would appreciate the chance to address your concern first.
- If you live in a U.S. state with a consumer privacy law, you can use the same contact to exercise your rights. We do not sell personal information or share it for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.
Age requirement
LORE is only for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If we learn that someone under 16 has an account, we will close it and delete their data. If you believe a child under 16 is using LORE, contact privacy@feedthelore.app. See also our Child Safety Standards.
Security
We use measures designed to protect your data, including encryption in transit, access rules that limit group content to group members, hard-to-guess media links that are given only to group members, app integrity checks, and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your devices and sign-in methods secure. If a data breach affects you, we will notify you and the relevant authorities where the law requires.
This website
feedthelore.app does not use advertising or analytics cookies or trackers, and fonts are served from our own domain. Our hosting provider processes your IP address and request logs to deliver the site and protect it from abuse. If you join the waitlist, we store your email address as described above.
Changes to this policy
We may update this policy from time to time. If a change is material, we will tell you in the app or by email before it takes effect. The "Last updated" date shows when it last changed.
Contact
NEXT RMM SOLUTIONS S.R.L., Str. Școlii nr. 13A, Brașov, Romania.
Privacy: privacy@feedthelore.app
Everything else: Support