The Lore Book logoThe Lore Book
Legal

Privacy Policy

How we collect, use, protect, and handle your personal information when you use The Lore Book.

Effective January 1, 2025 · Updated March 7, 2026

At The Lore Book, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you use our mobile application and services.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Account Information

When you create an account, we collect your email address and authentication credentials. Authentication is handled securely by Clerk, our trusted authentication provider.

Content You Create

Any stories, memories, notes, images, voice recordings, or other content you create, upload, or store within The Lore Book is collected and stored to provide our core services. Audio recordings and images are stored in private, access-controlled storage and are only accessible to you while authenticated.

Usage Information

We collect information about how you use our app to improve functionality and user experience. This includes feature usage, interaction patterns, and error logs. We do not use any third-party analytics services; all usage data is collected and processed in-house via our own infrastructure logs.

Subscription Information

Subscription and payment processing is handled entirely by Apple through in-app purchases. We do not collect, store, or have access to your payment card details. We only receive confirmation of your subscription status from Apple.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain The Lore Book services
  • Process your content using AI to generate summaries, insights, and recommendations
  • Transcribe voice recordings and describe images so they can be included in your Recaps, Stories, Moments, and more.
  • Authenticate your account and maintain security
  • Manage your subscription status (processed by Apple)
  • Send you essential service updates and support communications
  • Improve our app's features, functionality, and user experience
  • Diagnose and fix technical issues
  • Comply with legal obligations

3. AI Processing & Third-Party Services

Several features in The Lore Book use AI inference to process your content. Before any AI features are used, we ask for your explicit consent. You may revoke this consent at any time in Settings (see Section 15 for details).

AI Inference Providers

We use two AI inference providers to power our intelligent features:

  • Groq, Inc. processes text content for Recaps, Moments, Progress Trails, story generation, and character insights
  • Cloudflare Workers AI processes voice recordings and images solely for transcription and description, so that content can be included in your Recaps

Neither provider uses your content to train AI models or improve their services. Specifically:

What Data Is Sent to AI Providers

The following table describes exactly what content is transmitted for each AI-powered feature. No account identifiers, email addresses, user IDs, IP addresses, or device information are ever included in any AI request.

FeatureData SentProvider
Recap & Progress TrailText of your recent moments, value tags assigned by your characters, and relative timestamps (e.g. "yesterday", "2 days ago")Groq
Story & Memory GenerationText content you choose to include from your stories, memories, or momentsGroq
Character InsightsAbstract value labels associated with your characters (e.g. "wisdom", "discipline") with no character names or personal identifiersGroq
Voice TranscriptionAudio recording from your microphone, processed solely to produce a text transcriptCloudflare Workers AI
Image DescriptionImage file you upload, processed solely to produce a text description for inclusion in RecapsCloudflare Workers AI

Infrastructure Provider

Our application, database, and media storage infrastructure is hosted on Cloudflare's platform, which provides enterprise-grade security and global performance. Cloudflare acts as a data processor and does not use your data for any purpose other than providing infrastructure services to us. Your audio recordings and images are stored in private, access-controlled storage and are only accessible to you while authenticated.

4. Information Sharing & Disclosure

We do not sell your personal information. We do not share your data with advertisers or third-party analytics services.

We may share your information only in the following limited circumstances:

  • Service Providers: With Clerk (authentication), Cloudflare (infrastructure and AI inference), and Groq, Inc. (AI inference), who process data on our behalf under strict confidentiality agreements and do not use your data to train AI models
  • Legal Requirements: When required by law, subpoena, or court order
  • Safety & Security: To protect the rights, property, or safety of The Lore Book, our users, or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
  • Encryption at Rest: All data stored in our database is automatically encrypted at rest
  • Secure Authentication: Passwords are securely hashed and never stored in plain text. Authentication is managed by Clerk using industry-standard security protocols
  • Media Storage: Audio recordings and images are stored in private, access-controlled storage. Files are only accessible via short-lived, signed URLs generated at the time of access; no public URLs exist for your media
  • Infrastructure Security: Our application runs on Cloudflare's secure, enterprise-grade infrastructure with built-in DDoS protection and security monitoring
  • Data Location: Your primary data is stored in United States data centers. Our application infrastructure may run globally to provide optimal performance

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

6. Data Retention & Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations.

  • Active Accounts: Your data is retained while your account is active
  • Account Deletion: When you delete your account, all your personal data and content will be permanently deleted from our systems within 7 days
  • AI Processing: With Zero Data Retention enabled on Groq, your content is not retained by Groq after a response is returned. Cloudflare Workers AI similarly does not persist your content after processing is complete
  • Legal Retention: Some data may be retained longer if required by law or to resolve disputes

7. Your Privacy Rights

You have the following rights regarding your personal information:

Access & Portability

You can access and export your data at any time through the app's settings.

Correction

You can update your account information and content directly within the app.

Deletion

You can delete your account and all associated data from the app settings. Go to Settings → Account → Delete Account. This action is permanent and cannot be undone.

AI Consent

You have the right to grant or revoke consent for AI processing of your content at any time. See Section 15 for full details on how to manage your AI consent.

Opt-Out of Communications

You can opt out of non-essential communications through your account settings or by contacting support.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the personal data we've collected about you in the past 12 months
  • Right to Delete: You can request deletion of your personal information (subject to certain exceptions)
  • Right to Opt-Out: We do not sell your personal information
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at privacy@thelorebook.com

9. Do Not Sell My Personal Information

We do not sell your personal information. We do not share your data with third parties for monetary or other valuable consideration. We do not use third-party analytics or advertising services that would constitute a "sale" under privacy laws.

10. Children's Privacy

The Lore Book is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@thelorebook.com

11. Subscription Management

Subscriptions are managed entirely through Apple's App Store:

  • To manage your subscription, go to Settings → [Your Name] → Subscriptions on your iOS device
  • To cancel, select The Lore Book → Cancel Subscription
  • Your access continues until the end of the current billing period
  • Apple's privacy policy governs payment processing

12. International Data Transfers

Your data is primarily stored in United States data centers. By using The Lore Book, you consent to the transfer and processing of your information in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy in the app and updating the "Last Updated" date above. If we materially change what data is sent to AI providers or add a new AI provider, we will re-prompt you for consent before those changes take effect. Your continued use of The Lore Book after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. AI Consent & Control

Because AI features involve transmitting your content to third-party providers, we treat your consent as separate from general account creation and these terms must be accepted independently.

How We Obtain Consent

During onboarding, after you set up your profile, you will be shown a clear disclosure explaining which data is sent to which AI providers before any AI feature is used. You must explicitly accept this disclosure before AI-powered features are enabled.

What Happens If You Decline

Declining AI consent means AI-powered features (including Recaps, Progress Trails, AI story generation, voice transcription, and image description) will not be available. You will still have full access to viewing your existing stories, recaps, and memories, and can create content manually using our standard forms. There is currently no manual replacement for the Recap feature.

Revoking Consent

You can revoke AI consent at any time by going to Settings → Account → AI Data Sharing and selecting "Revoke Consent." Revoking consent disables all AI-powered features immediately. Your existing stories, recaps, and generated content are not deleted. You may re-enable AI features at any time by granting consent again from the same settings screen.

Policy Updates

If we materially change what data is sent to AI providers or add a new AI provider, we will re-prompt you for consent before those changes take effect.