Privacy policy
Loreport is made by Folkway Labs Pty Ltd, an Australian company (“we”, “us”). This policy covers three things:
- The application portal at loreport.app/apply, where you apply for a passport before launch.
- The Loreport app for iPhone, where you mint stamps and build your passport.
- Public passport pages at loreport.app/@username, which you can choose to publish.
The app and public passports are coming soon. The sections about them apply from the day the app launches.
The short version
- Your stamps are private unless you choose to publish your passport.
- We remove location and other hidden details from your photos before they leave your phone.
- Global stats only ever show group totals, never you.
- We don’t sell your information, show you ads or use advertising trackers.
- You can download everything or delete your account at any time.
What we collect when you apply
| Information | Why |
|---|---|
| Given name | To print on your provisional passport and address you by name. |
| Email address | To send your issue date, launch news and, if selected, Founding Member news. |
| Birth year | To check you’re 18 or over and work out which chapter of your 20s you’re in. |
| Your answers (archetype, villain) and your Stamp 000 sentence | To build your passport and understand who is applying. |
| Country | Worked out from your connection by our host, to see where applicants are. |
| Anonymous progress data | Which step of the form each visit reached, tied only to the random application number shown on screen. We use it to improve the form. |
Your portal photo never leaves your device. The photo you add to Stamp 000 on the portal is only used by your browser to draw your passport card. We don’t upload or store it.
What we collect when you use the app
| Information | Why |
|---|---|
| Your Sign in with Apple account ID and email address | To create your account and let you sign in. If you choose Apple’s “Hide My Email”, we only see the relay address Apple gives us. |
| Username | To identify your passport, your guest stamps and your public passport address. Your username is always public. |
| Given name | To show on your passport. |
| Birth month and year | To check you’re 18 or over and work out your age when you unlock a milestone. We never ask for your full date of birth, and we never show it to anyone. |
| Your archetype and onboarding answers | To personalise your passport and group the global stats. |
| Your stamps: the photo, your one-line sentence, the date the photo was taken, when it was minted and any milestone it unlocks | To create, store and display your stamps and passport, and to print it if you ask us to. |
| Guest stamps you add to someone else’s passport | To show your contribution on their passport with your username. |
| A device check from Apple (App Attest) | To confirm that stamps come from the genuine Loreport app, which is how we protect verified lore. It doesn’t tell us who you are. |
| Subscription status | If you subscribe, Apple handles the payment. We only receive whether your subscription is active. We never see your card details. |
| Crash reports and basic, anonymous usage data | To fix bugs and understand which features people use. It isn’t used to build a profile of you. |
Your photos and stamps
- Hidden details removed. Before a photo leaves your phone, the app removes its location and other hidden photo data (EXIF). We keep only the date the photo was taken.
- Stored privately. Your photo and your sentence are stored separately, and the app draws your stamp from them. This lets you hide or delete a stamp cleanly and lets us print your passport at full quality. We also store smaller copies of each photo so pages load quickly.
- Only you can see them. Your photos are kept in private storage and are shown to you through links that expire after a short time. Our team only looks at a stamp if it’s been reported, if you ask us for help, or if the law requires it.
- Verified stamps can’t be changed. When you mint a stamp, we record the time on our servers and save a digital fingerprint of the photo and sentence. This is how we show that a stamp is genuine and hasn’t been edited. Photos taken in the Loreport camera are marked as verified. Photos from your library are allowed but aren’t marked as verified. You can hide or delete any stamp at any time.
- Never used for ads or AI training. We don’t use your photos or sentences for advertising, and we don’t use them to train AI models.
Your public passport
Your passport is private until you choose to publish it. When you publish it, you choose who can see it:
- Link only: anyone with your link can view it, but search engines are asked not to list it.
- Public: anyone can find and view it at loreport.app/@username.
A public passport shows your username, given name, archetype and the stamps you haven’t hidden. It never shows your email address or birth date. The web page is read-only: nobody can add to it, comment on it or change it, including you. All changes are made in the app. You can hide individual stamps or unpublish your passport at any time, and it disappears from the web straight away. Once something is public, people can copy or screenshot it, and we can’t control those copies.
Guest stamps
You can invite a friend to add a guest stamp to your passport by showing them a QR code in the app. Only people signed in to the Loreport app can add guest stamps. The code expires after a few minutes.
- A guest stamp only appears on your passport after you approve it.
- It shows the guest’s username and follows your passport’s privacy setting.
- You can remove a guest stamp from your passport, and the guest can withdraw it, at any time.
People in your photos
Only add photos you have the right to share. If someone else is clearly shown in a photo, make sure they’re happy for it to be part of your lore, especially if your passport is public. If you appear in someone else’s passport and want to be removed, report the stamp in the app or email us.
Global Registry Stats
The Ledger shows stats like “64% of Builders unlock this at age 22.8”. These are worked out from all users together, using the milestones people unlock, their archetype and their age at the time.
- We only show a stat when at least 50 people are in the group, so no stat can point to one person.
- Stats never include photos, sentences, names or usernames.
- You can opt out of being counted in Settings at any time.
Keeping Loreport safe
Before a stamp can appear on a published passport, its photo is checked automatically for illegal or harmful content. Anyone can report a stamp or a user, and you can block other users. We may hide or remove content, or close accounts, that break our rules. We’re required to report child sexual abuse material to the authorities.
Who we share it with
We only share your information with companies that help us run Loreport, and only for that purpose:
- Cloudflare, Inc. hosts the portal, its database and public passport pages.
- Supabase, Inc. hosts the app’s database and photo storage.
- Apple provides Sign in with Apple, payments and the device check.
- Email, content-checking and crash-reporting services receive only what they need to do their job.
These providers may store or handle data outside Australia, including in the United States. We choose providers that protect data to a standard at least as strong as ours. We may also disclose information if the law requires it. We don’t sell or rent your information.
How long we keep it
- Applications: kept until the app launches and for up to 12 months after, unless you ask us to delete them sooner. If you create an account, we link your application to it so you’re recognised as an applicant or Founding Member.
- Stamps: kept while your account is open. When you delete a stamp, it’s removed from the app and our storage straight away, and from our backups within 30 days.
- Accounts: when you delete your account in the app, we delete your profile, stamps, photos and guest stamps within 30 days, including from backups. Global stats already worked out stay, because they can’t identify you.
- Reports and safety records: kept only as long as we need them to deal with the issue or meet a legal obligation.
Your choices
- Download your passport as a PDF, plus a copy of all your photos and stamp data, from the app.
- Correct your details, hide stamps or unpublish your passport at any time.
- Opt out of Global Registry Stats in Settings.
- Delete your account in the app. It takes effect straight away.
- Unsubscribe from our emails at any time using the link in any email.
- Ask to see, correct or delete your application, or withdraw your consent.
Email support@loreport.app from the address linked to your application or account, and we’ll respond within 30 days.
If you’re in the EU or UK, you also have the right to object to or restrict how we use your data, and to complain to your local data protection authority. We use your information to provide the service you signed up for, with your consent (for emails and publishing your passport), and for our legitimate interests in keeping Loreport secure and producing anonymous stats.
Age
Loreport is for people 18 and over. We don’t knowingly accept applications or accounts from anyone younger, and we delete any we find.
Security
Your information is sent over an encrypted connection and encrypted when stored. Access rules in our database mean each account can only reach its own data, and only a small number of our team can access our systems. No system is perfectly secure. If something goes wrong that affects you, we’ll let you know.
Changes and complaints
If we change this policy, we’ll update the date above, and email you or tell you in the app if the change is significant. If you’re unhappy with how we’ve handled your information, contact us first. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.