Privacy policy
Loreport™ is made by Folkway Labs Pty Ltd (ACN 701 786 610), an Australian company (“we”, “us”). Loreport is an iPhone app for stamping life’s lore — one photo, one line, kept in a Loreport that’s yours. This policy covers three things:
- loreport.app, our website, where you can download the app.
- The Loreport app for iPhone, where you stamp lore and keep it in your Loreport.
- Shared Loreport pages at loreport.app/@username, which you can choose to publish.
Shared pages on loreport.app are coming later; the section about them applies from the day they launch. Using Loreport also means agreeing to our terms of use.
Contents · 15 sections
- 01The short version
- 02Emails from before launch
- 03What we collect when you use the app
- 04Your photos and stamps
- 05Sharing your Loreport on the web (coming later)
- 06Together
- 07People in your photos
- 08Global stats (coming later)
- 09Keeping Loreport safe
- 10Who we share it with
- 11How long we keep it
- 12Your choices
- 13Age
- 14Security
- 15Changes and complaints
The short version
- Your stamps are private unless you choose to share your Loreport.
- We remove location and other hidden details from your photos before they leave your phone.
- Global stats only ever show group totals, never you.
- We don’t sell your information, show you ads or use advertising trackers.
- You can get a copy of everything or delete your account at any time.
Emails from before launch
Before Loreport launched, loreport.app took email addresses (and, from an older form, some given names, birth years and answers), along with the country each visit came from. It no longer collects them. We use the emails we already have only to send Loreport news, and you can unsubscribe at any time.
What we collect when you use the app
| Information | Why |
|---|---|
| Your Sign in with Apple account ID and email address | To create your account and let you sign in. We don’t ask Apple for your name. Apple’s sign-in includes an email address (often a private relay address Apple makes for you), which our sign-in provider keeps with your account. We don’t use it to contact you, and it’s deleted with your account. |
| Username | To identify your Loreport, invites and any shared page address. Your username is always public. You can change it once every 30 days; your old one is kept for you alone for 30 days so nobody else can take it, then deleted. |
| Given name | To show on your Loreport. You can change it at any time in the app. |
| Age range | To check you’re 18 or over, show your age range on your Loreport and suggest names that fit it. We only ask for a range (like 25–34), never your date of birth. If you joined before 10 November 2026, the date of birth you gave us has been turned into its range and deleted. |
| Your archetype, arc, villain and onboarding answers | To personalise your Loreport and group the global stats. |
| Your stamps: the photo, your one-line caption, the date the photo was taken, when it was stamped, the time zone your phone was set to, and any canon event it tags | To create, store and display your stamps and Loreport, and to print it if you ask us to. The time zone puts each stamp in the right month. We never store where a photo was taken. |
| Canon events you declare during onboarding, and the year if you give it | To show them on your Canon events screen, and (marked as self-reported) in the global stats. |
| The @username of whoever invited you, if you give one | To show “Invited by” on your Loreport. It unlocks nothing, and we don’t read your contacts. |
| Together: the people in each shared Loreport, invites, and the lore, challenges, blocks and reports you make there | To run shared Loreports with the people you invite or who invite you, and to keep them safe. |
| Your location, only if you turn it on for Side quests | To suggest side quests near you. It’s used on your phone only: the nearby city name stays on your phone, and we never receive your location. |
| Your network address, briefly | To slow down anyone checking lots of usernames. It’s held for no more than an hour and never linked to your Loreport. |
| On-record status | If you go on record, Apple handles the payment. We and our subscription services only receive what you bought and whether it’s active, linked to a random account number. We never see your card details. |
| Basic app events, such as which screens of the upgrade offer were shown | To show the right offer and understand what works. It isn’t used to build an advertising profile of you. |
| How the app is used, such as which screens you open and when the app is opened, with your device type and app version | To see what works and fix what doesn’t. It’s linked to a random ID, never your photos or lines, and we don’t record your screen. |
Your photos and stamps
- Hidden details removed. Before a photo leaves your phone, the app removes its location and other hidden photo data (EXIF). We keep only the date the photo was taken.
- Stored privately. Your photo and your line are stored separately, and the app draws your stamp from them. This lets us remove a stamp cleanly and print your Loreport at full quality. We also store smaller copies of each photo so pages load quickly.
- Only you can see them, unless you put them in a Together. Your photos are kept in private storage and are shown through links that expire after a short time. A photo you add to a Together is seen by the people in that Together, and only while it’s on a page. Our team only looks at a stamp if it’s been reported, if you ask us for help, or if the law requires it.
- Stamped means stamped. When you stamp lore, we record the time on our servers and save a digital fingerprint of the photo and line. This is how we show that a stamp is genuine and hasn’t been edited. Photos taken in the Loreport camera are marked as verified. Photos from your library are allowed but aren’t marked as verified. You can’t edit a stamp, but you can delete any lore you’ve stamped, a whole Loreport, or your whole account. A deleted lore and its photo are removed from our servers straight away (backups within 30 days).
- Never used for ads or AI training. We don’t use your photos or captions for advertising, and we don’t use them to train AI models.
Sharing your Loreport on the web (coming later)
Your Loreport is private by default. When web sharing launches and you choose to share, you choose who can see it:
- Link only: anyone with your link can view it, but search engines are asked not to list it.
- Public: anyone can find and view it at loreport.app/@username.
A shared Loreport shows your username, given name, archetype and the stamps you haven’t hidden. It never shows your email address or age range. The web page is read-only: nobody can add to it, comment on it or change it, including you. All changes are made in the app. You can hide individual stamps or stop sharing at any time, and it disappears from the web straight away. Once something is public, people can copy or screenshot it, and we can’t control those copies.
Together
A Together is one Loreport kept by up to 20 people. You join only by accepting an invite, and only the people in it can see its pages, photos, lines, usernames and first names. Each person in it also gets a short mark made from their first name (like “Sa”), shown on their pages. To invite someone, you search for their @username: other signed-in holders can find you the same way, and see only your @username and your first initial (never your first name). People you’ve blocked, or who blocked you, never appear. Whoever you invite sees who invited them.
- Challenges: if you lose a challenge on a page, your lore on that page is deleted. It doesn’t move to your own Loreport.
- Leaving: you can leave at any time. Lore you added stays on the pages for the others until it’s replaced, or until you delete your account.
- Block and report: you can block or report anyone in a Together, or report a single page. A report includes the reason you pick, any note you add, and a copy of the reported page’s line and photo, and is emailed to our team. Someone you block leaves the Togethers you share and can’t join one you’re in. You can see who you’ve blocked and unblock them in the app. People aren’t told that you blocked or reported them.
People in your photos
Only add photos you have the right to share. If someone else is clearly shown in a photo, make sure they’re happy for it to be part of your lore, especially if your Loreport is shared. If you appear in someone else’s Loreport or Together and want to be removed, report it in the app or email us.
Global stats (coming later)
A later version may show stats like “64% of Creators unlock this at age 22.8”. These are worked out from all holders together, using the canon events people mint or declare, their archetype and their age at the time.
- We only show a stat when at least 50 people are in the group, so no stat can point to one person.
- Stats never include photos, captions, names or usernames.
- You’ll be able to opt out of being counted in Settings before any stats are shown.
Keeping Loreport safe
Everyone using Loreport agrees to our terms of use, which don’t allow objectionable content or abusive behaviour. In a Together you can report someone or block them at any time. We review reports within 24 hours and remove content, and close accounts, that break the terms. Before any stamp appears on a public web page, its photo will be checked automatically for illegal or harmful content. We’re required to report child sexual abuse material to the authorities.
Who we share it with
We only share your information with companies that help us run Loreport, and only for that purpose:
- Cloudflare, Inc. hosts loreport.app, its database and any shared Loreport pages.
- Supabase, Inc. hosts the app’s database and photo storage.
- Apple provides Sign in with Apple and payments.
- RevenueCat, Inc. and Superwall, Inc. run subscriptions and the upgrade offer. They receive a random account number, what you bought and basic app events. Superwall also receives your first name, @username and onboarding answers (archetype, villain, Loreport name and lore count) to personalise the upgrade offer. Neither ever receives your photos or lines.
- Resend, Inc. sends our emails, and receives only your email address and the message.
- PostHog, Inc. measures how the app is used, in the United States. It receives the app events above with a random ID, never your photos or lines.
These providers may store or handle data outside Australia, including in the United States. We choose providers that protect data to a standard at least as strong as ours. We may also disclose information if the law requires it. We don’t sell or rent your information.
How long we keep it
- Emails from before launch: kept for up to 12 months after launch, unless you ask us to delete yours sooner.
- Stamps: kept while your account is open. When you delete a Loreport, its stamps are removed from the app and our storage straight away, and from our backups within 30 days. Lore that loses a Together challenge is deleted the same way.
- Accounts: when you delete your account in the app, we delete your profile, stamps, photos and related lore within 30 days, including from backups. Global stats already worked out stay, because they can’t identify you.
- Reports and safety records: kept only as long as we need them to deal with the issue or meet a legal obligation.
- Short-term records: network addresses are deleted within an hour, anti-spam counters and typed invite usernames within two hours, and finished Together invites after 30 days.
Your choices
- Ask us for a copy of all your photos and stamp data.
- Correct your details, or leave a Together, at any time.
- Delete your account in the app. It takes effect straight away.
- Unsubscribe from our emails at any time using the link in any email.
- Ask to see, correct or delete the email we hold for you from before launch, or withdraw your consent.
Email support@loreport.app from the address linked to your account or to our emails, and we’ll respond within 30 days.
If you’re in the EU or UK, you also have the right to object to or restrict how we use your data, and to complain to your local data protection authority. We use your information to provide the service you signed up for, with your consent (for emails), and for our legitimate interests in keeping Loreport secure and producing anonymous stats.
Age
Loreport is for people 18 and over. We don’t knowingly accept accounts from anyone younger, and we delete any we find.
Security
Your information is sent over an encrypted connection and encrypted when stored. Access rules in our database mean each account can only reach its own data, and only a small number of our team can access our systems. No system is perfectly secure. If something goes wrong that affects you, we’ll let you know.
Changes and complaints
If we change this policy, we’ll update the date above, and email you or tell you in the app if the change is significant. If you’re unhappy with how we’ve handled your information, contact us first. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.