Privacy notice
Updated October 3, 2026 · Version 2026-10-03
Who runs RabbitHole
RabbitHole is an early-access learning app operated by Vyrlo LLC. Our support and privacy contact is listed below. This notice describes the current beta; retention schedules and jurisdiction-specific rights still need to be finalized before a wider launch.
Data we use
We use your email and authentication information to manage your account. Saved data includes questions, trails, concepts, graph positions, learning progress, follow-up conversations, pasted text, source excerpts, connections and AI usage records. Your existing searches, saved ideas and learning progress help us suggest what to explore next. Do not paste confidential, sensitive or other people’s personal information. The app does not ask for your address, phone number or precise location.
How data is processed
Supabase provides authentication and database storage. Vercel hosts the app and may process technical request information such as IP addresses. OpenAI processes questions, relevant graph context, source excerpts and pasted material when you request an AI explanation. Requests disable API response storage, but provider security and abuse-monitoring retention may still apply. Europe PMC and Crossref receive topic search terms when you request a source-assisted explanation. We use matched research metadata, abstracts and checked primary-source excerpts before generating, then run citation and AI support checks; these checks can still be wrong. We also retrieve background reading from Wikipedia and display attributed Wikimedia images; loading those images sends a request from your browser to Wikimedia. Resend delivers account confirmation and password-recovery emails through the configured authentication service.
Local storage and analytics
Authentication cookies keep you signed in. Your browser stores theme, reader preferences, onboarding choices and map viewports locally. Optional interests reorder the checked learning feed in this browser; they are stored separately per account and are not sent to an AI provider. Sample questions, follow-up drafts and optional study recordings use session storage. The app includes no marketing trackers or advertising SDKs. Study recording requires a separate opt-in and stays on your device until you export it. Clear local data from the account page or your browser’s site-data settings.
Sharing
New trails are private by default. We do not sell personal information or use it for targeted advertising. Providers process information to operate the service. Previously shared trails may remain public until you delete them. Opening a source website is subject to that website’s own privacy practices.
Retention and deletion
Saved account content stays in the active database until you delete the trail or your account. Account deletion removes your account and related app records from the active database and revokes refresh sessions. Information already exported, or retained in provider logs and backups, may expire separately. Backup and provider retention periods have not yet been confirmed by the operator; no immediate erasure of those copies is promised. To raise a privacy request, email the contact below.
Age and privacy requests
The current beta is for adults aged 18 and older. The signup form asks you to confirm eligibility without collecting your birth date. It is not an age-verification system. If a child has supplied personal information, notify the operator for removal. Depending on where you live, you may have rights to access, correct, export, delete or object to processing of your data. Contact the operator to request help; automated export and a request-tracking workflow are not available yet.
Operator and contact
Vyrlo LLC
vyrlo.tech@vyrlo.tech