LabRats provides brain games, a daily check-in, a private daily Lab and personal trends. It is not a medical device and does not provide diagnosis, treatment or substance recommendations. This policy explains which information stays on your phone and what is processed when you use online services, purchases or advertising.
Saved game sessions can include answers, reaction times and outcomes. Optional check-ins include sleep, caffeine, energy and mood. You can save supplement-log entries, Journal measurements, tags, daily notes, personal experiments, calibration and preferences. These records are stored locally. Core local play does not require an account or connection.
Local records can be removed through the app’s local-data controls. Uninstalling the app may remove records held only on the phone. Removing local data does not by itself delete records already synced or published.
You can sign in with Apple or an email code. Account features are for adults aged 18 and over. Signing in enables “Sync & compete” as disclosed on the sign-in screen, unless an existing refusal applies or the account choice cannot be safely read. You can turn sync off in Settings.
With sync enabled, saved games, answers, check-ins, calibration, preferences, supplement-log entries, Journal definitions and days (including notes and tags), and personal experiment records can be copied to your private account. Experiment records include their plan, schedule, selected games and saved result. These records support online features and restoring data on another phone. Turning sync off stops later uploads; already stored account records remain until account deletion.
Supabase provides authentication and database hosting. The project is hosted in the EU (Ireland). The provider and its subprocessors may process service data in other locations as described in Supabase’s privacy policy. Access controls restrict private account records. We may access service records as necessary to operate the service, handle your requests or investigate failures. Journal, supplement and experiment records may contain health information. They are optional and are not supplied to advertising networks for targeting.
Online competition uses a pseudonym and results. Public profiles can show a pseudonym, avatar and rank or division. Optional profile fields are controlled by your settings. Private check-ins and Journal notes are not displayed on a profile.
A tier list starts private. “Show on my profile” publishes a copy of its substance names and positions. Private changes replace that copy only when you choose to update it. Turning visibility off removes the published copy after server confirmation. Removing local data does not hide an existing public copy.
In shared Labs, information you submit to the group, such as messages and experiment plans, is available to members with access. Joining can share your pseudonym and optional introduction with the owner. Result sharing requires a separate action; group experiment results use an aggregate when enough participants have completed and shared the required measurements. Do not put private information into a shared field unless you intend to share it. Public content can be reported and players can be blocked. Moderation records may be retained to handle reports and protect the service.
This is a separate, per-account choice. A refusal remains off; signing in does not by itself grant statistics permission. Where you agree, eligible synced game, check-in and supplement records may be included in statistics used to improve LabRats, under a pseudonymous key. Pseudonymised data is not the same as anonymous data. Published results are aggregates.
The current permission text also names Journal measurements, tags and note content. Analysis of Journal notes and personal experiments is not currently implemented. These records are not claimed to be already analysed. A future analysis must remain within your permission, and any material change will be reflected in the app’s disclosure and this policy before activation.
You can refuse or withdraw statistics permission in Settings. Processing that depends on permission must respect your latest applicable choice. Account deletion removes account records, including its pseudonymised contribution.
The app can send events such as app opens, screen views, saved sessions, paywall views, purchases and errors. These use a random device identifier and help us understand use, reliability and failures. Ad diagnostics can include placement, test status, impression value, currency, event identifiers and time since an ad. These events are not guaranteed anonymous. Private Journal text, supplement entries, mood, sleep and game scores are not included in advertising event payloads.
Apple processes payment. RevenueCat validates purchase transactions and Premium access. RevenueCat receives transaction and receipt information, product identifiers and an app user identifier; when signed in, that identifier can be your LabRats account ID so access can be associated with the account. We do not receive payment-card details. See RevenueCat’s privacy policy and Apple’s privacy policy.
Subscriptions are managed in your Apple Account settings. Deleting LabRats or your LabRats account does not cancel an Apple subscription.
The free version may show Google AdMob interstitial ads between completed blocks of play and optional rewarded videos for a specified analysis unlock. Premium provides an ad-free experience. Ads appear only outside active games. They are skipped when unavailable; you do not need to allow tracking to play.
When enabled, the Google Mobile Ads and User Messaging Platform SDKs process information to request ads, manage choices, detect abuse and measure advertising. Google’s SDK may collect an IP address (which can indicate approximate location), device or advertising identifiers, ad interactions, usage information, crash information and performance diagnostics. Identifier use and personalised advertising depend on applicable consent and device permissions. See Google’s advertising privacy information and its SDK data disclosure.
Where required, a Google consent message is shown before eligible ad requests. Privacy choices remain accessible in Settings. On iOS, permission to track is requested through Apple’s system prompt when applicable; refusing does not prevent play. LabRats does not send Journal notes, supplement records, sleep, mood, cognitive results or shared-Lab membership to Google for ad targeting.
This website does not load advertising SDKs or analytics trackers. GitHub Pages hosts it and may process basic request logs under GitHub’s privacy policy. Links to other services open those services under their own policies.
Daily reminders are local notifications scheduled on the device. You can change them in the app or iOS settings.
Invitations use the share app you choose; LabRats does not read contacts or send invitations automatically. Accepting a code links accounts privately for attribution. The inviter sees aggregate joined/played counts, not a friend’s private results or logs. An account timezone supports midnight reward expiry. Invitation metadata is included in export and removed with account deletion.
Optional sync and statistics rely on the choices above. Where records contain health information, the applicable basis includes explicit consent. Purchase processing supports providing paid access. Limited diagnostics, moderation and security support operating and protecting the service. Consent is requested where required for advertising and device access.
| Record | Retention |
|---|---|
| Local records | Until removed on the phone; uninstalling can remove unsynced data. |
| Account and synced records | Until account deletion, subject to necessary security, legal or transaction-record obligations. |
| Pseudonymised statistics contribution | Removed with the account. Withdrawal stops further consent-dependent use. |
| Product events and diagnostics | Normally up to 24 months. |
| Moderation records | Normally up to 12 months after action, unless needed for an ongoing dispute or security incident. |
| Provider records | Under the relevant Apple, RevenueCat, Google or hosting-provider policies and legal obligations. |
Processors handle data to provide their services. International transfers, where applicable, are subject to the providers’ contractual safeguards and policies. We do not sell private Journal or health records.
You can access, correct or erase records through the app’s controls. In Settings, “Request a copy of my data” records a request for account data to be delivered by email within 30 days. Local exports are also available, subject to the feature shown in the app.
Settings → Account → Delete my account deletes account records held by LabRats and initiates local cleanup after confirmation. If you used Sign in with Apple, the deletion confirmation directs you to remove LabRats in Settings → your name → Sign in with Apple, or in your Apple Account settings on the web. Apple sign-in access is removed manually; the app does not retain Apple access or refresh tokens. Account deletion does not cancel subscriptions.
To exercise rights of access, correction, erasure, restriction, objection or portability, or ask about processing, email applabrat@gmail.com. You may withdraw consent in Settings. You can complain to your data-protection authority, including the CNIL in France.
Accounts, supplement logging and data contribution are reserved for adults aged 18 and over. LabRats is not directed at children under 13. Contact us if you believe a child’s information has been submitted.
We will update this policy when the service or processing changes. The date above identifies the current version.