Privacy

In short

• There’s no name, email, phone number or password. Raree knows you only by your Apple Account, and we keep only a one-way hash of the id Apple gives it.
• No ads, no analytics or tracking, and no advertising or device identifiers.
• What the camera sees, your room and how you move as you place a portal and look into a world stay on your phone and are never sent. Only a world you make from your room sends its photos.
• The photos you make a world from are deleted from our servers as soon as the world is made. A private record of how each world was made, to fix what goes wrong, is kept for 30 days.
• Your worlds are private until you share one. Your library stays on your phone.
• Delete Worlds and Data removes every world you made and everything else we keep about you, from our servers and from your phone. Your tokens stay.

Who you are to us

When you first make a world, Raree signs in with your App Store purchase record (Apple’s AppTransaction). Apple gives each Apple Account an id for Raree; we keep only a one-way hash of it, never the id itself, so we can keep your tokens with you. With it we keep your token balance, your subscription, and when the record was made. There is nothing to sign in to or manage.

To keep Raree’s requests coming from Raree itself, your phone proves it with Apple’s App Attest. We keep that key, not linked to you, for a year after it was last used.

What we keep

Everything we store is with our cloud host, in the United States (Oregon).

Your words

What you ask for (a world’s description, how to reimagine a room, its title) is kept with the world until you delete it.

Your photos and your room

A world from your room is made from the photos you take through the portal, with what your phone’s depth sensor saw and where the camera was. Before anything else, we remove everything in a photo but its picture and the few camera details the world needs: no location, serial numbers or other metadata. We hold them only while the world is made, or while its sketch waits for you to make it a world, and delete them when the world is made, fails or is canceled. Any still held after 7 days are deleted anyway. The world made from them stays until you delete it, and it shows what you photographed. For 30 days, the record of how the world was made (below) keeps the photo as it was placed into the world’s panorama, never the photos themselves, what the depth sensor saw, or where the camera was.

How each world was made

To find and fix what goes wrong, we keep a private record of how each world was made: what you asked for, each step’s settings, timing and cost, what each step chose, and the pictures made along the way (for a world from your room, the photo as placed into the world’s panorama). It carries no id that leads to you. Only we can read it, and it is never published. It is deleted 30 days after the world is made, or with the world when you delete it.

Sketches

A sketch is saved whole on your phone: its words, its panorama and the photos it was made from. Once your phone has saved it, we delete what we held to make it and keep only a receipt; building or changing it sends them again. A sketch you export is a copy we can’t take back.

Your worlds

Each world’s file and its picture are kept until you delete the world. A deleted world’s files can be recovered by us for 7 days, then are gone. The rough first look shown while a world is made is deleted after 30 days.

Purchases

Each purchase’s Apple transaction id, product and time, and any refund (its date, reason and share), are kept as accounting records, even after everything else is erased (then with nothing that leads back to you). When a refund takes back tokens you’ve already spent, your record keeps a count of them, taken from what worlds made before it give back later. Apple’s notices about your purchases are kept 90 days.

Logs

Our cloud host records each request to Raree for 30 days: the IP address it came from, the kind of device, and what was asked for. Our own diagnostic records carry a random id for you (so that when you write to us, we can find what happened) and never your words; they are kept 30 days, and most of them up to 400 days, to see how Raree is doing. Once everything of yours is erased, nothing we keep links those records to you.

When you write to us

Feedback, reports and refund requests are sent by your own Mail app, so we get your email address with them. Feedback includes a random id for you; a refund request names the world and its description.

On your phone

Your library, the photos each of your worlds was made from (which Reimagine and a new sketch use again), and the map that keeps a portal where you put it are kept in Raree’s own storage, not in Files, and are part of your phone’s own backups. Nothing syncs through iCloud. What the camera sees, how you move and look around, dictation, and hiding the portal behind people and things all happen on your phone, only to show you the world, and are never sent or kept; the one exception is the photos you take to make a world from your room (Your photos and your room, above). Screen recordings go to Photos only when you save them.

Sharing

A world is private until you share it. A share link opens a copy of the world for anyone who has the link, and its page shows the world’s title and picture (for a world from your room, that picture shows what you photographed). Search engines are asked not to list it, but the apps a link is posted in may fetch and keep its preview. The words you asked with are never shown. When you delete the world, the link stops working, and copies on other people’s phones are removed the next time they open them.

Who else sees it

Making a world takes several services, in the United States and elsewhere. Each gets only what its part needs; none gets your id or your photos’ metadata (every picture we send is redrawn from its pixels).

• Our cloud host stores everything above and runs Raree (United States).
• An AI language service reads your words, and for a world from your room the part of your photos inside the portal, to describe the world to make. It also looks at the painted panorama, to check which way the world faces and whether the glass painted in it can be looked through. It doesn’t train on what it’s sent.
• AI image and sound services paint the world’s panorama from your words, or for a world from your room from the part of your photos inside the portal, and reimagine and finish it. They also find the sky, the glass and things that give off smoke or steam in the painted panorama, paint the view through that glass, and make its sound from a description of the world (words only). Most delete what they’re sent and what they make within about an hour; one sends each picture straight back without storing it as a file, though its request log may keep what it was sent for a while. Under the terms we have with it today, one of them may use what it is sent to improve its models.
• A cloud computing service runs the computers that build the world in 3D. It gets the world’s description and panorama, and for a world from your room your photos and what the depth sensor saw, for as long as the work takes.
• Apple verifies your App Store purchase record, App Attest and your purchases.

Deleting a world does not reach these services; each keeps what it was sent only as long as its own terms say (above).

We don’t sell your information or share it for advertising, and we give it to no one else except as Keeping Raree safe says.

Keeping Raree safe

We don’t watch what you make. The services that make a world check what you ask for as they make it, and a world they refuse isn’t made.

We look at a world, and the words it was made from, only to help when you write to us about it, when a shared world is reported or someone tells us it copies their work, or when there are signs that Raree is being misused. Reports and notices come to us by email, with the sender’s address.

• A shared world we take down: its link keeps a record that it was taken down, when, and our reason. After Delete Worlds and Data, only when is kept.
• A suspension (Terms): your record keeps that it was suspended, when, and our reason. Delete Worlds and Data keeps it too, so deleting doesn’t lift a suspension.
• Someone you block is remembered only on your phone, by a tag that says nothing about who they are, and they aren’t told.

We give what we keep to the authorities only when the law requires it, or to report content that sexually exploits a child (in the United States, to the National Center for Missing & Exploited Children), or a threat to someone’s life or safety.

Deleting

• A world: delete it from your library. It goes from our servers, with its share link and everything made along the way.
• Everything: Delete Worlds and Data, at the bottom of Privacy on the Raree page. Every world you made goes from our servers and from your phone, with the photos it was made from and its share links, and so does everything else we keep about you. Your tokens and subscription stay: they come from the App Store, so they go on with your Apple Account, along with the record of the purchases they came from, which we keep as accounts must be kept. So does a suspension (Keeping Raree safe).
• Tokens too: tap Send feedback on the Raree page (its email carries the id we need) and ask, and we erase everything, your tokens with it. A short record stays so that installing Raree again doesn’t give welcome tokens a second time.

Our backups roll off within 14 days, and logs within the times above.

If Raree ends

If we stop offering Raree, we’ll tell you in Raree at least 3 months before it stops (Terms). Through that time you can still download your worlds and delete them, and everything else here holds. Then we delete everything we keep about you, except the purchase records accounts must keep, which lead to no one. Our backups and logs roll off within the times above.

Your rights

You can ask for a copy of what we keep about you, ask us to correct it, or ask us to erase it, wherever you live. We use your words and photos only to make the worlds you ask for and to keep Raree running: that is the service you ask for, and the basis on which we hold them. Raree is not made for children under 13 to use on their own, and we don’t knowingly keep anything from them.

If this policy changes in a way that matters, Raree will tell you before it applies, and the date above will change.

Contact

Raree is made by Rare Realities. Write to [email protected] with any question about your information.