Legal
Privacy Policy
Last updated: August 31, 2026 · Effective: August 31, 2026
Overview
Robbi is an app for cataloguing what you collect — cigars, watches, coffee, wine, perfume, anything — and, if you choose, sharing it with other collectors. This policy explains what we hold, why, and what you can do about it.
The short version: We collect only what the app needs to work. There are no analytics, no advertising and no third-party trackers anywhere in Robbi. Your collections are private until you decide otherwise, and deleting your account really does delete it.
Robbi is operated by Petala Noar.
Questions about this policy: contact@petalanoar.org
What we collect
When you create an account
- Your email address.
- If you sign in with Apple or Google, the account identifier they give us and the email address you choose to share. If you use Apple’s Hide My Email, we only ever see the relay address.
- A password, if you sign up with email. It is stored hashed by our authentication provider; we never see it.
What you put into the app
- Your display name, a short bio and a profile picture, if you add them.
- Your vaults and items: names, notes, star ratings, rated attributes, and any photos you upload.
- Whether each vault is shared or kept private.
What happens between people
- Who you follow and who follows you, including pending follow requests.
- Items you like, vaults you save, comments you write and star reviews you leave.
- A record that a vault has been viewed, so its owner can see a view count. Owners can switch this off, and a viewer is only ever counted once.
- Accounts you block, and reports you file about content or accounts.
Technical
- A push notification token for each device you enable notifications on, so we can deliver them. Revoke it any time in iOS Settings.
What we do not collect. No analytics, no advertising, no third-party trackers, and no tracking across other apps or websites. No location, no contacts, no health data. We do not build advertising profiles, we do not sell or rent your data, and we do not use your content to train machine learning models.
Why we hold it
- To give you an account and keep you signed in.
- To store and show your collections, to you and to whoever you have shared them with.
- To operate the social parts of the app: following, likes, comments, reviews and notifications.
- To keep the community safe: acting on reports, honouring blocks, and enforcing our content policy.
Who else is involved
A small number of providers help run the service. They handle data on our instructions only.
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Database, authentication, file storage | Your account and everything you store in the app |
| Apple | Sign in with Apple, push notifications | Your Apple account identifier and push tokens |
| Google sign-in, for those who use it | Your Google account identifier and email |
Data is stored on infrastructure operated by Supabase.
Who can see what you put in
- A vault is private by default. Nobody but you can see it until you share it.
- A shared vault is visible to other signed-in users, along with its items, photos, comments and reviews.
- If you set your account to private, your shared vaults are visible only to followers you have approved.
- If you block someone, neither of you can see the other’s vaults, items, photos, comments or profile, in either direction.
These rules are enforced on our servers, not just in the app. A private vault is unreadable by another account rather than merely hidden from view.
How long we keep it
We keep your data while your account exists.
Deleting your account deletes it. In the app: menu → Settings and privacy → Delete account. That removes your profile, every vault and item, every photo you uploaded, your follows, likes, saves, comments, reviews and notifications, and the account itself. It is immediate and cannot be undone.
Two things do not go with it: reports other people have filed about your content, which we keep as a safety record, and anything you sent that another person has separately saved outside the app.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to object to processing, or to complain to a data protection authority.
Most of this you can do yourself in the app: edit your profile, change your password, delete your account. For anything else, write to us and we will respond within 30 days.
Children
Robbi is not intended for children. You must be at least 17 to hold an account. If we learn that an account belongs to someone younger, we will delete it.
Security
Traffic between the app and our servers is encrypted in transit. Access rules are enforced at the database level rather than in the app alone. No system is perfect, and we will tell affected users promptly if a breach ever puts their data at risk.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect.