Privacy Policy

1. Disclaimer

Boondit Rhythm is an independent, community-built project. It is not affiliated with, endorsed by, or connected to Rabbit Inc., the Rabbit R1 device, or any of their products or services. All trademarks belong to their respective owners.

2. Information We Collect

When you sign in via Discord, we receive your Discord user ID, username, and avatar. This is the only personal information we collect directly.

When you upload content (songs, rhythm charts, album art, backgrounds), that content is stored alongside your user ID as the uploader. We also store metadata you provide such as song title, artist name, BPM, and tags.

When you play a song, we record your score, the difficulty played, and the timestamp. This data is associated with your account.

3. How We Use Information

• Account management — to identify you and display your profile
• Content delivery — to serve your uploaded songs and charts to other users
• Scorekeeping — to record and display play results and leaderboards
• Abuse prevention — rate limiting and content moderation

4. Third-Party Services

Discord. We use Discord OAuth for authentication. Discord's own privacy policy applies to the data they process. We only store the information described above.

Supabase. Our database and file storage are hosted by Supabase. This includes PostgreSQL for structured data and S3-compatible object storage for uploaded files (audio, images, charts). Supabase processes data on our behalf and is bound by their data processing agreements.

5. Data Storage

All data is stored in Supabase infrastructure. Uploaded files (audio, images, rhythm charts) are stored in object storage. Account data, song metadata, and scores are stored in PostgreSQL. We do not transfer data outside of Supabase's infrastructure except as needed to serve the Service to you.

6. Data Retention

We retain your account data and uploaded content for as long as your account exists. If you delete your account or request deletion, we will remove your personal data and uploaded content within a reasonable timeframe. Anonymized aggregate data (e.g., total play counts) may be retained.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your data

To exercise any of these rights, contact us at [email protected].

8. Security

We use industry-standard practices to protect your data. All data in transit is encrypted via TLS. Authentication is handled through Discord's secure OAuth flow — we never see or store your Discord password. However, no system is perfectly secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete it.

10. Changes

We may update this policy from time to time. Significant changes will be noted on the Service. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

For privacy questions or data requests, contact [email protected].