Privacy Policy

Last updated: 1 March 2025


This policy explains what data we collect, why we collect it, who we share it with, and what rights you have. We’ve tried to keep it as clear and readable as possible.


Paperclip Marketplace Ltd (“we”, “us”) operates Lore. We’re a company registered in England and Wales (number 15632925), based at 1 Dukes Lane, Brighton, UK. You can reach us at hello@paperclip.co.


By using Lore, you agree to this policy. If you don’t agree, please don’t use the app.

What We Collect

nformation you give us

  • Account details: If you sign in with Google or Apple, we receive your name, email, and a user ID. We never see your password.

  • Profile info: Your display name and anything you optionally add to your profile.

  • Content you create: Explorations, audio tours, and anything you share with the community.


Information we collect automatically

  • Location: Only when you actively explore or drop a pin. We use GPS coordinates to find historical events near you, and reverse geocode them into a city/country. We never track your location in the background.

  • Camera images: Only in Precise Mode, when you photograph a building for identification. These are sent to our AI provider for analysis.Images are processed in real-time and are not stored on our servers or by Google after analysis.

  • Device info: Device type, OS version, and app version.

  • Usage data: What features you use, explorations created, tours played, view and listen counts.

  • Crash reports: Diagnostic data to help us fix bugs.


Information from third parties

  • Google/Apple sign-in: Basic profile info as described above. We don’t access your contacts, calendar, or anything else.

  • App Store/Play Store: If you subscribe, Apple or Google processes payment. We only receive confirmation that you’ve subscribed — never your card details.

How We Use Your Data

  • To run the app: Your location powers historical searches. Camera images identify landmarks. AI services generate the content you see.

  • To manage your account: Syncing explorations, managing subscriptions, maintaining your profile.

  • Community features: If you share explorations publicly, other users can see them on the map.

  • To improve Lore: Usage analytics help us understand what’s working and what needs fixing.

  • To communicate: Responding to support requests and sending essential service updates.

  • Legal obligations: Where the law requires it.

Who We Share Your Data With

We don’t sell your data. We don’t rent it. We don’t use it for targeted advertising. Here are the services that process your data as part of running Lore:


  • Google (Gemini API): Processes your location coordinates, camera images, and generates all historical research, AI images, text-to-speech narration, and content. Google’s privacy policy governs their handling of this data.

  • Fal.ai: Receives AI-generated images to produce time-lapse videos.

  • Supabase: Our backend — handles authentication, database, and file storage.

  • RevenueCat: Manages subscription status. Receives anonymised purchase data from Apple/Google.

  • Mixpanel: Usage analytics.

  • Sentry: Crash reports and performance monitoring.


Each of these providers is contractually required to protect your data and only process it for the purposes described above. We may update this list as we add or change providers, and will reflect any changes in this policy.

International Data Transfers

Some of our service providers are based outside the UK and EU (primarily in the United States). Where your data is transferred internationally, we rely on appropriate safeguards including Standard Contractual Clauses, UK International Data Transfer Agreements, or adequacy decisions, as applicable under UK GDPR and EU GDPR.

How Long We Keep Your Data

  • Account data: Kept while your account is active. Deleted within 30 days of account deletion.

  • Explorations and media: Public content stays until you delete it or your account. Local-only content (guest users) is never on our servers.

  • Analytics: Aggregated, anonymised data may be kept indefinitely since it can’t identify you.

  • Legal requirements: We may keep some data longer if required by law.

Your Rights

Depending on where you live, you have rights over your personal data. We honour these rights regardless of your location.


Everyone

  • You can delete your account any time from Settings, or by emailing us.

  • You can request a copy of your data.

  • You can ask us to correct inaccurate data.

  • You can withdraw consent for location and camera access through your device settings at any time.


UK and EU residents (GDPR)

Under the UK GDPR and EU GDPR, you additionally have the right to:


  • Request erasure of your personal data

  • Restrict how we process your data

  • Receive your data in a portable format

  • Object to processing based on legitimate interests

  • Lodge a complaint with your local supervisory authority


For UK residents, the supervisory authority is the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.


California residents (CCPA/CPRA)

If you’re a California resident, you have the right to:


  • Know what personal information we collect and why

  • Request deletion of your personal information

  • Opt out of the “sale” or “sharing” of personal information — we don’t sell or share your data for cross-context behavioural advertising, so there is nothing to opt out of

  • Not be discriminated against for exercising your rights


In the past 12 months, we have collected the categories of information described in this policy. We have not sold personal information, and we do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the App.


Other jurisdictions

If you’re in Brazil (LGPD), Australia (Privacy Act), South Korea (PIPA), Japan (APPI), or another jurisdiction with data protection laws, you may have similar or additional rights. Contact us at hello@paperclip.co and we will honour applicable rights under your local law.

Legal Bases for Processing

For UK/EU users, we process data on the following bases:


  • Consent: Location access, camera access.

  • Contract: Providing the app’s core services, managing your account, fulfilling subscriptions.

  • Legitimate interests: Analytics, security, bug fixing, improving the app.

  • Legal obligation: Where the law requires it.

Deleting Your Account

You can delete your account from the Settings screen in the app, or by emailing hello@paperclip.co. When you do:


  • Your profile and personal data are permanently deleted within 30 days.

  • Publicly shared explorations are anonymised or removed.

  • Media files (images, audio, video) on our servers are deleted.

  • Anything stored locally on your device stays until you uninstall the app.

Security

We protect your data with encryption in transit (TLS), secure authentication, access controls, and regular security reviews. No system is 100% secure, but we take reasonable and appropriate measures to safeguard your information.

Children

Lore is an educational app suitable for all ages. However, creating an account requires you to be at least 16 years old (or have parental/guardian consent if younger). Guest mode works without any personal data collection.


We don’t knowingly collect personal data from anyone under 16 without parental consent. If you believe we have, please contact us and we’ll delete it promptly.

AI-Generated Content

When you explore a location, your coordinates (and camera images in Precise Mode) are sent to Google’s Gemini API to generate historical content, images, and audio. This data is processed in real-time. Under Google’s API terms, data sent via the paid Gemini API is not used to train their models — please verify this against your current API agreement.


Generated content is saved to your device and, if you’re signed in, to our cloud storage so you can access it again without regeneration.

Tracking and Advertising

We don’t use cookies (it’s a mobile app). We don’t do cross-app tracking. We don’t serve ads. We don’t build advertising profiles. Our analytics are anonymised and used solely to improve the app.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we’ll notify you within the app. The “Last updated” date at the top always reflects the current version.

Contact Us

Questions about these terms? Reach out:


Paperclip Marketplace Ltd

1 Dukes Lane, Brighton, United Kingdom

Company Number: 15632925

Email: hello@paperclip.co


© 2025 Paperclip Marketplace Ltd. All rights reserved.