Lorea / Privacy & Support
Privacy Policy
Lorea Privacy Policy · Effective and updated September 12, 2026. Lorea is operated by Kewen Wang. This policy explains information handling in the current app and privacy/support website. Contact: wangkewen20011@outlook.com.
Accounts and sign-in
Lorea uses Supabase to create accounts and sign in with email verification codes. The account service processes your email, account ID and chosen display name. Your profile and session are stored on this device to keep you signed in. The current sign-in flow does not ask you to set an app password.
Local records and favourites
Favourites are stored on this device, do not currently sync between devices and are not separated by account. Language preferences, onboarding state and a local story index are also stored on the device. Signing out does not automatically clear favourites. Appearance preferences, reading progress and downloaded public archive caches may also be stored locally for reopening content and offline browsing.
Server archives and images
Published Cases, UMA and Lorea Cases are delivered through Supabase database and Storage services. Requests may involve IP addresses, request times and error or security logs for delivery, troubleshooting and service protection. Memory of Places groups archive locations, not your movement history. Current favourites are not uploaded as cloud favourites.
Location and third-party maps
With permission, location supports nearby places, your position on Navigate and directions. The home screen uses system reverse geocoding. Location-based image searches have been removed. Map and geocoding services receive the location needed for your request and network information such as your IP address. Maps are provided by system or map providers. On iPhone, in-app route previews send your current position, reviewed archive destination and travel mode to Apple MapKit to calculate the route, distance, estimated time and steps. This feature does not provide live turn-by-turn guidance or background navigation. Only when you choose Open external navigation and select a service are the destination and travel mode passed to Apple Maps or Google Maps. The external service handles location and routing under its own permissions and privacy rules. Lorea does not request background location. Browsing remains available without permission, with Toronto as the default location.
Astrum motion controls
Astrum maps existing archives to stars. Motion permission is requested only when you enable motion controls. Rotation and tilt data are used on this device to change the view; they are not saved to archives or uploaded to the Lorea account service. Listening stops when the screen loses focus or the app enters the background. You can disable motion and drag to explore.
Sharing archives
The detail-page share button opens the system share sheet with the archive title, a short description and a Lorea app link. Content is sent through your chosen service only when you complete sharing. That service processes the content under its own rules. Opening the app link requires Lorea to be installed.
Notifications
This version does not provide book-release push notifications or upload device push tokens. Ask About This Book only opens your email app; you decide whether to send. If an earlier version requested notification permission, you can turn it off in system settings.
Email submissions and public content
The submission button opens your email app. Your sender address, message and attachments reach the submission mailbox only when you send the email. Include only information you intend to share. Submissions undergo manual review and are not automatically public; selected material may be edited and published under an agreed name. Your email provider and the recipient mailbox provider process the email. Emails and edited publications are not automatically deleted with an app account. Contact the email below to request their removal or correction. Applications to join SSSP also use email. Interests, experience and contact details you choose to provide are used to respond and communicate about the organisation; tapping the button does not submit an application automatically.
Account deletion and retention
Choose Delete account below Sign out in Profile and confirm to request permanent deletion of your account and account profile from the server. After confirmation of success, the app clears this device’s favourites, local story records for the account and sign-in session. Failures or interrupted requests are reported as unconfirmed, not as completed deletion. Local records on other devices are not remotely erased. Language and onboarding preferences remain. Provider backups and security logs may not be removed immediately with the active account and follow provider retention rules; this does not keep the deleted account available for use.
Third parties and your choices
The current app code does not integrate advertising tracking or behavioural analytics SDKs. Account verification, email, maps and archive image requests still involve the providers described above. Revoke location, motion and notification permissions in system settings. Contact the email below to request access, correction or deletion of personal information.
Retention and security
Account information is used to provide the service while your account remains active; see deletion instructions above. Emails are retained to handle applications, support, submissions and necessary follow-up; you can request deletion. Providers may retain limited records for security, backups or legal obligations. Data is transmitted over encrypted connections; no system can guarantee absolute security. Providers may process data outside your country or region. We do not sell personal information or use it for cross-app advertising tracking.
This website
This website provides privacy and support information without requiring registration. We have not added advertising, analytics scripts or forms. Hosting services (Cloudflare Pages and its infrastructure) may process IP addresses, browser information and request logs to deliver and protect the website. Your email app handles sending after you select an email link.
Requests and policy changes
Contact wangkewen20011@outlook.com to request access, correction or deletion, or ask about information handling. We may verify your identity to protect your account. Requests are handled under applicable law; do not send passwords or verification codes. This policy will be updated as features change, with the revision date shown above.