Pana Rabbit · Last updated: August 19, 2026
Pana Rabbit is a habit app for movement. You show up, your rabbit reacts, and your friends ("panas") can look out for you. This policy explains what we collect, why, and how to get rid of it. We tried to write it in plain language instead of legalese.
| What | Why |
|---|---|
| Email and password (only if you create an account to connect with panas) | To sign you in and keep your progress attached to you |
| Your rabbit's name, display name, and friend code | So your panas can recognize you |
| Habit setup: discipline, level, equipment, days, time anchor | To build your plan and remind you at the right time |
| Your appearances: date, duration, how it felt | The core of the app — streak, strength, and what your rabbit shows |
| Your circle: who your panas are, care you send and receive, messages you write | To deliver care between you and your panas |
| Device and app info, language, time zone | To send notifications at a sane local hour and fix crashes |
| Usage events (screens opened, sessions completed, notifications received) | To understand whether the app actually helps people keep showing up |
No health records, no weight, no body measurements, no photos of you, no precise location, no contacts, no advertising identifiers. The app does not read Apple Health or Google Health Connect.
These are service providers acting on our instructions. We don't give them your data for their own purposes.
Pana Rabbit is not for children under 13. We ask your age when you start, and if you are under 13 we don't create an account, don't collect analytics and don't turn on the social layer. If you believe a child under 13 gave us information, write to us and we will delete it.
Depending on your state, you may have the right to know what we hold about you, to get a copy, to correct it, and to have it deleted. We don't sell personal information and we don't share it for cross-context behavioral advertising, so there is nothing to opt out of on that front. To exercise any right, use the deletion link above or write to us — we answer within 30 days and we won't treat you differently for asking.
We are based in Colombia, so Ley 1581 de 2012 (habeas data) applies to us. As the titular of your data you have the right to know what we hold about you, to update it, to correct it, to ask for proof of the permission you gave us, to be told how your data is used, and to revoke that permission and ask us to delete everything.
The fastest way to exercise the last one is the app itself: Settings → Delete my account. For anything else, write to support@panarabbit.app. We answer consultations within 10 business days and complaints within 15, as the law requires. If you think we handled it badly, you can complain to the Superintendencia de Industria y Comercio — but please write to us first, we would rather fix it.
While your account exists. When you delete it, everything goes — profile, appearances, circle, wallet, the messages you sent and received, and the record of which notifications you were sent. It all cascades from your account row: nothing is kept, nothing is archived, not even in anonymized form. Deletion is immediate and irreversible.
This includes messages you sent to a pana: they disappear from their side too. If a pana wants to keep something you wrote, they need to save it themselves.
Accounts, passwords and sessions are handled by Supabase, not by us — we never see your password. Data travels encrypted and is stored encrypted at rest. Access to the database is restricted per user by row-level security, so one person cannot read another person's data even by asking the server directly.
We are a small team and we will not pretend otherwise: no system is perfectly secure. What we can promise is that we keep as little as possible, so there is less to lose. If something happens that affects you, we will tell you.
We are based in Colombia. Our service providers — Supabase and PostHog — store data on servers in the United States, and push notifications travel through Apple, Google and Expo. That means your information leaves your country and is processed in the United States, where privacy laws may be different from the ones where you live. By using the app you are asking us to deliver a service that works this way.
If we change this policy in a way that matters, we'll say so in the app before it takes effect.
Questions, requests, or anything that feels wrong: support@panarabbit.app.