Rattle / Your data

Your records.
Your call.

What stays on your device, what you choose to send, and what happens next.

Current pre-release app · Updated October 6, 2026

The important starting point: signing in does not automatically upload your device logbook. Publishing selected content and requesting AI are separate, deliberate actions.

Who operates Rattle

Rattle is operated by Brad Carvalho. This policy describes the current pre-release Rattle app and this public website at joinrattle.com.

For app support, privacy questions or requests about your information, email support@joinrattle.com. See Support for app help and account-deletion instructions.

Your private device logbook

Your device logbook, equipment, ammunition, photos and voice notes stay on your device unless you explicitly export records, publish selected details or request an AI feature.

Signing in does not automatically upload or synchronize your device logbook. Device backups depend on your phone settings. Exported files contain personal records; store and share them only where you intend.

Accounts and shared content

You sign in with a one-time email code. Supabase stores your email address and authentication/session data. Rattle stores your username, display name, optional bio, follow connections and blocks.

Posts contain the caption, photos and equipment or result fields you preview and submit, together with audience and comment settings. Groups store membership, invitations, challenges, explicitly submitted results and comments. Approved content is visible according to the audience and membership permissions that apply to it.

Any private cloud logbook records are restricted to their account and are separate from the device logbook. They are not an automatic backup of your device.

Manual review and reports

Submitted profiles, posts and group content are held for manual review before other users can see them. Authorized operators can inspect submitted text and images, remove content and suspend accounts. Editing content requires a new review.

The source records in your private device logbook are excluded from this review queue. Only details you submit are shared. No review response time is promised during this pre-release period.

A report stores a snapshot of the reported content as evidence. That evidence may remain after the original content is edited or deleted.

AI features you request

AI features send selected information through Rattle’s backend to OpenAI when you request and confirm the feature:

  • Target detection: the selected photo and recorded caliber.
  • Target review: the displayed verified measurements, limited equipment context and up to 12 comparable records. Notes are optional.
  • Photo-assisted gear entry: the selected image and item category.

These requests disable OpenAI response storage. This does not guarantee zero retention; provider security and abuse-monitoring rules still apply. Check an image for faces, serial numbers or other personal details before sending it.

Read OpenAI’s privacy policy and OpenAI’s API data-handling documentation.

Your controls and account deletion

You can remove posts, delete your own comments and withdraw eligible challenge results. Blocking limits subsequent access and interactions. Copies that others have already obtained cannot be recalled.

To delete your account, open your profile’s Account tab and choose Delete account. You must enter a fresh email code and explicitly confirm deletion.

If you cannot access your account, email support@joinrattle.com for help with deletion. Include your account email address, but never a sign-in code or password.

Successful deletion removes your hosted account, profile, uploaded media, private cloud logbook, posts and interactions, memberships, and owned groups with their challenges and results. If removal is interrupted, the app asks you to retry.

Your private device logbook remains. Previously exported or separately saved copies also remain wherever they were stored. Report evidence and moderation decision records may remain as described below; account deletion does not automatically erase them.

Retention and its limits

Reports become eligible for cleanup after 90 days. Cleanup currently requires an operator to run it, so evidence can remain longer. There is no automatic report-cleanup schedule.

Moderation decision records have no automatic expiry. Operator review copies must be handled separately. This pre-release build does not enforce a fixed retention period for those decision records or copies.

Hosting logs and backups follow the service provider’s applicable retention practices. We do not promise that every copy in every backup disappears immediately when a record or account is deleted.

Hosting and service data

Supabase hosts authentication, the cloud database, uploaded media and backend functions. Service requests can generate operational and security logs, including IP addresses. Rattle also keeps account-based usage counters and moderation records.

Support correspondence is handled through Google Workspace. When you email support, your email address, message and any attachments you choose to send are processed to handle your request. Support email is separate from your app account and is not automatically removed by in-app account deletion.

No advertising SDK or separate analytics service is configured in the current app build. Read Supabase’s privacy policy for information about the provider’s practices.

This website and policy changes

This public site has no account form, advertising tracker, analytics script or cookie-based personalization. It does not request access to your camera, microphone or location. The website’s host may process technical request information, such as an IP address, to deliver and protect the site.

This policy reflects current app behavior, not a promise about unreleased features. As the service changes, we will update this page and its revision date. For questions about your information, email support@joinrattle.com.