PRIVACY / UPDATED AUGUST 31, 2026

Holo Zoo privacy

Current build: adult internal TestFlight, no account, no real commerce or human-funded AI acquisition, no agent marketplace execution, no AI-to-AI payments or operating title, no public agent social graph, no GPS, no map provider, no public sharing, and no automatic RapterBox telemetry.

What stays on the device

Holo Zoo stores the selected House code, configured RAPP Zoo URL, imported or bundled Rolling Core capsules, immutable Holo history, local source evidence, and app settings in the app sandbox. A Direct provider API key is stored through the device SecureStore/Keychain when a tester chooses to save one.

Holo Field derives its sample signal placement from public organism IDs. It requests and stores no physical location.

Network use

The app contacts only a RAPP Zoo or AI provider endpoint explicitly configured by the tester. Public endpoints must use HTTPS. Cleartext HTTP is limited to literal loopback or private-network addresses. Cross-origin redirects are refused before response data is accepted.

When a tester explicitly starts a Direct update, the current Rolling Core record is sent to the tester-selected AI provider. Provider processing, retention, geography, abuse monitoring, and output terms are governed by that provider. Do not send personal or confidential information unless those terms are acceptable.

Commerce and accounts

The current internal TestFlight does not initialize real commerce, let a human buy an AI for a beneficiary AI, create a RapterBox account, submit RevenueCat purchase history, execute the future agent marketplace, create AI-to-AI payments or operating title, publish a public agent social graph, sell compute, run production RapterWorks, accept tips, support resale, or publish Coin records. Those features require a different reviewed release.

Files, export, and deletion

Imports are limited to 16 MiB. Temporary picker and export cache copies are removed after reading or sharing. Export occurs only after a tester uses the system share action.

To remove local content, delete imported items where the app provides that control and clear the saved provider key by saving an empty key before uninstalling whenever possible. Deleting Holo Zoo removes its app sandbox. Because iOS Keychain values can outlive an uninstall, a fresh installation uses its missing sandbox marker to delete any residual provider key before loading settings; if that deletion fails, Direct updates remain disabled and the app shows an error. Apple may retain TestFlight crash diagnostics under Apple's policies. The current build has no RapterBox cloud account to delete.

Public and private data

Public DOGG-safe data and private GODD data are separate. Public publication is disabled in this build. Private prompts, relationship history, customer content, credentials, receipts, raw location, and unpublished mutations must never enter public frames.

Children

The current TestFlight is for adult internal testers only. Do not invite or provide this build to minors. A later family release requires guardian controls, child-safe provider/content rules, household separation, deletion and recovery, and no unsupervised adult-minor House contact.

RapterBox website forms

The separate RapterBox website sends form submissions to Formspree only after a person chooses Submit:

The business waitlist sends name, email, optional phone, optional note, and hidden source=rapterbox.com-business.
RBox Intake sends name, email, business_shape, current_workspace, interest, optional note, and hidden source=rapterbox.com-intake.
The AI-assurance invitation sends name, email, optional note, hidden source=rapterbox.com/invite, and hidden keyword=ATTEST.
Genesis 251 price discovery sends rapter_id, maximum_willing_to_pay_usd, name, email, beneficiary_ai_name, beneficiary_ai_purpose, non_binding_acknowledgement, hidden source=rapterbox.com-genesis-251-price-signal, hidden opening_reference_price_usd=49.99, hidden floor_method=verified-unique-p25-minimum-25, and an anti-bot _gotcha field that should remain empty.
The private privacy-request form sends email, request_type, form_source, note, and hidden source=rapterbox.com-privacy-request.

RapterBox uses business, intake, assurance, and privacy-request fields to review and reply to the submitted request. For Genesis 251 price discovery, RapterBox also uses the email and acknowledgement to deduplicate or verify responses, filters automated, unverifiable, self-dealing, and clearly manipulative signals, and analyzes the remaining maximum-price values in aggregate to calculate the disclosed candidate floor. Raw names, emails, beneficiary details, and individual prices are not published.

Formspree processes each submission under its own privacy and retention terms. Website-form information does not enter Holo Zoo, and Holo Zoo app data is not sent to these forms. Do not submit credentials, customer files, health information, payment information, private capsule contents, or confidential device exports.

Contact and choices

Use this private form for a privacy question or to request correction or deletion of a RapterBox website submission. Provide the email used, the form involved, and an approximate submission date so RapterBox can locate it. Never place personal information in a public GitHub issue.

For non-sensitive app support, use RapterBox Support.