Last updated 25 October 2026
The short version
- Loop is a private app for a small group of close friends. What you share goes to the people in that circle or chat, and to nobody else.
- Loop has no ads, no advertising or tracking software, and never sells or rents your data.
- Chats are encrypted on their way to our servers and while stored there, but they are not end-to-end encrypted. We look at content only for the reasons listed below.
- You can download everything or delete your account at any time in the app: Settings, then Privacy and safety.
Who we are
Loop is made and run by RAFTZUM LLC ("we", "us"). We decide what happens to the data described here. To reach us, use the form on the help page or "Report a problem" in the app's Settings.
What Loop stores, and why
Your account
- Your email address, used only to send you sign-in codes and to answer you if you write to us. Other people in Loop cannot see it.
- Your profile: username, display name, profile photo, your birthday if you add it, and anything you add about yourself. Your friends and the people in your circles can see these. Anyone signed in to Loop can also find your username and display name by searching for a username.
- Your time zone, so that streak days, reminders and plans line up with your day.
- How you joined: when you joined Loop, the invite that let you in and who made it (an invite from a friend, an invite to a circle, an invite on a card someone shared, or a group link and its name), and whether you tapped a link, scanned a QR code or typed the code. If you were on Loop before it needed an invite, it records only that, and when. Loop uses this to show you how you joined, to count the new people each person brings in, and to help us act on reports.
- Your agreement to the Terms of Use: which version you agreed to, when, and the app version you were using. If the terms change in a way that matters, Loop asks you to agree again.
What you share
- Messages, photos, voice notes, stickers, links and reactions; plans, polls and replies; streaks, check-ins and photo proof; shared expenses, bills and who owes whom; lists, albums, wishlists, games, moods, questions and answers; messages you schedule and reminders you set. The people in the circle or one-on-one chat where you share them can see them.
- Notes about a friend that you keep for yourself. Only you can see them.
- "Free tonight" and free hours. If you say you are free, or fill your free hours for a plan, the people you share it with see when you are free. When Loop fills free hours from your phone's calendar, it works out the busy times on your phone; event names and details never leave it.
- Money in Loop is a record only. Loop never handles payments, bank details or cards.
Health totals, only if you turn on Health data in Settings
Daily totals for steps, exercise, workouts, sleep and distance (walking, running, cycling and swimming), read from Apple Health or Health Connect, so those streaks can update themselves. Only the day's total is sent, not the readings behind it. The friends on a streak see whether you reached its goal, and your number only where the streak shows it.
Notifications
To send you notifications, Loop stores a device token from Apple or Google. The text of a notification passes through Apple's Push Notification service or Google's Firebase Cloud Messaging on its way to your phone.
Keeping Loop working
- Crash reports and usage, unless you turn them off (Settings, Privacy and safety, "Share crash reports and usage"): the error text, the screen you were on, the app version, your phone's model and system version, and how often each feature is used. Email addresses, long numbers and quoted text are removed before anything is sent. Never what you write, your photos or names.
- "Report a problem": what you write, with the app version, phone model and the last few screens you opened.
- Reports and blocks: when you report something, we receive the report and can see the content it is about. Blocks are stored so they keep working.
- Messages from the help page: your email address, the topic and what you write.
What stays on your phone
- Your calendar. Loop reads busy times to mark free hours. Event names and details never leave your phone.
- Camera, microphone and photo library. Used only when you take, record or pick something. Nothing is uploaded until you send it. The demo uploads nothing, and neither does scanning an invite's QR code.
- Health readings. Only the daily totals above leave your phone.
- Your sign-in session, unsent messages, read markers, pinned chats and display settings.
Loop does not use your location and does not read your contacts.
Health data
Health data is used only to update your streaks in Loop. It is never used for advertising or marketing, never sold, never given to data brokers or other third parties, and never stored in iCloud. Loop does not write to Apple Health or Health Connect. You can turn the switch off at any time in Settings, and remove Loop's access in the Health app or in Health Connect. Loop's use of data from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
Our consumer health data privacy policy sets out which health data Loop collects, who receives it, and how to see, stop or delete it, as Washington's My Health My Data Act requires.
Who can see your data
- The people you share with: the members of a circle, the friend in a one-on-one chat, the people on a streak or plan.
- How you joined is shown to you in Settings. The person who invited you sees your name and when you joined among "People you brought in". Loop's moderators, who review reports, see how each person joined, who invited them and whom they invited. If you joined through a group link, the others who joined through the same link see your name and profile photo under "Joined with you" on Friends, for 30 days from whichever of you joined later.
- Us, only when needed. Because chats are not end-to-end encrypted, the people who run Loop can technically access them. We do so only to review something that was reported to us, to fix a problem you reported, to keep Loop secure, or when the law requires it.
- The companies that run parts of Loop for us, which may use the data only to provide their service to us:
- Supabase: the database, file storage and sign-in. Servers in Canada.
- Google: sending sign-in emails (Gmail) and delivering notifications (Firebase Cloud Messaging).
- Apple: delivering notifications to iPhones (Apple Push Notification service).
- GitHub: hosting these web pages and keeping our encrypted nightly backups.
- Authorities, when a valid legal request requires it. United States law also requires us to report apparent child sexual abuse material to the National Center for Missing & Exploited Children.
We do not sell or share your personal information for advertising, and we do not use it to train AI models.
How long we keep it
- Your account and what you share: as long as your account exists, or until you delete the item.
- How you joined, and your agreement to the Terms of Use: as long as your account exists. Both are deleted with your account. If the person who invited you deletes theirs, your record stays but no longer says who invited you.
- When you delete your account: your account, profile, messages, and streak and money records are removed from the live database straight away. Your photos, voice notes, check-in photos and profile photo are removed from file storage within 30 days (usually within a day). Photos you added to a circle's shared album, receipts, files on a plan and stickers stay with that circle until someone in it deletes them or the circle is deleted. Encrypted backups are deleted after 30 days.
- Crash reports and usage counts: 180 days. Problem reports and messages from the help page: up to one year.
- Content removed after a report: kept out of sight for up to one year where the law requires us to preserve it, then deleted.
Your choices and rights
- Download your data: Settings, Privacy and safety, Download my data.
- Delete your account: Settings, Privacy and safety, Delete my account. If you no longer have the app, ask us through the help page.
- Change your profile at any time, and turn off Health data, crash reports and notifications in Settings.
- Block or report anyone from their profile or from a message.
Depending on where you live (for example the European Union, the United Kingdom or California), you have the right to access, correct, delete or receive a copy of your personal data, and to object to or limit how it is used. Ask us through the help page and we will answer within 30 days. You can also complain to your local data protection authority. We use your data to provide the service you asked for, to keep it safe, and to meet legal duties.
Security
Data is encrypted in transit (TLS) and at rest. Access rules in the database let each person read only what was shared with them. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Age
Loop is for people 18 and over. If we learn that someone under 18 has an account, we will delete it.
Loop does not allow child sexual abuse or exploitation in any form. Our child safety standards say how to report it and what we do.
When you open Loop, it asks your app store whether you are 18 or older. Loop uses the answer only to decide whether you can use the app and does not keep it.
Where your data is processed
Your data is stored in Canada. Google, Apple and GitHub may process it in the United States or other countries. Where the law requires it, these transfers are covered by the providers' standard safeguards.
Changes
If this policy changes, this page will show the new date. If a change matters for how your data is used, we will also say so in the app before it takes effect.
Contact
Write to us through the help page, or in the app: Settings, then "Report a problem".
RAFTZUM LLC · Help · Terms of use · Child safety standards · Consumer health data privacy policy