Privacy Policy

We take your privacy seriously.

Loopi ("we", "our", or "us") is a mobile application that helps you reflect on your runs through mood check-ins, written notes, and optional photos — a quiet journal for mindful running.

This Privacy Policy explains what data we collect, why we collect it, and how we protect it. By using Loopi, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the app.

What information Loopi collects.

We collect only the data necessary to provide the app's functionality. Here is a full overview:

• AuthEmail address — collected when you sign in via email OTP or Sign in with Apple. Used solely for authentication. We do not send marketing emails.
• ProfileDisplay name and onboarding answers — entered by you during onboarding (age range, running frequency, what running helps you with, how you usually feel after a run). Stored in our database and used to personalise your experience.
• RunsRun entries — when you log a run, we store the date, distance (optional), mood before and after, body check-in, written notes, and optional reflection prompts. This data is private to your account.
• PhotosOptional photo uploads — when you attach a photo to a run entry, the image is resized and re-encoded on your device before upload, removing any embedded EXIF metadata (including GPS location, camera model, and timestamps). Photos are stored privately in our secure storage and are only accessible by you. Photos are never shared, never used for AI training, and never made public.
• PreferencesApp preferences — your preferred distance unit (kilometres or miles) is stored in our database to keep your experience consistent across devices.
• PurchasesPurchase history — when you subscribe to Loopi Pro or make a one-time Lifetime purchase, we store a record of your active entitlement (whether you have Pro access and when it expires). The actual payment is handled by Apple — we never see or store your card details.
• AnalyticsAnonymous usage analytics — we collect anonymised event data about how the app is used (for example, runs started, runs completed, paywall shown, purchase completed). This data is linked to a random user ID, never to your email, name, photos, or note content. You can disable analytics at any time in Settings → Privacy.
• LocalOn-device storage — your runs and photos are also cached locally on your device using standard iOS storage (SwiftData) so the app works offline. This local data is removed when you delete the app or your account.

Your data is used only to run Loopi.

We use the data we collect for the following purposes only:

• To authenticate you and maintain your account
• To store and display your run entries, moods, notes, and photos
• To personalise the app (greeting, unit preference, onboarding answers)
• To sync your data between devices if you sign in on more than one
• To manage your Loopi Pro subscription or Lifetime purchase
• To understand how the app is used in aggregate, so we can improve it
• To allow you to permanently delete your data when you choose to

We do not use your data for advertising. We do not sell your data. We do not use your photos, notes, or any other personal content to train AI or machine learning models. We do not share your data with third parties except as described in Section 04.

Where your data lives.

Your account data, runs, and photos are stored in Supabase, a secure cloud database and storage provider. Data is stored in the EU region. Supabase is SOC 2 compliant.

Photos are uploaded to a private Supabase Storage bucket. Access is restricted by row-level security rules: only you can read or modify your own photos. Public access is not possible.

Authentication emails (such as your sign-in code) are sent via Resend, an email delivery service operating from the EU. Resend only processes your email address for the purpose of delivering the message, and does not store your email content beyond delivery.

Subscription state and purchase history are managed by RevenueCat, a subscription management service. RevenueCat receives an anonymised user identifier (a UUID), the products you purchased, and the timestamps — never your name, email, or other personal content.

Anonymous analytics events are processed by PostHog, hosted on EU servers. PostHog receives event names (for example "run_completed") and a random user identifier. It never receives your photos, notes, email, or any other identifying personal content.

Some data (your runs, photos, and app preferences) is also stored locally on your device via standard iOS storage mechanisms for offline access.

Who else touches your data.

We use the following third-party services, each of which has its own privacy policy:

• Supabase (supabase.com) — database, authentication, and photo storage
• Resend (resend.com) — transactional email delivery
• Apple (apple.com) — Sign in with Apple authentication, in-app purchases, and app distribution
• RevenueCat (revenuecat.com) — subscription management for Loopi Pro
• PostHog (posthog.com) — anonymous product analytics, hosted in the EU

We do not integrate any advertising networks, data brokers, or social media tracking SDKs. Loopi has no third-party advertising of any kind.

You are in control of your data.

As a user based in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — you can request a copy of all data we hold about you, including your runs, photos, and profile information
• Right to rectification — you can correct inaccurate data via the Settings screen or by editing a run entry directly
• Right to erasure — you can delete your account and all associated data (including photos and purchase history) directly in the app via Settings → Delete account
• Right to portability — you can request an export of your data by contacting us
• Right to object — you can object to any data processing by contacting us. Anonymous analytics can be disabled directly in Settings → Privacy.

To exercise any of these rights, contact us at the address in Section 09.

How long we keep your data.

We retain your data for as long as your account is active. If you delete your account via the app, all personal data associated with your account — including your runs, photos, profile, and authentication record — is permanently deleted from our servers within 30 days.

Individual run entries and photos can be deleted at any time from within the app without deleting your entire account. Local data stored on your device is removed when you uninstall the app or sign out.

Purchase and subscription records may be retained for a longer period where required by tax and accounting laws (typically 7 years in the Netherlands). These records do not contain personal content — only transaction metadata.

Loopi is not for children under 13.

Loopi is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

When this policy changes.

We may update this Privacy Policy from time to time. We will notify you of significant changes via a notice in the app or by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Questions about your privacy?

If you have any questions about this Privacy Policy or how we handle your data, you can reach us at: