Effective Date: May 30, 2026
This Privacy Policy describes how Loop ("we," "us," "our," or "the app") collects, uses, and protects your information.
Note: If you use the Deep Loop AI feature, the content you submit is processed through our backend and AI providers to generate responses. See Section 3 for details.
The following data is stored locally on your device and is never transmitted to our servers:
Encryption: Sensitive data is encrypted using AES-256-GCM authenticated encryption. Encryption keys are stored in your device's hardware-backed secure storage (Android Keystore or iOS Keychain).
Deletion: You may delete all local data at any time via Settings > Delete my data. Uninstalling the app also removes all local data.
We collect limited, non-identifying usage events to understand how the app is used and improve it:
paywall_viewed, subscription_started, shift_completed)These events contain no personal information, no user content, and no identifiers that can be linked to you. Analytics are stored on Supabase servers in Frankfurt, Germany (EU).
Legal basis (GDPR): Legitimate interest in understanding app usage and improving the service (Art. 6(1)(f)).
When you use the Deep Loop AI feature, we generate a random device identifier (UUID) to:
This identifier is randomly generated on your device, is not linked to your identity or any account, and cannot be used to identify you personally. It is stored on Supabase (EU).
Legal basis (GDPR): Legitimate interest in fair use enforcement and abuse prevention (Art. 6(1)(f)).
Your IP address is temporarily processed for:
IP addresses are stored for a maximum of 1 hour and are then automatically deleted. They are not linked to your identity, content, or usage patterns beyond rate limiting.
Legal basis (GDPR): Legitimate interest in security and abuse prevention (Art. 6(1)(f)).
If you purchase a subscription (monthly or annual), the transaction is processed by Apple App Store or Google Play Store and managed via RevenueCat. We receive:
We do not receive or store your payment details such as credit card numbers, billing addresses, or bank account information.
Legal basis (GDPR): Performance of contract (Art. 6(1)(b)).
If you activate a creator or promotional code, we store:
This data is used solely for promotional attribution and providing bonus features. It does not involve advertising, profiling, or third-party data sharing.
Legal basis (GDPR): Performance of contract (Art. 6(1)(b)).
When you use the Deep Loop AI dialogue feature:
OpenAI processes this data under their API Data Usage Policy, which states that API inputs are not used for model training. We do not include your name, email, or any account identifier in requests to OpenAI.
Data transfer: Data transmitted to OpenAI is processed in the United States. This transfer is conducted under OpenAI's Standard Contractual Clauses in accordance with GDPR Chapter V.
If you encounter concerning AI content, please contact us at ramas.app111@gmail.com.
Legal basis (GDPR): Your explicit action of initiating the AI session constitutes consent (Art. 6(1)(a)); alternatively, performance of contract for paid subscribers (Art. 6(1)(b)).
When you use voice input to speak your thoughts:
We do not receive, store, access, or transmit your voice recordings. Audio is processed in real-time by your device's operating system and converted to text. We receive only the transcribed text.
We use Firebase Crashlytics (operated by Google LLC) to collect crash reports when the app encounters errors. This includes:
Crash reports do NOT include your name, thoughts, entries, reflections, or any user-generated content. Crash data is retained for 90 days and used solely to diagnose and fix bugs.
Legal basis (GDPR): Legitimate interest in app stability and error diagnosis (Art. 6(1)(f)).
Loop includes an optional directory of independent wellness specialists (therapists, psychologists, coaches). Specialist profiles are provided by the specialists themselves and include name, credentials, bio, photo, contact information, languages, location, and professional type.
Some specialists may appear as "Featured" or have promoted visibility. This placement is arranged directly between the specialist and Loop by Ramas, clearly labeled, and based on listing agreements — NOT on your personal data, behavior, or usage patterns.
Important: We do NOT use your personal data, thoughts, emotions, session history, or app activity to target, recommend, or personalize specialist listings.
Specialists are independent professionals, not employees or agents of Loop by Ramas. We do not verify credentials, licenses, or qualifications. We do not guarantee the quality of their services. You must verify credentials independently before engaging any specialist.
You may choose to generate and share a PDF progress report with a specialist. This feature is:
We do not receive, transmit, or store shared reports.
Even when sharing anonymously, your progress data and patterns may contain information that could potentially identify you to a recipient who knows you. You are solely responsible for the content you choose to share and the consequences of sharing.
Push notifications are scheduled and delivered locally on your device. Your notification preferences are stored only on your device. No notification content, timing, or preferences are transmitted to our servers.
| Service | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Backend, analytics, AI routing | Anonymous events, device UUID, IP (temporary) | Frankfurt, EU |
| OpenAI | AI dialogue responses | Conversation content (not stored after response) | USA |
| RevenueCat | Subscription management | Pseudonymous ID, subscription events | USA |
| Firebase Crashlytics | Crash reporting | Device info, crash logs | USA |
| Apple Speech Recognition | Voice-to-text (iOS) | Voice audio (real-time processing only) | USA |
| Google Speech Services | Voice-to-text (Android) | Voice audio (real-time processing only) | USA |
| Apple App Store | Payments, distribution (iOS) | Payment processing (we do not receive payment details) | USA |
| Google Play Store | Payments, distribution (Android) | Payment processing (we do not receive payment details) | USA |
| Google Fonts | Typography | IP address (for font loading) | USA |
For transfers to the USA, we rely on Standard Contractual Clauses (SCCs) where applicable, the receiving services' data protection measures and certifications, and your consent where required.
| Data Type | Retention Period |
|---|---|
| Local data (thoughts, entries, history) | Until you delete or uninstall the app |
| Device UUID | Indefinitely (for fair use enforcement) |
| IP address | Maximum 1 hour (automatically deleted) |
| Analytics events | Indefinitely (non-identifying, aggregated) |
| Crash reports | 90 days |
| Creator code activation | Indefinitely |
| Subscription records | Per RevenueCat retention policy |
Loop is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Age verification is required during app setup via date-of-birth entry. Users who indicate they are under 13 are blocked from using the app.
If we discover that a child under 13 has provided information to us, we will promptly delete any associated data. If you believe a child under 13 has used Loop, please contact us immediately at ramas.app111@gmail.com.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:
To exercise these rights, contact ramas.app111@gmail.com. We will respond within 30 days (or as required by law).
If you are a California resident, you have the following rights:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information for purposes other than those disclosed in this Privacy Policy.
We implement technical and organizational measures to protect your data:
While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
Loop does not respond to "Do Not Track" browser signals because the app does not track users across third-party websites or applications.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this policy. For significant changes, we will provide notice within the app.
Your continued use of Loop after changes constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you should stop using the app and delete your data.
Loop by Ramas
Italy, EU
Email: ramas.app111@gmail.com
For privacy inquiries, data requests, or complaints, please email us. We aim to respond within 30 days.