Privacy Policy
Effective October 14, 2026
Loopy is an app for running recurring group activities. It is operated by Milad Hosseinpour (“we”, “us”). This policy explains what we collect, why, who it is shared with, and how to delete it. The short version: we collect what it takes to run your groups, we never sell it, we show no ads, and we do not track you across other apps or websites.
What we collect
| Data | Why |
|---|---|
| Account: your display name, profile photo if you add one, and the identifier from the sign-in you chose — Apple, Google, or your phone number. If you sign in with Apple and share your email, we store it. | To create your account and show other members who you are. |
| Group activity: groups you create or join, your role, your replies to sessions (“I'm in”, waitlist, guests you bring), team assignments, match results and competition standings. | This is the service. |
| Ratings: skill ratings that a group's organizers give members, on metrics that group defines. | To make balanced teams. Who can see them is set by the group. |
| Content you post: group names, descriptions, rules, images, announcements, session notes. | To show it to the people it's meant for. Public groups are visible to anyone browsing Loopy. |
| Location: only if you allow it, your approximate location when you search for groups nearby. | To sort search results by distance. It is used for that search and not saved to your account. |
| Notifications: your device's push token, and if you connect them, your Telegram chat or WhatsApp number. | To send you the reminders and updates you've turned on. |
| Membership: whether your subscription is active and when it renews, as reported by Apple. | To unlock the app. We never see your card or payment details — Apple handles payment. |
| Technical logs: request logs with times, IP addresses and errors. | To keep the service running and secure. Kept briefly. |
Who we share it with
We share data only with the services that run Loopy for us, and only what each needs:
- Apple — Sign in with Apple, push notifications, and subscription billing.
- Google — if you choose Sign in with Google.
- Cloudflare — network delivery and storage of group images.
- Twilio — sends the text-message code if you sign in with your phone number.
- Telegram and WhatsApp (Meta) — only if you connect them for notifications.
- Anthropic — when an organizer uses AI-assisted team balancing, the organizer's instruction and the participants' display names are sent to Anthropic's API to interpret it. No account IDs, contact details or ratings are sent.
Other members see what the app shows them: your name and photo, and your replies and teams in groups you share. We do not sell personal data, use it for advertising, or share it with data brokers. We would disclose data if the law required it.
How long we keep it
- Your account and group activity: until you delete your account or the group is deleted.
- A deleted group is restorable for 30 days, then permanently removed.
- Ratings of someone who left a group: deleted 180 days later.
- Guest names on past sessions: erased 365 days after the session.
- Notifications and AI requests: 90 days. Audit and subscription records: 24 months.
- Database backups: 14 days.
Deleting your account
In the app, go to Profile → Delete account. Your sign-in identities, devices, notification channels and preferences are deleted immediately, your Sign in with Apple authorization is revoked, and your name and photo are removed. Past group history you took part in (for example, a match result) stays, shown as “Deleted user”, so other members' records still add up. Cancel your Apple subscription separately in Settings.
Your rights
You can see and correct your profile in the app, and delete your account at any time. To ask for a copy of your data, or anything else about your privacy, email support@loopyglobal.com. Depending on where you live (for example the EU, UK or California) you may have further rights, which we will honor.
Children
Loopy is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
Security
Data travels over HTTPS. Sign in with Apple tokens are encrypted at rest, and access to the server is restricted.
Changes
If we change this policy we will update the date above, and tell you in the app if the change is significant.