Privacy Policy

The short version

• Loop is a social app for kids, families and friends. Children under 13 can only use it after a parent says yes.
• We collect what Loop needs to work — an account, and what members choose to share — and nothing for advertising.
• We never sell information, never show ads, and never use it to build profiles of anyone.
• Children's posts are always friends-only, and strangers can't find or message them.
• Parents can see everything we hold about their child, switch features off, and delete the account at any time from the parent dashboard.

1. Who we are

Loop is run by [OPERATOR NAME], [MAILING ADDRESS]. You can reach us at [CONTACT EMAIL] or [PHONE NUMBER]. More ways to reach us are on our contact page.

2. Children and parental consent

Loop is designed to be used by children, including children under 13. In the United States, the Children's Online Privacy Protection Act (COPPA) says we must get a parent's verifiable consent before we collect personal information from a child under 13. Here is how that works on Loop:

• Everyone gives their birthday first. Sign-up starts by asking for a birthday, before anything else.
• Under 13: we ask only for a display name and a parent's email address. The account is put on hold and cannot be used. We email the parent to explain Loop and ask for consent.
• The parent decides. The parent reads a summary of this policy, then approves or declines. To approve, the parent verifies in one of two ways: with a payment card (we charge $0.50 through our payment processor, Stripe, and refund it straight away; Loop never sees the card number), or by signing a printed consent form and sending it back to us. The parent also chooses the child's password.
• If the parent declines, or doesn't answer within 14 days, we delete the account and the parent's email address.
• Until a parent has verified, a child's account cannot post, upload, comment, chat, send friend requests or make video calls.

We keep a record of when and how each parent consented (the date, the method, and Stripe's reference numbers for the refunded charge — never card details). A signed consent form is kept as the scan or photo the parent sent, in a private folder that is never published, and it is deleted when the account is deleted.

3. What we collect

When someone signs up

• Birthday, display name and a username made from it.
• 13 and over: email address and a password. Passwords are stored scrambled (hashed); nobody at Loop can read them.
• Under 13: the parent's email address instead of the child's. The parent sets the password.

What members share

• Posts, photos, videos and their captions; comments and likes; a profile emoji and short bio.
• Messages in one-to-one and group chats.
• Friends (made by accepting a request that needs a private code), people they follow, and people they block.
• Reports they make, and ideas they send us.
• Conversations with Oreo, Loop's built-in chat helper. Oreo's replies are produced by Loop's own software on our server; these conversations are not sent to any outside AI company.
• Progress and scores in some of Loop's games.

Collected automatically

• One cookie that keeps you logged in, and one that remembers the sign-up birthday answer until the browser is closed. No advertising, analytics or tracking cookies.
• A record of video calls: who called whom, when, whether it connected, and whether a screen was shared. Calls themselves go directly between devices and are never recorded or seen by us.
• A log of photo and video requests: the account number, file name, time and result — used to investigate problems.
• Email delivery logs: whether an email we sent was delivered, with the address partly hidden.
• Internet (IP) addresses are used briefly to stop abuse (for example, too many sign-ups from one place). They are not saved with accounts, and our web server does not keep access logs. [REVIEWER: true as of 2026-10-06 — the Caddyfile has no log directive. Update this if access logging is ever turned on.]

What we do not collect

• Location. Photos are stripped of location and camera details when they are uploaded.
• Phone numbers.
• Face or other biometric data. Camera effects ("lenses") run entirely on the device; nothing about a face is stored or sent.
• Contacts, advertising identifiers, or browsing on other sites.

From people who aren't members

Anyone can ask us to take down a photo or video on our takedown page. We keep the email address and the details they send so we can act on the request and reply.

4. How we use information

• To run Loop: show posts to the right people, deliver messages, connect calls, and keep accounts secure.
• To keep members safe: filter unkind words, act on reports, enforce blocks, and investigate abuse.
• To contact parents about consent, their child's account, and changes to this policy; and to send members login codes and security notices.

We do not use anyone's information for advertising, sell it, rent it, use it to build profiles, or use it to train AI. We do not send marketing to children under 13 or to their parents.

5. Who can see what members share

• Under 13: posts are always friends-only. Children under 13 don't appear in search or suggestions for people who aren't already their friends, and strangers can't follow them.
• 13 and over: each post can be friends-only (the default) or public.
• Messages and calls are only possible between friends. Becoming friends needs a private code and the other person's acceptance. Under 18, becoming friends with an adult also needs a parent's approval.

6. Who we share information with

We share information only with companies that help us run Loop, only what they need, and only for that purpose:

We do not give children's information to any other company. We may disclose information if the law requires it, or if we believe in good faith it is needed to protect a child's safety.

7. How long we keep information

8. Parents' rights

A parent of a child under 13 can, at any time:

• See all the personal information we hold about their child, including posts, photos, videos and messages.
• Switch off video calls or photo and video sharing.
• Delete the account and everything in it.
• Withdraw consent, which stops any further collection; we then delete the account.

Do all of this from the parent dashboard (log in with the email address you approved from), or contact us at [CONTACT EMAIL]. We will not ask a child to give more information than an activity needs.

9. Everyone's choices

Every member can download a copy of their information and delete their account from Settings in the app.

10. Keeping information safe

Loop uses encrypted connections (HTTPS), stores passwords hashed, keeps uploaded photos and videos where only people allowed to see them can load them, limits who can access the server, and deletes data on the schedule above. No system is perfectly secure; if a breach affecting members' information ever happened, we would tell affected members and parents promptly.

11. Changes to this policy

If we make a material change to how we collect or use children's information, we will email parents first and ask for new consent where the law requires it. The date at the top shows when this policy last changed.

12. Contact

[OPERATOR NAME]
[MAILING ADDRESS]
Email: [CONTACT EMAIL]
Phone: [PHONE NUMBER]