Privacy policy
Draft pending legal review. This is not legal advice and must not be published without review.
1. Who is responsible
Data controller: [NAME OR COMPANY NAME], tax ID [TAX ID], address [POSTAL ADDRESS]. Contact: hola@loopita.app.
2. What data we process and why
2.1 Data that stays on your device
Your progress (games, streaks, loopies, experience, achievements, quests, Loopita's state and your settings) is stored only on your device. We do not receive it or send it to any server. Creating an account is optional: [UPDATE when accounts launch: what data is stored (Google or Apple account, progress, results), why, legal basis, Firebase provider in the EU, retention and how to delete the account].
2.2 Ads
Loopita shows ads from Google AdMob. To do so, Google may process device identifiers (such as the advertising ID), your approximate IP address and app usage data in order to serve and measure ads and prevent fraud. In the European Economic Area and the United Kingdom we ask for your consent before showing personalised ads; on iOS we also request Apple's tracking permission. If you don't consent, you will see non-personalised ads. You can change your choice at any time under Settings → Ad privacy options or in your phone settings.
2.3 Notifications
If you turn on the daily reminder, the notification is scheduled on your device. We use no notification servers and collect no data for it. You can turn it off at any time.
2.4 Analytics, crash reports and purchases
Anonymous analytics and crash reports (only if you allow it). Loopita uses Firebase Analytics and Firebase Crashlytics (Google) to understand how the app is used (for example, which games are played or how many days in a row you come back) and to detect errors and crashes. This collection is off by default: it only turns on if you accept "Help improve Loopita" (we ask once after your first challenge) and you can turn it off at any time in Settings. If you accept, Google receives usage events with no personal data, an app installation identifier and technical device data (model, system version, language, approximate country). We do not use this data for personalised advertising.
Remote settings. To adjust ad frequency without updating the app, Loopita downloads parameters from Firebase Remote Config. For this, Google may receive an app installation identifier and basic technical data, even if analytics is off.
Purchases. Loopita currently offers no purchases. [UPDATE this section before enabling purchases or the Pro subscription: what data, why, legal basis and provider (Google Play / App Store)].
2.5 Website waitlist
If you join the waitlist on this website, we process your email address only to tell you about the app launch and the open test. We keep it until the app launches and delete it afterwards, or sooner if you ask. For this we use Cloudflare, Inc. as a processor (it hosts this website and stores the emails), with appropriate safeguards for international data transfers.
3. Legal basis
- Consent (GDPR art. 6.1.a): personalised ads, access to device identifiers and the waitlist.
- Legitimate interest (GDPR art. 6.1.f): showing non-personalised ads, measuring their performance and preventing fraud.
- Performance of the service (GDPR art. 6.1.b): making the app work on your device.
4. Who we share data with
- Google Ireland Ltd. / Google LLC (Firebase), for analytics and crash reports (if you allow them) and remote settings.
- Google Ireland Ltd. / Google LLC (AdMob), to show and measure ads. See their privacy policy and how Google uses data from partner apps.
- Google Play / Apple App Store, when you download the app (under their own terms).
We do not sell your data.
5. International transfers
Google may process data outside the European Economic Area (for example, in the US) with appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
6. How long we keep data
App data is kept on your device until you uninstall the app or clear its data. Data processed by Google or other third parties follows their own retention periods.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to hola@loopita.app. If you do not use an account, we do not hold your progress data and cannot access or delete it: it is removed by uninstalling the app. For data processed by Google, use the controls in your Google account and phone. If you believe your rights are not respected you may complain to your supervisory authority ([e.g. your national data protection authority]).
8. Children
Loopita is not directed at children under 13 and does not knowingly collect their data. If the minimum age to consent to data processing in your country is higher (14 in Spain), you need your parents' or guardians' permission.
9. Security
Because progress is stored only on your device, the risk is limited to the device itself. The third parties mentioned apply their own security measures.
10. Changes to this policy
If we change how we process data (for example, by adding analytics or purchases), we will update this policy and, where necessary, notify you in the app.
11. Contact
For any privacy question: hola@loopita.app.