Privacy Policy

1. Account and profile information

When you sign in with Apple, LoopIn stores an account identifier from Apple, a session token on your device, and the display name you choose. If you add a profile photo, that image is stored on your device so your avatar can show the picture instead of an initial — profile photos are not uploaded to LoopIn’s servers. Account information is stored on LoopIn’s servers (currently hosted on Cloudflare) so you can use the same account on a new device and so friends can join your loops.

2. Browser guest replies

If you reply to an invite in a web browser without installing the app, LoopIn stores the name you enter, your In / Maybe / Out reply, any quick-vote choice you make, anything you add to or claim on the loop’s “Who’s bringing what” list, and a guest cookie on your device so you can change these later. Your name, reply, vote, and claimed items are visible to other members of the loop. You don’t need an account to reply as a guest.

If you ask for a reminder by email, LoopIn stores that email address with the loop and first sends one email asking you to confirm. After you confirm, you get one email on the morning of each week you haven’t said you’re out, and every email has a link to stop them. Your email address isn’t shown to the host or other members, and it isn’t used for anything else.

3. Display names and loop visibility

Your display name is visible to other members of loops you join or host. LoopIn does not publish a public profile directory or usernames for people outside those loops.

4. Contacts and invitations

LoopIn does not access your device’s contacts or address book. The way to loop someone in is an invite link. Anyone who opens a link you share may see the loop name and be able to reply In, Maybe, or Out in the browser, so treat invite links like you would a private calendar invite.

5. Location data

LoopIn does not request your device’s location and does not show a map of people or events based on where you are. You may type a place name for a loop (for example a park, a path, or someone’s kitchen); that text is stored with the loop and shown to its members, and may be used to show a static map preview and directions for that place.

6. Place names and meeting details

Place, time, weekday, and optional one-week overrides are stored so members can see when and where you plan to meet. These details are visible to people in that loop. They are not listed on any public or discoverable map. Precise meeting details should only be shared in loops with people you trust.

7. RSVP and attendance information

LoopIn stores In, Maybe, Out, and waiting replies, when each reply last changed, optional notes, and who is hosting for each week’s occurrence. It also stores the week’s “Who’s bringing what” list and any quick vote the host starts, including which option each person picked. Other members of that loop can see this so the group knows who’s in. Past weeks may be kept in the app’s history for that loop, and LoopIn Plus can show turnout stats built from those past replies. This is not a public attendance scoreboard, and LoopIn doesn’t record who actually showed up.

8. Reporting, blocking, and moderation

If you report another member, LoopIn stores the report — including the reported member, the loop it relates to, and any details you provide — so it can be reviewed and acted on. Reports are visible to the loop’s host and to us; they are not shown to other members. You can block a member so you no longer see their activity, and a host can remove a member from a loop or reset a loop’s invite code if it’s been shared too widely. LoopIn has zero tolerance for harassment, threats, or abusive behavior — we review reports and take action, up to and including removing content, removing a member, or terminating an account.

9. Health and activity data

LoopIn does not connect to Apple Health and does not collect heart rate, steps, weight, or similar health metrics. A loop named “Gym” or “Run club” is just a label you type — it isn’t linked to any health data.

10. Device and usage information

To send reminders and keep the app reliable, LoopIn stores a push notification token and the minimum device identifiers needed to deliver notifications and sync loops. If you allow Live Activities, LoopIn also stores a token so this week’s count can update on your Lock Screen. Optional Home Screen widgets read a small amount of this week’s loop summary from an App Group on your device, and your sign-in is shared with LoopIn’s widget on the same device so you can reply from a widget, a notification, or Siri. When you reply with Siri or Shortcuts, Apple handles the request; LoopIn receives only your reply.

11. Analytics

LoopIn does not use a third-party analytics platform and does not track your activity across other companies’ apps or websites.

12. Crash reports

LoopIn does not use a crash-reporting SDK and does not itself collect crash or diagnostic data. If you’ve enabled “Share With App Developers” in iOS Settings, Apple may separately share anonymized crash and diagnostic reports with us through Apple’s own service, handled under Apple’s diagnostic-sharing terms rather than collected by LoopIn directly.

13. App-store purchases

LoopIn Plus, where offered, is billed by the Apple App Store. Apple processes payment directly; LoopIn does not receive or store your payment details or purchase history. Plus unlocks hosting unlimited loops, Apple Calendar sync, past weeks, turnout stats, and holiday skips, as shown in the app at the time of purchase.

14. Private loops versus public listings

Loops are private to invited members. LoopIn does not operate a public directory or marketplace of loops. Invite links are the main way someone new can see a loop — share them carefully. Sample loops shown before you create your own are local illustrations, not other people’s real plans.

15. Data sharing

We do not sell your personal information. Loop members see the names, RSVPs, notes, votes, bring-list items, and place details for that loop; reports you file are seen only by the relevant host and by us. We share data with the service providers listed below only as needed to run LoopIn, comply with law, or protect users. A support email you send to us is read by the people handling that inbox.

16. Third-party services

LoopIn uses Apple for Sign in with Apple, push notifications, Live Activities, Siri and Shortcuts, App Store billing, and optional Calendar and Maps. LoopIn uses Cloudflare to host this website, the API, and the database that stores accounts, loops, RSVPs, and device tokens, and to send reminder emails to browser guests who ask for them. Those providers process data under their own privacy terms.

17. Data retention

We keep account, loop, RSVP, and report data for as long as your account is active so the group can see this week and recent history, and so reports can be reviewed. If you delete your account, we remove or disconnect your user record and memberships from LoopIn’s servers. Backups and logs may take a short additional period to expire. Data already shown to other members (for example a past RSVP in a shared week) may remain visible in their history until that occurrence ages out. A browser guest’s reminder email address is deleted when they use the stop link, when they’re removed from the loop, or when the loop is deleted.

18. Data security

We use HTTPS, signed sessions, and Cloudflare’s platform controls to protect data in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

19. Your choices and permissions

You control Calendar and notification permissions in iOS Settings. Turning off a permission may limit related features, such as adding this week to Calendar or receiving a reminder if you have not replied. You can change an RSVP, leave a loop, block or report a member, or skip a date from the app. Browser replies can be changed from the same invite link on the same device, and email reminders can be stopped from the link in any reminder.

20. Account deletion

You can delete your LoopIn account from in-app settings, or by emailing [email protected]. Deleting the app from your device removes local data on that device; it does not delete your server account until you request deletion.

21. Children’s privacy

LoopIn is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

22. International processing

LoopIn’s servers and Apple’s services may process information in a country other than where you live. If you have questions about regional privacy rights, email [email protected].

23. Policy updates

We may update this policy as LoopIn’s features change. Material changes will be reflected by updating the “last updated” date above, and where appropriate we will notify users in the app.

24. Contact information

Privacy questions can be sent to [email protected].