Privacy Policy

Last updated: October 4, 2026

This Privacy Policy describes how Loopdedo ("App", "we", "us", "our") collects, uses, and protects your information. By using Loopdedo, you agree to this policy.

1. Information We Collect

Account Information

Username: chosen by you during registration
Password: securely hashed before storage; we cannot see your password
Recovery email (optional): if you add one, it is used only to send password reset links

User Content

Lists, task items, and sub-items you create
Sharing preferences and collaborator associations

Automatically Collected Information

Authentication tokens stored locally on your device for session management
We do not collect device identifiers, location data, or usage analytics

Crash Reporting

Release builds of the App send crash and error reports to Sentry so we can find and fix problems. Reports include technical details such as device model, operating system version, and app version. They do not include your username, email, list contents, or other personal information.

2. How We Use Your Information

We use your information solely to:

Provide and operate the Loopdedo service
Authenticate you and maintain your session
Enable list sharing with other users you choose to collaborate with
Improve and maintain the service

We do not:

Sell your data to third parties
Use your data for advertising or marketing purposes
Profile your behavior or build advertising profiles
Share your data with third parties except as described in this policy

3. Data Storage and Security

Your data is stored on Supabase, our infrastructure provider. The following security measures are in place:

Encryption at rest: all data is encrypted on disk using AES-256
Encryption in transit: all communication between the App and our servers uses TLS/HTTPS
Row-level security: database policies ensure users can only access their own data and lists shared with them
Authentication tokens: stored in your device's secure Keychain, not in plain text

While we take reasonable measures to protect your data, no system is completely secure. We encourage you to use a strong, unique password for your account.

Important: Loopdedo is not designed for storing sensitive or confidential information. Do not store passwords, financial data, health records, social security numbers, or any other information that would cause harm if disclosed. We accept no responsibility for sensitive information stored in the App.

4. Data Sharing

We share your data only in the following circumstances:

With users you choose: when you share a list, collaborators can see the list name, items, and your username
Infrastructure providers: your data is stored on Supabase (database and authentication). Supabase processes data in accordance with their privacy policy
Legal requirements: we may disclose data if required by law, court order, or governmental regulation

We do not share your data with advertisers, data brokers, or any other third parties.

5. Third-Party Services

Loopdedo uses the following third-party services:

Supabase (database, authentication, real-time sync): supabase.com/privacy
Sentry (crash and error reporting): sentry.io/privacy

We do not integrate with any advertising networks, analytics platforms, or social media tracking tools.

6. Data Retention

We retain your data for as long as your account is active.

Account Deletion

You can delete your account at any time in the App under Settings → Delete Account. Deleting your account permanently removes your profile and all of your data. If you delete your account:

Your profile, lists, task items, and sharing associations will be permanently deleted
Deletion may take up to 30 days to propagate through all backup systems
Data in lists shared with others will be disassociated from your account

7. Your Rights

You have the right to:

Access your data through the App at any time
Correct your data by editing your lists, items, or username
Delete your account and all associated data
Export your data by contacting us at the address below

If you are located in the European Economic Area, you may also have rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

If you are a California resident, you may have rights under the CCPA including the right to know what data we collect and the right to request deletion.

8. Children's Privacy

Loopdedo is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by other reasonable means. The "Last updated" date at the top indicates when the policy was last revised.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@loopdedo.com.