Privacy Policy

Looped In is made by LoopedIn Labs, LLC, a Utah company ("we", "us"). This policy explains what the Looped In app and loopedinapp.io collect, what we do with it, who else handles it, how long we keep it, and the choices you have. If anything here is unclear, email privacy@loopedinapp.io and a person will answer.

1. What we collect

Your account. Your email address, the name you choose, and your sign-in details. If you sign in with Apple or Google, we receive the name and email address you let them share with us. When you sign up we ask for your birthday to confirm you're 13 or older. The check happens on your phone, and we store only that you passed, never the date. What you put in Looped In. Your Loops and everything in them: tasks, events (including any address you type), notes, links, and the files and photos you attach, plus chats, contacts, sign-ups and carpools where those are available. The other members of a Loop can see what's in it, and they can see your name and email address. What you capture. You can add things by pasting text, sharing from another app, taking or choosing a photo, or speaking. Speech is turned into text on your phone and the audio never leaves it. Photos are read for their text on your phone, and only that text is used, the same way as text you paste. AI requests. When you use Cue or Smart Capture, what you ask and the details from your Loops that it needs go to our server and on to OpenAI (section 3). Usage and crash information. Unless you turn it off, the app sends Google's Firebase Analytics a record of which screens and features are used. It's tied to a random ID for your installation of the app, not to your name or email, and includes your approximate city. The app also sends crash reports so we can fix bugs, and keeps a daily summary on your account of which features you used. Device information. A notification token, so we can send the notifications you allow. When you contact support from the app, we include your device model, iOS version, language, time zone and recent app logs so we can help. We don't collect your precise location, don't use Location Services, and don't collect health, financial or biometric information. Face ID is handled by Apple on your phone; we only learn whether it succeeded. Purchases. If you subscribe, Apple takes the payment. Through RevenueCat we learn what you bought and whether your subscription is active. We never see your card details. AI assistants you connect. If you connect an AI assistant, we keep connection details (which assistant it is, which Loops you let it see, when you connected it and when it was last used) and limited, content-free records of its requests and of connection changes. A request record can include the time, the tool, how many items and up to ten Loop identifiers, never the content. These records are not a complete access history.

2. How we use it

• To run Looped In: store and sync your Loops, share them with the people you invite, send the notifications you allow, and answer your support requests. • To provide the AI features you choose to use. • To learn how the app is used and fix problems, through the analytics and crash reports above. • To keep Looped In safe: stop spam and abuse, and protect accounts. • To send the emails described in section 5. We don't sell your personal information, don't use it for advertising, don't show ads, and don't use it to train AI models.

3. AI features

How it works. Cue and Smart Capture send your request, with the details from your Loops that it needs, to our server. Our server passes it to OpenAI and returns the answer. Your phone never contacts OpenAI directly. When a question needs current information, Cue can use OpenAI's web search. OpenAI runs the search, so the websites it reads see OpenAI's request, not your IP address. On supported iPhones, when you're offline or have used the day's allowance of cloud requests, some features run on your phone with Apple Intelligence instead, and then nothing leaves your phone. Cue chat always uses our server. What a Cue request can include. To give a useful answer, a request can include the Loop's recent tasks, events and notes, members' names and replies, contacts' names, phone numbers and email addresses, recent chat messages, and facts from your AI memory. That includes things other members added to a shared Loop. We limit how much is sent with each request. What OpenAI does with it. OpenAI uses the request to produce an answer. Under its API terms it doesn't train its models on what we send, and we tell it not to store requests. It may keep them for up to 30 days to check for abuse, then deletes them unless the law requires otherwise. Your AI memory and Cue conversations. Cue's memory keeps facts you share, such as preferences, names and routines, so its help gets more personal. Your saved Cue conversations and memory are stored in our cloud encrypted with a key kept in your iPhone's Keychain, which syncs through iCloud Keychain if you use it. Without that key, the stored copies can't be read, including by us. The exception is memory last saved before April 21, 2026, which used an older key our server could work out; the app moves it to your Keychain key the next time Cue saves your memory. On your phone they're protected by iOS's own encryption. To answer you, Cue does have to read your message, so it passes through our server to OpenAI as ordinary text. Cue also keeps a private record of your habits on your account, for example which days you usually add things to which Loop, so it can make suggestions; that record isn't encrypted with your Keychain key. Only you can see your memory and your Cue conversations. You can view, edit, pause or delete memory in Settings → AI. Turning AI off. In Settings → AI you can turn off all AI features or individual ones. When AI is off, Looped In's own AI features send nothing you do to an AI service. Assistant connections are separate: see "Connecting an AI assistant" below. Anything you've added to a shared Loop can still be included when another member of that Loop asks Cue a question. AI can get things wrong. Check anything important before you rely on it. Connecting an AI assistant (optional). You can connect an AI assistant you already use, such as ChatGPT or Claude, so it can see the Loops you choose and suggest new events, tasks and notes. You approve each connection in Looped In, in the app or on a Looped In web page, and pick the Loops. The other members of a Loop you pick can see that you connected an assistant to it. Settings → AI doesn't control this: turning Cue off doesn't stop a connected assistant. When the assistant asks, our server sends it each chosen Loop's name, type and number of members, your role in it, and the events, tasks and notes you added, including events from calendars you subscribed the Loop to. Items other members added are sent only if they turned on "Let members' assistants include what I add", which is off unless they turn it on. Sharing follows who first added an item: a task or note you added can be sent even if another member edited it. An event is left out if its last editor is another person who hasn't turned that setting on. A task assigned to another person who hasn't turned it on shows "another member" instead of their name. In a Loop where you're the only member, older items with no recorded creator may also be sent. The assistant's company, or whoever runs the app you connect, then handles the information under its own terms, and we can't take it back from its chat history or memory. An app we can't verify, such as one on your own computer, may have no privacy policy and may keep or share what it receives. An assistant can only suggest. Nothing it suggests is added until you tap Add in Looped In, and it can't change or delete anything. It never receives chats, files, photos, contacts, sign-ups, carpools, your Cue conversations or memory, or anything you've deleted. A Loop's owner can turn assistant access off for that Loop. You can disconnect an assistant at any time. Connecting an assistant is free in Looped In; your assistant's own plan and price are set by its company.

4. Who else handles your information

We use these companies to run Looped In. Each is bound by an agreement to protect your information at least as well as this policy does, and to use it only to provide its service to us. • Google (Firebase and Google Cloud): sign-in, our database, file storage, notifications, analytics and crash reports, and the servers our code runs on. Our email inbox is also hosted by Google, and Gmail sends our emails, so Google receives the recipient's address and the message. • OpenAI: the AI features in section 3, and the in-app help assistant. • Apple: Sign in with Apple, notifications, App Store purchases, on-device AI, and place suggestions when you type an address (Apple Maps). • RevenueCat: keeps track of your subscription. It receives your purchase details from Apple and your Looped In account ID, a random code rather than your name or email. • Cloudflare: hosts loopedinapp.io and the public sign-up and carpool pages, forwards email sent to our addresses, and counts website visits without cookies. • Google Calendar and Gmail, only if you connect them (section 6). Separately, an AI assistant you choose to connect (for example OpenAI's ChatGPT or Anthropic's Claude, or an app on your computer or phone) receives the information described in section 3, only after you approve the connection and only for the Loops you pick. Its company or operator, not Looped In, controls what happens to that information. When a Loop contains a link, your phone fetches the page to show a preview, so that website sees your IP address, as it would if you opened the link. When you give Smart Capture a link, or include one in a message to Cue, our server fetches the page instead, so the website sees our server's IP address rather than yours, and the page's contents are treated like text you paste. If you subscribe a Loop to a calendar link, our server checks that calendar regularly and keeps the Loop's copy of its events up to date, so the calendar's website sees our server's IP address, not yours. We may also disclose information when the law requires it, to protect someone's safety or rights, or as part of a merger or sale of the company, in which case we'll tell you first. Our website sets no advertising or analytics cookies and doesn't track you across other websites.

5. Emails from us

We send the emails you need to use Looped In: sign-in and security messages, replies to your support requests, and confirmations for sign-ups you join. If a Loop owner adds your address to that Loop's weekly update, we send you the weekly summary until they remove you or you use the unsubscribe link in it, which takes effect straight away. We don't send marketing emails. If we ever do, we'll send them only to people who choose to receive them, and every one will have an unsubscribe link.

6. Google Calendar and Gmail

Google Calendar (optional). If you connect Google Calendar, Google asks you to let Looped In see and change your Google calendars. We use that to add, update and remove the events you choose to export, and to read the connected calendar so those events stay in step. If change notifications are set up for a calendar, Google tells our server that something changed, without any event details, and our server tells your phone to check. To disconnect, go to Settings → Connected Accounts; that also ends Looped In's access at Google. You can also remove Looped In's access at any time at myaccount.google.com/permissions. Gmail (paused). Version 1.0 let you connect Gmail so Cue could find events and tasks in your email. If you connected it while you had Plus or free access, the app read your 20 newest inbox emails each time you opened it and sent their text through our server to OpenAI to look for dates and to-dos. Version 1.0.1 paused Gmail import: from that version on, the app doesn't offer Gmail or read your email, even if you connected it before. If you did, you can end the access you gave: disconnect Google in Settings → Connected Accounts, which also ends it at Google, or remove Looped In at myaccount.google.com/permissions. Looped In's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your iPhone calendar. If you allow it, the app adds the events you export, checks your calendars so it doesn't add an event twice, and lists your upcoming events when you choose some to import into a Loop. Those reads happen on your phone. Events you import become part of the Loop, like anything else you add.

7. Where your information lives and how we protect it

Your information is stored in the United States, mainly in Google Cloud data centers in Utah, Oregon and Iowa. It travels between the app and our servers encrypted, and Google encrypts it where it's stored. Access is limited to the people each Loop is shared with, our secret keys stay on our servers, and your Google sign-in is kept in your iPhone's Keychain. No system is perfectly secure, so we can't promise that nothing will ever go wrong. If a breach affects your personal information, we'll tell you and the authorities that need to know, as the law requires, including what happened and what we're doing about it. We keep a record of every breach.

8. Your choices

• Analytics and crash reports: Settings → Privacy & Security → Share Analytics & Crash Reports. • AI: Settings → AI, all at once or feature by feature. • Notifications: in Settings or in your iPhone's Settings app. • Emails: the unsubscribe link in any weekly update. • A copy of your data: Settings → Privacy & Security → Export My Data gives you a file with your account, Loops, memory and AI usage. Your saved Cue conversations, private Loops and attached files aren't in that file yet; email privacy@loopedinapp.io and we'll send them within 30 days. The file also includes your connected assistants, suggestions still waiting, and a limited, content-free extract of your assistants' request and connection-change records from the last 90 days. It marks any section that was cut short or unavailable; for anything missing, write to privacy@loopedinapp.io. • Your content: you can delete what you added. Leaving a Loop removes your access but doesn't delete what you shared there. • Your account: see section 10. • AI assistants: Settings → Connected assistants shows what's connected and lets you disconnect. A Loop's owner can turn assistant access off in that Loop's settings. • Other members' AI assistants: In Settings → Connected assistants, "Let members' assistants include what I add" decides whether what you add to shared Loops can be sent to assistants other members connect. It's off unless you turn it on. Section 3 explains what is sent either way.

9. How long we keep information

• Your account and what you've added: while your account exists • Things you delete: 30 days, so they can be restored, then erased • Backup copies: kept 90 days, then erased • Server logs, which include IP addresses: 30 days • Spam-check records (a scrambled form of the IP address): 7 days • Crash reports in Firebase: 90 days • Usage data in Google Analytics: detailed events 2 months; the installation's random ID 14 months after that installation was last used • Our copies of analytics and crash data: 14 months • Public sign-up and carpool pages: erased one year after they were last used • Feedback sent from our website: 2 years • Purchase records, and security records such as a report you filed: 3 years • Connections to AI assistants: while connected, and 30 days after the connection ends • The note other members see that you connected an assistant to a Loop: while connected, and 30 days after the connection ends • Content-free records of assistant requests and connection changes: 90 days • Suggestions an assistant made: offered for up to 14 days, then scheduled for erasure 30 days after we mark them expired or you add or dismiss them • A connection request that was started but not finished: erased 7 days after it expires • Erasure runs automatically and normally finishes within about a day of these dates. You can restore a deleted Loop yourself in Settings → Data → Recently Deleted. For anything else you deleted, email support@loopedinapp.io within 30 days.

10. Deleting your account

You can delete your account in Settings. When you do, we immediately erase your login, profile, settings, AI memory and Cue conversations, and we tell Apple and Google to end Looped In's access if you used them to sign in or connected them, and we end every AI assistant connection as deletion begins and erase the records linked to your account. Content-free request records that don't carry your account ID may remain for up to 90 days. Loops that only you belong to are kept for 30 days in case you change your mind, then erased. What you added to Loops shared with other people stays there for them, with your name removed, and we remove the children's names you added to carpools other people still use. Backup copies are kept 90 days, then erased, and we keep purchase and security records for 3 years. Deleting your account doesn't cancel an App Store subscription; cancel it in your Apple ID settings.

11. Children

Looped In is for adults and teens aged 13 and over to organize their own lives, including activities that involve children. It isn't directed at children under 13, and we don't knowingly let a child under 13 create an account; if our age check shows someone is under 13, we remove the new account straight away. Teens aged 13 to 17 may use Looped In only with a parent's or guardian's permission. Family coordination. Some features let an adult add a little information about a child, such as a first name, to organize carpools, sports or events. The adult, not the child, is using the app. We use a child's name only to run that feature. We never sell it, never use it for advertising, and never use it to build profiles. If you share a sign-up or carpool by web link, anyone with the link can see what you included, so share links only with people you trust. Public carpool pages don't show children's names. Please don't enter sensitive information about any child, such as health, medical, allergy or disability details; Looped In isn't built for it. When you delete a carpool or sign-up, the children's names in it go with it. When you delete your account, we remove the children's names you added to carpools other people still use. If you believe a child under 13 has given us personal information, email privacy@loopedinapp.io and we'll delete it promptly.

12. People who don't have an account

Sign-ups and carpools. If you open a sign-up or carpool link and submit your name, email address, phone number or answers, we store them to run that sign-up or carpool. The organizer and the other members of that Loop can see everything you submit, and the public page shows first names unless the organizer turns that off. We send you confirmations for what you signed up for, and never marketing. If you cancel, your entry is marked cancelled and erased along with the sign-up. To stop spam, we keep a scrambled form of the visitor's IP address for 7 days. The page and your entry are erased one year after the page was last used. Weekly Loop updates. A Loop owner can add your email address so you get a weekly summary of that Loop's events and tasks. The Loop's members can see that your address is on the list. Every update has a link to stop them. Contacts. A Loop member can save your name, phone number and email address as a contact in their Loop. The members of that Loop can see it, and it can be included when they ask Cue a question (section 3). Our website email list. If you give us your email address on loopedinapp.io to hear about new features, we store the address and the date you signed up, and use it only for those emails, a few times a year at most. Every email has an unsubscribe link. We keep your address until you unsubscribe or ask us to delete it. To see or delete information you gave us in any of these ways, email privacy@loopedinapp.io and tell us which sign-up, Loop or list it's in.

13. Your privacy rights

Wherever you live, you can ask us to tell you what personal information we have about you, give you a copy, correct it, or delete it. We don't sell personal information or share it for targeted advertising, so there's nothing to opt out of; this is also our answer to any request not to sell. We won't treat you differently for asking. Email privacy@loopedinapp.io. We'll confirm the request is really from you and answer within 30 days. Someone you authorize can make a request for you. We don't ask for sensitive information such as health, religious or financial details. If you type something sensitive into a Loop, we treat it like the rest of your content: we use it only to run the app, never for advertising, and never to train AI models. We don't track you across other companies' websites or apps, or let anyone else do so through Looped In, so we don't change anything in response to a browser's Do Not Track signal.

14. If you live in Canada

You can ask to see or correct the personal information we hold about you, and we'll answer within 30 days. Our privacy officer is responsible for how we handle personal information and can be reached at privacy@loopedinapp.io. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Your information is stored in the United States and may be accessible to US authorities under US law.

15. Where Looped In is offered

Looped In is offered in the United States and Canada. If you use it from somewhere else, your information is still stored and processed in the United States.

16. Changes to this policy

When we change this policy in a way that matters, we'll tell you in the app, and the date at the top will change. We keep the previous version public: the link under the date opens it.

17. Contact us

LoopedIn Labs, LLC Privacy questions and requests: privacy@loopedinapp.io Everything else: support@loopedinapp.io

If you're using version 1.0

Until you update to the latest version: • The Share Analytics & Crash Reports switch doesn't stop the daily feature summary kept on your account. • Memory facts you delete in version 1.0 stay stored, encrypted, until you tap Clear All AI Memory (Settings → AI) in the latest version, or delete your account. • Disconnecting Google removes access on your phone but doesn't end it at Google; remove it at myaccount.google.com/permissions. • Gmail import still works the way section 6 describes for version 1.0.