Loop

Privacy Policy

Last updated 4 November 2026

Loop helps you track subscriptions and share plans with people you choose. This policy explains what data Loop handles and why. Loop is operated by Luis Pedro Rodrigues (Portugal), the data controller. Contact: alturagroup.hq@gmail.com.

Without an account

You can explore Loop with a sample space that stays on your device. Nothing from it is uploaded.

When you sign in

You sign in with Apple or Google through Google Firebase Authentication. Loop receives your account ID, name and email address (with Sign in with Apple you may choose a private relay email). We use these only to run your account and let people you share with recognise you.

What Loop stores

• Your subscriptions: names, prices, billing dates, categories, notes and payment-method labels you enter.
• People you add: names, and an email address if you add one to invite them.
• Shared plans: the plan details, each person's share, whether they accepted, and "I've paid" / "Confirmed" marks. These are visible to the plan's owner and the invited person. The invited person also sees the owner's sign-in email, so they know who the plan is really from.
• Your own payment marks for your bills, and the billing dates you record as received from people you track yourself.
• Profile photo (optional): a small picture you choose. It is stored in your account and copied onto plans you share, so only the people on those plans can see it. There is no public profile or directory.
• Usage statistics: a small summary of counts and totals (how many plans and shared plans you have, the total monthly amount per currency, whether you use Loop Plus, the app version, device type and colour theme). It contains no plan names, contacts, notes or email address, and is used only to understand how Loop is used and to improve it. Only Loop's operator can read these summaries.
• Loop Plus grants: if we give you Loop Plus, a record with your sign-in email, the grant date and its end date.
• Blocks and reports: if you block someone, a record with your email and theirs, so they can't share plans with you again. If you report a plan, the report holds your account ID, the plan's name, its owner's name and account ID, and the reason. Only Loop's operator can read reports, and the person reported never sees who reported them.
• Abuse limits: to stop spam, Loop counts how many new plan invitations (and, if enabled, invitation emails) your sign-in email sends each day, and remembers who it has already emailed an invitation to.

This data is stored in Google Cloud Firestore, protected by access rules so only you, and the people on a plan you share, can read it.

What stays on your device

• Screenshot and file import: text is recognised on your device; images and files are not uploaded.
• Calendar: if you connect a calendar, or let Loop create a "Loop Subscriptions" calendar, Loop writes renewal events on your device (and to the calendar account it belongs to, such as iCloud). Calendar contents are not uploaded to Loop.
• Contacts: if you pick a friend from Contacts, iOS shares only that one person's name, email and photo with Loop. Loop never reads your address book, and a contact's photo stays on your device.
• Offline copy: Loop keeps a copy of your account's data on your device, protected by iOS data protection, so it works without a connection and syncs your changes later. Signing out removes it.
• Reminders and notifications are scheduled on your device.
• Preferences, widget data and logo caches.

Logos

To show a logo for a subscription name, Loop may send that name (never your account details) to Apple's public App Store search and download the matching app icon.

Purchases

Loop Plus is sold through Apple's App Store. Apple processes payment; we receive no card details. Purchase status is checked with Apple to unlock features. RevenueCat receives purchase receipts and an anonymous or account ID so we can manage subscriptions and see subscription metrics.

What we don't do

No advertising, no tracking across apps or websites, no selling or renting of data, and no contact-book upload.

Retention and deletion

Your data is kept while your account exists. Delete it anytime in Loop: Settings → Account & privacy → Delete Loop account. This also removes your profile photo and usage summary, and clears the copy stored on your device. Plans you shared are removed for everyone on them; the other person may keep their own copy. From plans you joined, you are removed as a member and your photo is taken off, while the owner keeps their own record of the plan. Blocks you made are removed. Reports you sent stay until they are reviewed. The abuse-limit records (your daily invitation count, and a scrambled record of who you emailed an invitation to) are kept after deletion when needed, so the limits can't be reset by deleting your account and signing up again.

Your rights

Under the GDPR and similar laws you can access, correct, export or delete your data, and object to or restrict processing. Email us and we'll respond within 30 days. You can also complain to your local data protection authority (in Portugal, the CNPD).

Children

Loop is not directed at children under 13 and we do not knowingly collect their data.

Service providers

Google Firebase (authentication and database), Apple (sign-in, purchases, logos) and RevenueCat (subscription management). They process data on our behalf under their own terms.

Changes

We'll update this page if Loop's data practices change, and change the date above.