Your privacy matters to us. This policy explains what data Looopr collects, why we collect it, and how you can control it. We follow the EU General Data Protection Regulation (GDPR) and store all data in the European Union.
1. What We Collect
When you create a Looopr account, we collect:
- Display name — provided by your sign-in provider (Apple or Google) or set by you
- Email address — provided by your sign-in provider
When you use the app, we store:
- Saved routes — routes you bookmark for later
- Walk sessions — distance, duration, steps, elevation, food stop check-ins, and feedback for completed walks
- Photos — walk photos are stored locally on your device, not on our servers
We use your device location during route generation and active walk navigation. Your exact location is used on your device and sent to our routing providers only to calculate routes; we do not store your exact location or your GPS track on our servers.
App usage data. To understand how Looopr is used and to find and fix problems, the app records simple usage events — for example that a route search started, how long it took, whether it found routes, or that a walk was completed. Each event carries a random app installation ID and, if you are signed in, your account ID. For route searches we also record the approximate starting point, rounded to about 1 km (two decimal places), so we can see in which areas route search fails. This approximate location cannot pinpoint your home or a specific address. Usage data is never used for advertising and is not shared with third parties.
2. Why We Collect It
We process your data to provide the Looopr service under the legal basis of contract performance (GDPR Art. 6(1)(b)). Specifically:
- Your name and email identify your account
- Saved routes and walk history let you access your data across sessions
- Location is required to generate nearby routes and provide navigation
We process app usage data, including the approximate search location, on the basis of our legitimate interest (GDPR Art. 6(1)(f)) in keeping the app working and improving it. You can object to this at any time by contacting us.
We do not sell your data, use it for advertising, or share it with third parties for marketing.
3. Third-Party Services
Looopr uses the following third-party services to function:
- Supabase (EU, Frankfurt) — authentication and database hosting
- Google Places API — point-of-interest discovery and details
- Apple Sign In / Google Sign In — authentication providers
- Mapbox — route generation and turn-by-turn directions (receives the route start point and waypoints)
- Apple MapKit — route generation and map display
- RevenueCat — subscription and in-app purchase management
- Sentry — crash and error diagnostics reporting
Each of these services has its own privacy policy. We only send the minimum data required for each service to function.
4. Where Your Data Is Stored
All account data (profile, routes, walk sessions) is stored on Supabase servers in Frankfurt, Germany (EU). Photos remain on your device only.
5. Your Rights (GDPR)
As an EU resident, you have the right to:
- Access — request a copy of all your data (available in-app under Settings → Privacy & Data → Export My Data)
- Rectification — update your display name in Settings
- Erasure — permanently delete your account and all associated data (available in-app under Settings → Privacy & Data → Delete My Account)
- Portability — export your data as a JSON file
- Object / Restrict — contact us to restrict processing
When you delete your account, all data is permanently removed from our servers, including your profile, saved routes, walk sessions, and shared routes. This action cannot be undone.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, all data is removed immediately, including the app usage events linked to your account. We do not keep backups of deleted accounts.
App usage events are deleted automatically after 24 months.
7. Website, Cookies and Analytics
The Looopr website (looopr.app) does not use cookies. To count visits we use Umami (hosted in the EU), a privacy-friendly analytics tool that stores no cookies and no personal data: it records pages viewed, the referring site, and general device, browser and country information, without identifying you. No third-party scripts are loaded for advertising or behavioural tracking.
8. Children
Looopr is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance.
10. Contact
For any privacy-related questions or to exercise your rights, contact us at:
Email: privacy@looopr.app