Privacy Policy

Our Commitment

LoopShift is built on a fundamental principle: your habit data is deeply personal, and it should stay under your control. We designed our app from the ground up to minimize data collection and maximize your privacy.

Data Storage

Personal Habit Data (Local Only)

All personal habit data — including habits, logs, urge events, check-in sessions, triggers, context notes, and rescue plans — is stored locally on your device using SQLite. This data never leaves your phone and is never transmitted to our servers or any third party.

Cloud Data (When You Create an Account)

Creating an account is optional and only required for group features and Pro subscription management. If you create an account, we collect and store the following data on our servers:

• Email address — for authentication and account recovery
• Display name — shown to other members in your groups
• Group data — group memberships, group habit definitions, and automaticity scores for group leaderboards
• Group timeline events — privacy-safe activity entries (e.g., “completed”, “resisted”) visible to group members. These never include triggers, context notes, or personal reflections.
• Subscription status — whether you have an active Pro subscription (managed via RevenueCat)

What we never collect: personal habit details, activity logs, urge intensities, trigger descriptions, context notes, coach messages, or any other sensitive habit data. Even when using group features, only your automaticity score and privacy-safe outcomes are shared — group members never see your personal activity data.

Legal Basis for Processing

We process your data under the following legal bases (GDPR Art. 6):

• Contract performance: account creation, authentication, group features, and subscription management
• Consent: you choose to create an account and join groups. You can withdraw consent at any time by deleting your account.
• Legitimate interest: maintaining service security and preventing abuse

Third-Party Processors

We use the following third-party services to operate LoopShift. Each processes only the minimum data necessary:

We do not sell, share, or provide your data to any other third parties.

No Cloud AI Processing

LoopShift's coaching system is entirely rule-based and runs locally on your device. We do not use cloud-based artificial intelligence or large language models to process your personal data. This is a deliberate design choice: many users track sensitive habits related to compulsions and personal struggles, and this data should never be processed by external AI systems.

No Third-Party Analytics or Ad Tracking

LoopShift does not include any third-party analytics SDKs, advertising frameworks, or tracking pixels. We do not track your behavior within the app for marketing purposes. We do not sell, share, or monetize your data in any way.

Data Retention

• Local data: stored on your device indefinitely until you uninstall the app or delete it manually.
• Cloud account data: retained while your account is active. Permanently deleted when you delete your account (see below).
• Group timeline events: retained while the group exists. If you delete your account, your display name in past timeline events is cleared.
• Payment records: retained by Apple/Google and RevenueCat per their respective policies. We do not control these records.

Your Rights

Under GDPR, CCPA, and similar regulations, you have the following rights:

• Right to access: you can view all your cloud data through the app (group memberships, scores, timeline events). Local data is already on your device.
• Right to data portability: you can export all your local data in JSON or CSV format at any time from the app's Profile screen. This is available to all users, free and Pro.
• Right to erasure: you can permanently delete your account and all associated cloud data directly from the app (Profile → Account → Delete my account). This removes all Supabase data including group memberships, scores, score history, timeline events, and tracking records, deletes your authentication record, and wipes local data. This action is irreversible.
• Right to rectification: you can update your display name and email through your account settings.
• Right to withdraw consent: you can delete your account at any time, which removes all cloud data.

To exercise any of these rights, use the in-app tools or contact us at privacy@loopshift.app.

Payment Processing

Pro subscriptions are managed through RevenueCat, which interfaces with the Apple App Store and Google Play Store. Payment information is handled entirely by Apple and Google — we never see or store your credit card details. RevenueCat receives your email address and purchase history to verify subscription status.

Data Security

Local data is protected by your device's built-in security (passcode, biometrics, encryption). Cloud data stored in Supabase uses Row Level Security (RLS) policies to ensure you can only access your own data and data from groups you belong to. All data in transit uses TLS encryption.

Children's Privacy

LoopShift is not directed at children under 16 (or under 13 in jurisdictions where that is the applicable age). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

International Transfers

Our servers (Supabase) may be located outside your country of residence. By using the cloud features of LoopShift, you consent to the transfer of your data to these servers. We ensure appropriate safeguards are in place for international data transfers.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy within the app and on this page. Your continued use of the app after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or your data, please contact us at privacy@loopshift.app.