Data safety

What LOOP collects, why, and what never leaves your phone. These are the same answers LOOP gives in Google Play's Data safety form. The privacy policy has the full detail, and it applies if the two ever differ.

At a glance

No accountAn anonymous LOOP ID. No phone number, email or password

Encrypted in transitEverything travels over HTTPS; your location is also end-to-end encrypted

Not shared or soldNo data is shared with third parties or used for advertising

You can delete itFrom the app at once, or by email within 7 days

What LOOP handles

Data	Collected	Shared	Why	Kept
Location (precise and approximate)	Yes, but only in passing (processed ephemerally): sealed on your phone for the person who asked. The server can't read it and never stores it	No	Answering someone you approved	Not stored
Name (the display name you choose)	Yes	No	So people adding you can check it's you	Until you change it or delete your Loop
App activity: who you're connected with, location requests	Yes	No	Delivering requests and respecting your sharing choices	Connections until removed; requests 5 minutes
Device IDs: push token, Firebase installation ID, hashed Loop ID	Yes	No	Waking your phone when someone asks; stopping abuse	Until you delete your Loop
Crash logs and diagnostics	Only if you choose Settings → Send diagnostics	No	Fixing problems	In the email you send

Sending your location to someone at your request isn't "sharing" in Play's sense. Cloudflare (the server) and Google (push delivery) work for LOOP as service providers.

Stays on your phone

Your birthdate, used only to confirm you're 18 or older
Your people, the names you saved them under, and the last location each shared with you
Your privacy log: who saw your location and when
Your keys, protected by Android Keystore
The place name at the top of the map, worked out from map data already on your phone

Never collected

Email address, phone number, address, phone contacts, photos or videos, audio, files, calendar, messages, web history, installed apps, health or fitness data, financial information, advertising ID, and any history of where you've been.

Security

Locations are end-to-end encrypted (P-256 key agreement with AES-256-GCM)
Every request to the server is signed with a key held in your phone's secure hardware, protected against replay, and sent over HTTPS
Data on your phone is encrypted; backups are encrypted with your passphrase and work once
The server stores IDs only as one-way hashes, and network addresses only as keyed hashes

Delete your data

In the app: Settings → Delete my Loop → Delete. This removes your server record and wipes the app. Without the app, email thispc119@gmail.com with the subject "Delete my Loop" and your Loop ID. See Delete your data.