Privacy Policy

Unloop is a social app with a daily time allowance, gentle pause activities and a private gratitude journal. When this policy says “we”, it means the team that operates Unloop. We are the data controller for the information described below. You can reach us through the support link in Settings.

Everything below is collected because a feature you use needs it. Nothing is collected for advertising.

• Account and sign-in data — your email address, a securely hashed password (or a token from Google, Apple or Microsoft if you use social sign-in), and the timestamps of your sign-ups and sign-ins. Purpose: to create your account and keep you signed in.
• Profile data — your display name, username, avatar, bio and interest tags. This is visible to other signed-in people, because that is the point of a profile.
• First name, last name, age and gender — collected once at sign-up and kept private. Age confirms you meet our 16+ minimum; age and gender together let us understand, in aggregate only, who Unloop is reaching. Neither is shown on your profile or shared with anyone.
• Posts, comments, loops and follows — the text, hashtags, @mentions and images you publish, who you follow, and which posts and stories you have looped. Visible to other signed-in people, as you would expect.
• Stories — images and captions you share, which expire and are deleted 24 hours after posting.
• Direct messages — the content of your messages, who they are between, and when they were sent. See the section on message privacy below.
• Gratitude journal — your mood selections and written reflections. Treated as a special, elevated category. See the dedicated section below.
• Usage and attention telemetry — seconds used per day, your chosen daily allowance, whether you have seen the halfway and time's-up nudges, and which mindful activities you completed and for how long. Purpose: to run the time allowance and show you your own attention statistics. It is yours; we do not sell or share it.
• Images you upload — stored in our media storage. Every image is re-encoded in your browser before it is uploaded, which removes embedded EXIF metadata such as GPS location, camera model and capture time. We do not receive that metadata.
• Notifications — records of loops, follows, comments, replies and mentions relating to you, so we can show you your notifications feed.
• Technical logs — our hosting and backend providers record IP addresses, browser/device type and request timestamps for security, abuse prevention and debugging. We do not use these to build a profile of you.
• Username history — a short log of username changes, used only to enforce the limit of three changes per 30 days.

We hold ourselves to these rules, without exception:

• Journal content is never shown to any other user. There is no sharing feature, and no setting can make an entry public.
• Journal content is never sent to an AI or machine-learning model of any kind.
• Journal content is never used for recommendations, ranking, discovery, trending tags or personalisation.
• Journal content is never used for analytics, product metrics or aggregate reporting.
• Journal content is never used for advertising, and is never sold or shared with third parties.

Access is enforced in the database itself: only your own account can read your entries. The only other people who could technically reach them are the small number of engineers who administer the database, and only for maintenance or where the law requires it.

In practice that means message content is stored in a form that our systems can read. Other users cannot read your conversations — database rules restrict access to the two participants — but we could technically access them, and we may be legally compelled to. Please treat Unloop DMs as private-from-other-users, not as a secure channel for highly sensitive information.

We keep the list of third parties deliberately short. There are no advertising or analytics networks.

• Lovable Cloud / Supabase — our backend provider. Hosts the database, authentication, file storage and server functions. Effectively all of your data lives here, as our processor.
• Cloudflare — serves the app and runs our server code at the edge. Processes request metadata such as IP address for delivery, caching and security.
• Google, Apple and Microsoft — only if you choose to sign in with them. They confirm your identity and share your name, email address and avatar with us. Using one of these tells that provider you have an Unloop account.
• Supabase's email sender — sends transactional email such as confirmation and password-reset messages. It processes your email address only. We send no marketing email.

These providers act on our instructions and are not permitted to use your data for their own purposes. Data may be stored on servers outside your country; where that happens we rely on standard contractual protections.

• Account, profile and private profile details — for as long as your account exists, then deleted with it.
• Posts, comments, loops and follows — until you delete them, or until you delete your account.
• Stories — automatically deleted 24 hours after posting, including the stored image. An hourly job enforces this.
• Direct messages and conversations — until deleted by a participant, or until your account is deleted.
• Gratitude journal entries — until you delete them individually, clear them all, or delete your account.
• Usage and attention telemetry — kept while your account exists so your statistics stay meaningful, then deleted with it.
• Uploaded images — deleted with the post, story or account they belong to. An hourly sweep removes orphaned files.
• Notifications — until you delete them, or until your account is deleted.
• Username change history — pruned automatically after 30 days.
• Technical logs held by our providers — short retention windows set by those providers, typically days to a few weeks.

Nothing is retained indefinitely without a deletion path any more: every category above can be removed by you, expires on its own, or is removed when you delete your account.

• Access and portability — Settings → Privacy → “Download my data” gives you a JSON file containing your profile, posts, comments, stories, loops, follows, messages, notifications, journal entries, usage and mindful sessions.
• Correction — Settings → Account lets you change your name, email, username and profile details at any time.
• Deletion of specific content — delete posts and stories from your profile, messages and whole conversations from a chat, and journal entries from the Journal.
• Deletion of a whole category — Settings → Privacy → “Delete all journal entries”.
• Erasure of everything — Settings → “Delete my account”. This permanently removes your account, all your rows across every table and all your uploaded files. It cannot be undone and there is no recovery window.
• Withdraw consent — stop using the journal and delete your entries; the rest of Unloop keeps working.
• Object or complain — contact us first, and you also have the right to complain to your local data protection authority.

You must be 16 or over to use Unloop, and we ask you to confirm this when you sign up. Because Unloop stores mood and wellbeing notes, we do not offer accounts to children under 16. If we learn that an account belongs to someone under 16, we will delete it and its data.

Unloop uses your browser's local storage for two things: your sign-in session token, so you stay logged in, and your theme preference. Both are strictly necessary for the app to work, which is why you do not see a cookie banner.

There are no advertising cookies, no third-party tracking pixels, no analytics SDKs and no cross-site profiling. Clearing your browser storage will sign you out and reset your theme, nothing more.

Data is encrypted in transit and at rest. Access to your rows is enforced at the database level rather than only in the app, uploaded media is served through short-lived signed links, and passwords are stored hashed. No system is perfect, so please use a strong, unique password.

If we change how we handle your data, we will update this page and change the date at the top. For anything significant — a new third party, or a new use of your data — we will tell you in the app before it takes effect.