Back

Privacy Policy

Last updated: 2026-08-19

Loop (“we”, “us”, “the app”) is a route-generation running and walking app operated by Martin Roman (“the developer”). This policy explains what personal data Loop collects, why, who it’s shared with, and what rights you have.

1. What we collect

Account information. If you create an account (email/password or Google sign-in), we store your email address, display name, and subscription status. You can also use Loop without an account (“Continue without account”) — in that case we don’t store any account-linked data, and settings/history are not saved between sessions on new installs.

Location data (GPS). While you have an active running/walking session open, Loop uses your device’s GPS to generate your route and track distance, time, and pace. Location tracking continues in the background only while a session is active, shown via a persistent notification — we do not track your location when no session is running.

Session and route history. If you’re logged in, completed sessions (route path, distance, time, pace) and any routes you choose to save are stored to your account so you can view your history and reuse saved routes.

Subscription and payment status. If you subscribe to Loop PRO, our payment processing partner (RevenueCat, working with Google Play Billing) tells us your subscription status (active/expired, plan type). We never see or store your payment card details — Google Play handles the transaction directly.

Advertising data. If you use the free version of Loop, you may be shown ads served by Google AdMob. AdMob may use an advertising identifier and other technical data to serve and measure ads. PRO subscribers never see ads. Users in the EEA, UK, and Switzerland are shown a consent screen before any personalized ads are shown, with an option to decline (“Do Not Consent”).

We do not use any other third-party analytics tools (such as Google Analytics) in the app beyond what’s described above.

2. Who we share data with

We work with the following service providers, who process data on our behalf:

  • Supabase — hosts our backend database and authentication system (account data, session history, saved routes)
  • Google — Google Sign-In (optional login method), Google Play Billing (subscription payments), Google AdMob (advertising, free tier only)
  • RevenueCat — manages subscription status by reading purchase data from Google Play
  • Mapbox — provides the maps shown in the app
  • GraphHopper, and open-source routing services based on OpenStreetMap (BRouter/OSRM) — calculate running/walking routes based on the coordinates you provide (your current location and chosen distance)
  • Cloudflare — hosts this privacy policy and our account-deletion page

These providers only receive the data necessary to perform their function (e.g., routing services receive coordinates, not your email; RevenueCat receives purchase/subscription status, not your GPS history).

Some of these providers are based outside the EU/EEA or operate global infrastructure (for example Google and RevenueCat). Where this involves transferring your personal data outside the EU/EEA, these providers rely on recognized legal safeguards — such as the EU-US Data Privacy Framework or Standard Contractual Clauses — to protect your data to the standard required by GDPR.

3. How long we keep your data

We retain your account, session history, and saved routes for as long as your account remains active. If you delete your account, we permanently delete your personal data within 30 days, except where we’re required to keep certain records for longer (for example, payment records that Google Play retains for tax and accounting purposes, which are outside our control). If you use Loop without an account, no data is retained after your session ends.

4. Your rights (GDPR)

If you’re located in the EU/EEA/UK, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data — you can delete your account directly in the app (Profile → Delete account), which removes your account, session history, and saved routes
  • Restrict or object to certain processing
  • Data portability — request an export of your data in a machine-readable format
  • Lodge a complaint with your national data protection authority — in Sweden, this is Integritetsskyddsmyndigheten (IMY)

To exercise any of these rights beyond in-app account deletion, contact us at loopsupport.app@gmail.com.

5. Advertising and the AdMob consent choice

If you’re in the EEA, UK, or Switzerland, Loop shows a consent message the first time ads would be relevant, letting you choose to consent to personalized ads, decline (“Do Not Consent”), or manage detailed options. You can change this choice later from the app’s Settings menu (look for “Privacy” or “Ad preferences”), or by clearing the app’s data or reinstalling it, which will show the consent screen again.

6. Cookies

This policy covers the Loop app. Our website (loop-web) uses only essential, functional cookies required for the site to work — no tracking or advertising cookies.

7. Children

Loop is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us at loopsupport.app@gmail.com and we will delete it.

8. Changes to this policy

We may update this policy as Loop changes. Material changes will be reflected here with an updated “Last updated” date. Continued use of Loop after changes take effect means you accept the updated policy.

9. Contact

Questions about this policy or your data: loopsupport.app@gmail.com