Privacy Policy

1. Information We Collect

The information we collect depends on how you use Loople, which communities you belong to, and which features are used.

A. Account and Profile Information

When you create or use a Loople account, we may collect information such as:

• Name
• Email address
• Display name or handle
• Profile photo or avatar
• Bio or other profile information you choose to provide
• Account identifiers
• Authentication information and login-related records
• Account status and role information

Loople currently supports passwordless email authentication using one-time codes, Google Sign-In, and Sign in with Apple on supported Apple devices.

B. Family and Dependent Information

Loople allows parents and guardians to create dependent profiles connected to a family account.

Depending on how the Services are used, dependent information may include:

• Name
• Date of birth
• Profile image
• Family or guardian relationship
• Community memberships
• Program participation
• Registration information and answers
• Posts, messages, or other content if the dependent later receives login access

A parent or guardian creates the dependent profile and controls whether an eligible teenager receives login access.

Children under 13 do not receive independent Loople login access in the current product. They may exist as dependent profiles managed by a parent or guardian. See Children's Privacy and Teen Accounts, Guardians, and Messaging.

Teenagers ages 13 through 17 may receive login access only after a parent or guardian explicitly invites or enables them.

C. Community and Membership Information

When you join or participate in a community, Loople may process information such as:

• Community memberships
• Roles within a community
• Program enrollments
• Event participation
• Registration records
• Attendance-related records
• Volunteer signups or activity
• Waiver acceptance
• Payment-related records
• Historical membership status

Leaving or being removed from a community does not necessarily delete historical records that the organization reasonably needs to retain, such as prior registrations, payments, enrollments, volunteer records, or waiver acceptances. See Data Retention.

D. Organization-Created Registration Information

Organizations using Loople can create custom registration questions. Depending on the organization, those questions may request additional information such as emergency-contact information, shirt size, allergies, or other information relevant to the program or activity.

Loople does not decide what every organization should ask. Organizations are responsible for determining whether their custom questions are appropriate, necessary, and lawful.

Organizations must not use Loople custom fields to collect passwords, full payment-card numbers, Social Security numbers, or unnecessary government identification numbers.

E. Messages and User-Generated Content

Loople includes community and communication features. We may process content such as:

• Community posts
• Comments and replies
• Direct messages
• Group messages
• Profile images
• Photos posted to community feeds
• Files and documents
• Event, program, and community content created by administrators

Users and organizations retain ownership of the content they submit, subject to the rights needed for Loople to host, process, transmit, display, store, moderate, and otherwise operate the Services.

Community administrators do not have general access to private direct messages simply because they are administrators.

Loople may review specific communications or content when reasonably necessary to investigate a report, protect users, enforce our Terms, prevent abuse, comply with law, or address a safety concern.

F. Payments and Transaction Information

Organizations may connect their own Stripe accounts through Stripe Connect. Members may use Loople-powered checkout to pay charges such as dues or program registrations.

Stripe handles payment-card credentials. Loople does not intend to store raw credit-card numbers.

Loople may receive and store transaction information needed to operate and support payments, such as:

• Payment identifiers
• Transaction status
• Amounts
• Fees
• Refund information
• Organization and user identifiers associated with the transaction
• Other payment metadata provided by Stripe

Loople may collect a platform or service fee on qualifying Stripe Connect transactions.

G. Support and Communications

If you contact us, we may collect the information you provide, including:

• Your name and contact information
• The contents of your message
• Screenshots, files, or other materials you provide
• Information about the issue you are reporting
• Communications between you and Loople

You can also reach us through our Support page.

H. Device, Usage, and Technical Information

When you use the Services, we and our service providers may process technical and usage information such as:

• IP address
• Device and browser type
• Operating system
• App version
• Pages or screens viewed
• Feature usage
• Clicks and navigation activity
• Session and event data
• Error and crash information
• Approximate technical location derived from network information where provided by infrastructure services
• Push-notification tokens
• Other diagnostic information

We currently use PostHog for product analytics, Vercel Analytics for production web analytics, and Sentry for error monitoring. See Analytics and Similar Technologies.

We do not currently use Google Analytics, Meta Pixel, or advertising retargeting pixels in the product described by this policy.

I. Location Information

Loople does not continuously track your physical movements or use the Services to follow where you go in day-to-day life.

The current product does not include GPS-based weather tracking or nearby-community discovery.

Organizations may enter location information for programs or events as ordinary content, such as a venue name or address.

2. Google Sign-In and Google User Data

Loople allows users to authenticate using Google Sign-In.

When you choose Google Sign-In, Google may provide Loople with basic account information made available through the authentication flow, such as your name, email address, profile image, and a Google account identifier, depending on the information associated with your Google account and the permissions presented during authentication.

Loople uses Google Sign-In information to:

• Authenticate you
• Create or connect your Loople account
• Maintain your signed-in account experience
• Help prevent unauthorized access and account abuse
• Provide the Services you request

Loople does not sell Google user data.

Loople does not use Google Sign-In data for third-party advertising.

Loople does not use Google Sign-In data to train unrelated general-purpose artificial-intelligence models.

We may store the account information needed to maintain your Loople account in our service infrastructure, including our authentication and database provider.

We may share Google-derived account information with service providers only as reasonably necessary to provide, secure, maintain, or support Loople, or when required by law. See How We Share Personal Information.

Our use and transfer of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements.

You can manage or revoke Loople's access to your Google account through your Google account settings. Revoking Google access does not necessarily delete your Loople account or information already lawfully retained by Loople.

3. Sign in with Apple

Users of supported Apple devices may choose Sign in with Apple.

Apple may provide Loople with information necessary to authenticate your account, such as an account identifier, name, and email address, depending on your Apple settings and whether you use Apple's private email relay feature. See Apple's Privacy Policy.

We use that information to authenticate you, create or connect your Loople account, maintain account security, and provide the Services.

4. How We Use Personal Information

We may use personal information to:

• Create and maintain Loople accounts
• Authenticate users and secure accounts
• Connect family members and dependent profiles
• Manage community memberships
• Provide programs, events, registrations, waivers, volunteer tools, and related features
• Provide direct and group messaging
• Send community announcements and notifications
• Process payments and refunds through Stripe
• Provide community administration tools
• Maintain historical community records where appropriate
• Provide customer support
• Troubleshoot bugs and technical problems
• Analyze product usage and improve the user experience
• Detect, investigate, and respond to fraud, abuse, security incidents, or violations of our Terms
• Protect minors and other users when a safety concern is reported or identified
• Enforce account, community, and platform restrictions
• Communicate about product features, changes, and updates
• Send marketing communications where permitted
• Comply with legal, tax, accounting, regulatory, and law-enforcement obligations
• Establish, exercise, or defend legal claims
• Protect Loople, our users, organizations, and the public

We may also use information in aggregated or de-identified form where it can no longer reasonably identify an individual.

5. How Organizations Use Information

Organizations use Loople to operate their own communities.

Depending on the organization and your relationship with it, an authorized organization administrator may access information reasonably necessary to manage that community, such as:

• Your name and profile
• Your email address for administrative purposes
• Membership status
• Program participation
• Registration responses
• Payment status
• Volunteer activity
• Waiver acceptance
• Other information submitted to that organization

Your email address is not displayed to ordinary members in the community directory.

Age and date of birth are not publicly displayed by default.

Organizations are responsible for their own membership decisions, programs, rules, waivers, safety procedures, staff, volunteers, refunds, custom questions, and real-world activities.

If an authorized organization administrator exports information from Loople, such as a program roster or finance transaction report, the organization is responsible for the exported copy once it leaves Loople.

If you have questions about why a particular organization collected information from you, you may need to contact that organization directly.

6. Teen Accounts, Guardians, and Messaging

Loople is designed to support family and community participation while giving parents and guardians control over teen access.

In the current product:

• Dependents under 13 remain profile-only and cannot independently log in.
• Teenagers ages 13–17 may receive login access only after a parent or guardian explicitly enables or invites them.
• Guardian-controlled messaging settings may restrict teen messaging.
• Depending on the guardian's selected settings, teen messaging may be disabled, limited to family, or open with guardian supervision.
• In supervised teen-adult conversations, a guardian may be able to observe the conversation.
• Guardians may receive a notice when a teen begins a conversation with a new adult.

Adults and teenagers may communicate for legitimate community purposes, including communication between coaches, directors, administrators, volunteers, and participants.

Community administrators do not receive blanket access to private messages.

Loople may review particular communications when reasonably necessary for safety investigations, abuse reports, legal obligations, or enforcement. We do not promise that every harmful, inappropriate, or unsafe communication will be detected.

If you believe a child or teenager may be at risk through Loople, contact support@joinloople.com.

7. How We Share Personal Information

We may disclose personal information in the following circumstances.

A. With Organizations You Participate In

We share information with organizations as necessary to provide the community features you or the organization use. See How Organizations Use Information.

B. With Other Users

Information may be visible to other users when you choose to make it available through your profile, community participation, posts, comments, messages, or other social features.

Member directories are designed to expose limited profile information rather than private account information.

C. With Service Providers

We use third-party providers to operate Loople. Current providers include:

• Supabase for authentication, database services, and file storage
• Stripe and Stripe Connect for payments and community billing
• Resend for transactional email
• PostHog for product analytics
• Vercel for hosting and production web analytics
• Sentry for error monitoring
• Google for Google Sign-In
• Apple for Sign in with Apple and Apple push-notification infrastructure
• Expo for mobile application and push-notification infrastructure
• OpenAI for optional avatar image generation

These providers process information on our behalf or as necessary to provide their services to us.

D. Avatar Generation Using OpenAI

Loople includes an optional feature that can create a stylized avatar from a photo you provide.

If you use this feature, the photo you choose is sent to OpenAI for image processing and generation.

We use that processing to provide the avatar feature you requested. Private community messages and posts are not sent to OpenAI for general-purpose model training as part of this feature.

If you do not use the avatar-generation feature, Loople does not need to send a photo to OpenAI for that purpose.

E. Legal, Safety, and Enforcement Reasons

We may disclose information if we reasonably believe disclosure is necessary to:

• Comply with law, regulation, subpoena, court order, or legal process
• Respond to lawful government requests
• Investigate fraud, abuse, or security incidents
• Protect the rights, safety, or property of Loople, our users, organizations, or others
• Address suspected exploitation, grooming, harassment, threats, or other safety concerns
• Enforce our Terms or other agreements

F. Business Transfers

If Loople is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

8. We Do Not Sell Personal Information

Loople does not sell personal information to third parties for money.

We do not sell private community content or messages.

We do not use private community content or messages to train unrelated general-purpose AI models.

We may use product analytics and service data to improve Loople and may tell existing users about Loople features or services.

9. Analytics and Similar Technologies

We use analytics and diagnostic tools to understand how Loople is used, identify bugs, improve performance, and make product decisions.

Current tools include PostHog, Vercel Analytics, and Sentry.

These services may process device, usage, session, event, and diagnostic information as configured in our implementation.

We do not currently use Google Analytics, Meta Pixel, or advertising-retargeting pixels in the product covered by this policy.

If we materially change our advertising or tracking practices, we will update this Privacy Policy and implement any consent or preference controls required by applicable law. See Changes to This Privacy Policy.

10. Communications and Notifications

Loople may send you:

• Authentication and security emails
• Login codes and account invitations
• Payment and registration-related communications
• Community announcements
• In-app notifications
• Push notifications for messages, alerts, events, and social activity
• Product and service updates
• Occasional marketing communications

You can control supported push-notification categories through Loople or your device settings.

You may opt out of marketing emails, but we may still send essential transactional, account, security, legal, and service-related communications.

SMS is not part of Loople's current launch communications.

11. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide the Services
• Maintain accounts and community records
• Process transactions
• Meet legal, tax, accounting, and regulatory obligations
• Resolve disputes
• Prevent fraud
• Investigate abuse and safety incidents
• Enforce platform restrictions
• Protect the security and integrity of Loople

The appropriate retention period depends on the type of information and why it was collected.

Leaving a community does not automatically erase historical records created while you were a member.

If an account is deleted, some information may be deleted or de-identified while other limited information may be retained where reasonably necessary for legal obligations, fraud prevention, safety enforcement, financial records, dispute resolution, security, or legitimate historical organization records.

Information may also remain for a limited period in backups and disaster-recovery systems before being removed through normal backup rotation.

12. Your Choices and Privacy Rights

Depending on your relationship with Loople and where you live, you may have the right to request access to, correction of, or deletion of personal information.

You may contact support@joinloople.com to make a privacy request.

We may need to verify your identity before completing a request.

Certain information may not be deleted immediately or completely where retention is reasonably necessary or legally required, including for:

• Financial and tax records
• Security and fraud prevention
• Abuse and safety investigations
• Enforcement records
• Disputes and legal claims
• Historical organization records
• Legal obligations

You may also:

• Edit supported profile information
• Manage supported push-notification settings
• Unsubscribe from marketing email
• Revoke Google or Apple authentication permissions through the applicable provider
• Contact an organization directly regarding information that organization collected through Loople

Residents of Canada may request information about the existence, use, and disclosure of their personal information and may challenge its accuracy and completeness, subject to applicable law.

Depending on where you live in the United States, additional privacy rights may apply. We will honor verified requests as required by applicable law.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information appropriate to the nature of the Services and the information we process.

No online service, database, transmission method, or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security.

You are responsible for taking reasonable steps to protect access to your own devices, email accounts, and authentication methods.

14. International and Cross-Border Processing

Loople initially serves users and organizations in the United States and Canada.

Loople and our service providers may process or store information in the United States or other countries where we or our providers operate.

As a result, personal information may be subject to the laws of the jurisdiction where it is processed and may be accessible to courts, law-enforcement authorities, or government agencies in accordance with applicable law.

Where required, we take reasonable steps to use service providers and safeguards appropriate to cross-border processing.

15. Children's Privacy

Loople supports communities that frequently include children and teenagers.

The current product does not permit children under 13 to create independent login accounts.

A parent or guardian may create a dependent profile for a child under 13 and provide information about that child as part of the family's use of Loople and participation in a community.

Teenagers ages 13–17 may receive login access only after a parent or guardian explicitly enables or invites them. See Teen Accounts, Guardians, and Messaging.

Organizations may also process information about children and dependents through registrations, programs, and other community activities. Organizations are responsible for the information they choose to request and for obtaining any permissions or consents required for their activities.

Parents and guardians who have questions about information associated with a dependent may contact us at support@joinloople.com.

If we learn that personal information has been collected in a manner inconsistent with applicable child-privacy requirements, we may take appropriate steps to restrict, delete, or otherwise address that information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as Loople changes.

If we make material changes, we may provide notice through the Services, by email, or by another reasonable method.

The “Effective Date” at the top of this policy indicates when the current version became effective.

17. Contact Us

For privacy questions, requests, or complaints, contact:

Privacy Lead
Loople, Inc.
Michigan, United States
support@joinloople.com

We will review privacy inquiries and respond as required by applicable law. You can also visit Support or read our Terms.