Who operates Loop
Loop is provided through www.vibeandcraft.com, operating from Punjab, Pakistan. Contact info-loop@vibeandcraft.com for privacy questions or requests. This notice describes the current service; optional features and providers are identified separately rather than assumed to be active.
Information you provide
We process account email, username, display name and authentication information; optional avatar, bio and location; Loops, responses and votes; follows, likes, saved items and blocks; messages; reports and appeals; and your settings. Registration records your minimum-age declaration and the policy version acknowledged. We do not request a full birth date for that declaration. Do not provide sensitive information that a prompt does not need.
Technical and operational information
The service and its hosting providers process request and security logs, IP addresses, browser/device information, session cookies, timestamps and operational errors. If you enable browser push, we store the device subscription endpoint and keys. Moderation records may include detection categories, policy versions, actions and review history. Aggregated administrative counts help operate the service.
Why information is used
We use information to create accounts, authenticate sessions, publish and reveal contributions, generate shared results, manage settings, deliver requested notices, prevent abuse, investigate reports, calculate disclosed seasonal recognition, respond to support and meet applicable obligations. Optional marketing email requires an appropriate choice and a way to unsubscribe; a support request or account registration is not blanket marketing consent.
Visibility and messages
Public profiles and public Loops may be visible to visitors, search engines and people who share their links. Unlisted Loops are accessible to anyone holding the link. Private Loops currently belong to their creator only. Profile controls affect profile presentation and do not automatically make separately published Loops private. Messages are server-readable and are not end-to-end encrypted. Access to the service is restricted, but no system can guarantee absolute confidentiality.
Providers and international processing
Vercel hosts the application and Supabase provides authentication, database and storage. Authentication email is sent through the configured delivery provider, such as Resend when enabled; mailbox replies use the operator's email provider. Browser push uses the recipient device's push service. Lemon Squeezy processes checkout and billing only when paid memberships are released and used. These providers may process data outside Pakistan under their own applicable terms and safeguards. The app does not store full payment-card numbers.
Cookies, sharing and advertising
Essential cookies maintain authentication, security and related settings. Current app code does not implement third-party advertising trackers or the sale of personal data. We share information with service providers for operation, with people according to the visibility you choose, when you direct us to share, or where disclosure is required or justified under applicable law and safety needs. A material new tracking or processing purpose will require an updated explanation and any choice required by law.
Retention and deletion
Account information is kept while needed to provide the account. Deletion removes linked live account records, but shared-result copies, security/audit or moderation records and backups can outlive an account, subject to applicable obligations and review. Public recipients may also retain independent copies. Ask support about a particular result or record; we do not promise immediate erasure from every backup or another person's device. Keep necessary records for a substantiated complaint before requesting deletion.
Your choices and requests
Use Settings to edit available profile fields, hide profile details, adjust visibility, manage notifications or blocks, and request account deletion. Contact support for access, correction, a copy of data, deletion of retained material or an objection/restriction request where applicable. There is no automated data-export feature in this release. We may request proportionate account verification without asking for your password. Rights and exceptions depend on applicable law.
Younger members
The minimum age is 16, or a higher local minimum where applicable. We rely on the registration declaration and do not claim verified age. Younger members should avoid sharing precise location or private details and involve a trusted adult if a contact makes them uncomfortable. Contact support about suspected underage accounts or exploitation. Guardian permission is required where the member cannot lawfully accept the terms themselves.
Changes and concerns
The version and update date appear on this page. Material changes will be communicated through an appropriate service notice before they apply where required. Contact support with privacy concerns; applicable rights to seek help from a competent authority are preserved.