Privacy Policy

1. Who We Are

Loopbreak ("we", "us", "our") operates theloopbreak.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it. We are committed to handling your data with care and transparency.

2. Data We Collect

We collect the following categories of data:

• Account data: name, email address, and profile information provided during sign-up or via OAuth.
• Content data: tasks, brain dump entries, notes, focus sessions, energy check-ins, and other content you create within the Service.
• Preference data: neurotype selection, colour scheme, notification settings, and other in-app preferences.
• Usage data: pages visited, features used, and interaction events — collected in aggregate to improve the Service.
• Payment data: billing is handled by Stripe. We store only a Stripe customer ID; we never see or store your full card number.
• Push subscription data: if you enable push notifications, we store your browser push endpoint to deliver notifications.

3. How We Use Your Data

• To provide, maintain, and improve the Service.
• To personalise your experience based on your neurotype and preferences.
• To send you notifications you have opted into (weekly summaries, reminders, alerts).
• To process payments and manage your subscription via Stripe.
• To respond to support requests and communicate important service updates.
• To generate AI-powered insights (weekly summaries, triage suggestions) using your content data.

We do not sell your personal data to third parties. We do not use your content data to train AI models beyond the immediate request that generated the insight.

4. Data Sharing

We share data only with the following categories of third parties:

• Infrastructure providers: cloud hosting and database services used to run the Service.
• Stripe: for payment processing. Stripe's privacy policy applies to data they collect.
• AI providers: content you submit for AI analysis (triage, summaries) is sent to an LLM API. We do not send identifying information alongside content where avoidable.
• Legal requirements: we may disclose data if required by law or to protect the rights and safety of our users.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and content will be deleted within 30 days, except where retention is required by law (e.g., billing records).

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing. To exercise any of these rights, contact us at [email protected].

7. Cookies and Tracking

We use a session cookie to keep you logged in. We do not use third-party advertising cookies or tracking pixels. Analytics are collected in aggregate and do not identify individual users.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

For privacy-related questions or requests, contact us at [email protected].