Privacy policy

looop is team calls that remember: a call with a live transcript, a recap and tasks afterwards. To make that work we process your data. This page says what we collect, why, where it lives and how to delete it. In short: your data belongs to you and your space; we don't sell it and we don't show ads.

Who is responsible

The looop service at looop.studio. For anything about your data, write to support@looop.studio.

What we collect

• Account. Sign-in is with Google or Apple. From Google we receive your email address, name and profile photo (scopes openid, email, profile); from Apple, your name and email address (if you hide your email, it is Apple's private relay address, and messages sent to it reach you). We store no passwords. You can change your name, photo and interface language in the profile.
• Space and loops. The space name, who belongs to it, loops (name, schedule, people), email invitations.
• Calls. Audio and video pass through our media server. When recording is enabled we keep each person's audio track (after studio enhancement), the live transcript with speaker attribution, and the recap: summary, decisions, questions, tasks, and agent chat replies.
• Call video. If a space records video, we record the cameras that are on and any screen share along with the audio; a camera that is off is not recorded. The owner and admins of the space choose what is recorded: screen and cameras, screen only, or no video. While video is being recorded, everyone in the call sees "● Recording", and a guest learns about it before joining.
• Guests. Someone joining a loop by link without an account gives a name; we keep a temporary admission token in a cookie that expires on its own.
• Site visits. When you open the home page before signing in, we record the visit: IP address, approximate city and country for that address (an offline DB-IP database on our own servers; the address is not sent anywhere), browser and device, browser language, the page or link you came from, time on the page and whether you clicked "Sign in". If you then sign in to looop from the same browser, the visit is linked to your account. We use this to understand where people come from; only the looop team sees it.
• Technical. A session cookie (_app_key), IP address and browser type in server logs, timestamps of actions. No third-party analytics trackers, no advertising cookies.

Why

To run the call, transcribe it, produce the recap and tasks, keep the space's memory and show it to the people of that space. Emails (space invitation, access opened) are sent only when needed. Data is never used for advertising and never sold. We may use the text of calls — transcripts and recaps — to improve looop and train our own models.

Who helps us process it

We use third-party services strictly to run the product:

• Hetzner Online GmbH — servers and database, Falkenstein, Germany (EU).
• Cloudflare R2 — profile photos, call video (stored in the EU), backup copies of call recordings and of the database.
• Soniox — speech recognition; audio goes to Soniox servers in the EU and is not retained after transcription.
• ai-coustics — studio audio enhancement; runs on our servers, audio is not transferred.
• Anthropic, Google (Gemini), Cerebras, Fireworks AI — language models for recaps, tasks and agent chat; they receive transcript fragments and, under their API terms, do not train on your data.
• Resend — email delivery. Google and Apple — sign-in. Google Fonts — interface fonts.

Who can see it

Calls, recordings, transcripts and recaps are visible only to the people of your space. A guest sees only the call they joined. We don't share data with anyone else except the services above and where the law requires it.

How long we keep it

• A call with fewer than five transcript lines is treated as not held and is deleted automatically.
• Recordings — audio and video — transcripts and recaps stay until someone in the space deletes them: "Delete call" on the recap page erases the recording, transcript, recap and the tasks born from that call.
• The owner of a space can delete it: the people of the space lose access at once and for good, and the call recordings — audio and video — are erased on our servers, in storage and in backups. The text of calls — transcripts, recaps, decisions and tasks — we keep and may use to improve the service and train our own models.
• Accounts or spaces are deleted completely — text included — on request to support@looop.studio within 30 days.
• Server logs are kept for no longer than 30 days.
• The IP address of a site visit is erased after 90 days; the rest of the visit (approximate location, browser, source) is kept while we need it to understand where people come from. We delete your visits on request to support@looop.studio.

Your rights

You can view and correct profile data in the app, delete any of your calls, and request an export or full deletion at support@looop.studio. We reply within 30 days. You can also revoke looop's access to your Google account in your Google settings, and to your Apple account in your Apple ID settings (Sign in with Apple). Deleting your account in the app also revokes Sign in with Apple.

Security

Connections are TLS only, access to data is limited by space membership; the platform owner may view call recaps and recordings for support and quality control. Keys and tokens are stored protected. Servers are in the EU.

Children

looop is not intended for people under 16, and we do not knowingly collect their data.

Changes

When this policy changes, the new version appears on this page with a new date. We announce material changes in the app.