Privacy Policy

1. Introduction

LoopHalo ("we", "our", "the Service") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

By using LoopHalo, you consent to the practices described in this policy.

2. Data We Collect

2.1 Account Data

• Google Sign-In: Email address, display name, and profile picture from your Google account
• Guest/Anonymous Auth: A unique anonymous identifier (no personal data required)

2.2 Profile Data

• Display name, age, city, country, profession
• Selected interests and preferences
• Location data (only if you explicitly use the "Detect Location" feature via IP-based geolocation)

2.3 Usage Data

• Call duration and respectful interaction metrics
• Trust score, likes received, report count
• Match history (user IDs, timestamps, session duration)
• Reports submitted and received

2.4 Technical Data

• IP address (for geolocation and abuse prevention)
• Browser type and version
• Device type and operating system
• WebRTC connection metadata (ICE candidates, connection states)

2.5 Camera and Microphone

LoopHalo requests access to your camera and microphone for live video calls. Video and audio streams are transmitted peer-to-peer directly between users and are not recorded, stored, or monitored by LoopHalo servers. When a TURN relay server is used (for users behind firewalls), the media is relayed in real-time and not stored.

2.6 Chat Messages

Text chat messages sent during calls are transmitted via our signaling infrastructure. Messages are stored temporarily for delivery purposes and automatically deleted within 1 hour.

3. How We Use Your Data

• Providing the Service: Matching you with other users, facilitating video calls, displaying profiles
• Safety and Moderation: Processing reports, enforcing bans, preventing abuse
• Trust Algorithm: Calculating trust scores for quality-based matching
• Service Improvement: Understanding usage patterns to improve the product
• Legal Compliance: Responding to legal requests and enforcing our Terms

We do not sell your personal data to third parties. We do not use your data for advertising or marketing profiling.

4. Third-Party Services

LoopHalo uses the following third-party services:

Each third-party service operates under its own privacy policy. We encourage you to review them.

5. Data Retention

• Account and profile data: Retained while your account is active. Deleted within 30 days of account deletion.
• Match session records: Retained for 90 days for safety review purposes, then permanently deleted.
• Reports: Retained for 1 year for moderation integrity, then anonymized.
• Call signals and chat: Automatically deleted within 1 hour of creation.
• Video/audio streams: Never stored. Transmitted peer-to-peer in real-time only.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and personal data
• Portability: Request your data in a machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@loophalo.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Row-Level Security (RLS) policies on all database tables
• Server-side validation and parameterized queries
• HTTPS encryption for all data in transit
• DTLS/SRTP encryption for WebRTC media streams
• Regular security audits and updates

No system is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies and Local Storage

LoopHalo uses:

• Local Storage: To save your profile setup, presence key, and authentication session
• Session Cookies: Set by Supabase for authentication purposes

We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Children's Privacy (COPPA)

LoopHalo is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we discover that a user is under 18, their account will be immediately terminated and their data permanently deleted.

If you believe a minor is using LoopHalo, please report it to safety@loophalo.com.

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where applicable.

11. GDPR (European Users)

If you are located in the European Economic Area (EEA), the UK, or Switzerland:

• Our legal basis for processing is consent (for camera/mic), contractual necessity (for providing the Service), and legitimate interest (for safety and moderation)
• You have the right to lodge a complaint with your local data protection authority
• Data Protection Officer can be reached at dpo@loophalo.com

12. CCPA (California Users)

If you are a California resident:

• We do not sell personal information
• You have the right to know what personal information we collect, request deletion, and opt out of any future sale
• We will not discriminate against you for exercising your privacy rights

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service. Your continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or requests:

Email: privacy@loophalo.com

Data Protection Officer: dpo@loophalo.com

Safety Reports: safety@loophalo.com