Loopback Privacy Policy

Last updated: August 27, 2026

Loopback is a private running log. It is built so that your runs belong to you and no one else. This policy explains what the app collects, where it goes, and what never leaves your phone.

The short version

• There is no feed, no followers, and no social layer. Nothing you record is ever visible to other users.
• Your GPS routes are encrypted on your device with a key that never leaves it.
• There are no ads and no third-party analytics or tracking SDKs in the app.
• You can use the entire core app without creating an account.

Location data

Loopback uses your location for two things: planning loops from where you stand, and recording a run after you press Start. Background location is active only while a run is being recorded and stops when you press Finish. Recorded routes are encrypted on your device using AES-256 with a key stored in your phone's secure keychain. Plaintext coordinates never leave your device except when you explicitly export or share a run, and every export first passes through redaction: privacy zones you define are cut out, and the start and end of the route are removed.

Health data

If you connect Apple Health, Health Connect, or a Bluetooth heart-rate sensor, Loopback reads heart rate and workout data to enrich your runs and can write your completed runs back to your health app. Health data is used only inside the app, is never sent to our servers except as part of your encrypted, synced run records, and is never used for advertising or shared with third parties.

Accounts and sync (optional)

If you sign in (email, Apple, or Google), your runs, loops, records, and settings are backed up to your own private space in Google Firebase (Firestore), operated under Google's privacy terms. Access rules enforce that only your authenticated account can read your data. Route coordinates are synced only in encrypted form; the decryption key stays on your device, so even the backup cannot reveal where you ran.

Purchases

Subscriptions and purchases are processed by Apple and managed through RevenueCat, which receives your purchase receipt and an anonymous or account-scoped user id in order to unlock Pro features. See RevenueCat's privacy policy. Loopback never sees your payment details.

Watch account sync (optional)

If you connect a Garmin or Coros account, those services send your completed activities to our server, which stores them in your private space so the app can import them. This happens only after you explicitly authorize it and can be disconnected at any time.

Invite links (optional)

If you create an invite link for a planned loop, only the loop shape, distance, and the public meeting point you choose are stored. Invite links expire after 48 hours and can be revoked at any time. Recorded runs are never shared through invite links.

What we do not do

• No selling of data, to anyone, ever.
• No advertising and no advertising identifiers.
• No third-party analytics or behavioral tracking.
• No access to your contacts, photos (except saving exports you request), or messages.

Deleting your data

Settings > Delete everything erases all runs, loops, records, and privacy zones from your device and queues deletion of any synced copies. Uninstalling the app removes all local data, including the encryption key.

Contact

Questions about this policy: gamalieldorcin1@gmail.com