Privacy Policy: Looply

Last updated: [date of publication]

This policy covers the Looply app for Android (app ID dk.simonhl.looply), published by [publisher name] ("we").

The short version

Looply works fully without an account, and without one we receive nothing from the app. If you choose to create an account and turn on sync, Looply stores your sign-in details and a copy of your data on our server, so that your devices can share it. We do not sell your data or share it for advertising, and the app has no ads, no analytics and no tracking. See "Your account and sync" below for exactly what is stored, where, and for how long, and "Deleting your data" for how to delete it all. The app also uses the internet to open web pages you choose; see "Web browsing" below.

What the app stores, and where

The app stores the projects you make and everything in them: counters, counts and their history, reminders, notes, timers and the photos you add. This data is saved on your device, in the app's own storage. If you sign in and turn on sync, a copy also goes to our server; see "Your account and sync". Without an account, we never receive it, and the app does not send it anywhere.

The app can save all of this to one backup file, and add the contents of such a file back. You choose where the file goes and which file to restore, using your phone's own file picker. The app does not send the file anywhere itself; if you save it to a service such as Google Drive, that service's own privacy terms apply.

If you delete the app, its data is deleted from your device with it. Data already synced to your account stays on our server until you delete the account; see "Deleting your data".

Data we collect

Without an account: none. We do not collect personal data, usage data, crash reports, device identifiers, location or contacts. The app contains no third-party analytics, advertising or tracking code.

With an account and sync, we collect the data listed under "Your account and sync" below, and nothing else.

Your account and sync

[publisher name] is responsible for the data described in this section ("controller" under EU data protection law).

You can use Looply without an account. If you create an account and turn on sync, the following is sent to our server and stored there:

• Your sign-in. Your email address if you sign in with an emailed code. If you sign in with Google: your Google account ID and the email address Google reports for it, if it has one.
• Your devices. For each phone or tablet signed in to your account: a random device ID, a name (the phone's model, for example "Pixel 8") and when it last connected. You can see this list in the app.
• Your sessions. A sign-in on a device lasts until you sign out or stop using it; the server stores only a scrambled form (a hash) of the sign-in tokens, never the tokens themselves.
• Your data. The projects you make and everything in them (parts, counters, counts and their history with times and time-zone offsets, reminders, notes, timers, goals, statistics and your settings), the notes and markings you add to patterns, and the names of your pattern files; and the pattern files and photos you add, up to 500 MB per account.

This data is encrypted on its way to our server, but it is not end-to-end encrypted: [publisher name], as the operator, can technically read it. We use it only to run the account and sync you asked for. We do not sell it, share it for advertising, or use it to track you.

Where your data is stored and who handles it

Data on our server is stored by Hetzner Online GmbH in [Germany: to be confirmed when the server is created]. Hetzner Online GmbH processes it for us under a data processing agreement.

Sign-in and account-deletion codes are sent by email through [email provider: customer to decide], which sees the email address and the code while it sends the message.

If you choose "Sign in with Google", Google's own sign-in screen handles that step, under Google's Privacy Policy (https://policies.google.com/privacy), and Google may learn that you signed in to the app. Our server receives from Google your account ID and email address, but not your Google password or other Google data.

We do not use analytics, advertising or tracking services, and we share your data with no one else, except where the law requires it.

How we protect it

Connections between the app and our server are encrypted. There are no passwords: you sign in with a one-time code sent by email, or with Google. A code works once, for a short time, and is stored only in scrambled form. The server limits how often codes can be requested and tried, to stop others from guessing them. The app keeps its sign-in in the phone's secure storage (the Android Keystore) and excludes it from phone backups.

How long we keep data

We keep your account and its data until you delete the account, with these details:

• Your account and its data are kept until you delete the account. Inactive accounts are not deleted automatically.
• Things you delete in the app stay in the app's trash for 30 days. On our server they stay as hidden deletion markers, so that your other devices learn about the deletion, until you delete the account. [customer to decide: whether, and when, deleted items are removed from the server for good]
• A pattern file or photo that no item uses any more is removed from storage 30 days after the last item using it was deleted.
• A sign-in or deletion code works for 10 minutes. A sign-in on a device ends 180 days after its last use.
• To stop misuse, the server counts how many files each account downloads per day, and keeps these counts for at most two days. It also counts sign-in code requests and code tries per email address, in scrambled form (a keyed hash, not the address itself), and deletes those counts after about a day.
• Backups of the server are kept for up to 31 days and cannot be changed or deleted during that time. A deleted account may therefore remain in these locked backups for up to 31 days before it is gone for good.

Logs

Our server's logs record only the kind of request, whether it worked and how long it took. They contain no email addresses, codes, tokens or account IDs, and no IP addresses. To stop abuse, the server counts requests per IP address in scrambled form (a keyed hash, not the address itself) and deletes those counts after about a day. [customer to decide: whether the web server in front of ours, or the hosting provider, keeps logs that contain IP addresses, and for how long]

Your rights

Under EU data protection law (GDPR) you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. We process your data to provide the account and sync you asked for. To use these rights, delete the account yourself as described under "Deleting your data", or write to [contact email address].

Web browsing

The app has a built-in web browser that you use to open pages you choose, such as a pattern page, and save them into the app as PDF files. You can also send a page or a PDF to Looply from Android's share menu. Pages you save are stored on your device like everything else. If you tap a link to a PDF, the app downloads that file directly from the site. If you type words instead of a web address, the browser searches for them with DuckDuckGo (duckduckgo.com), which receives those words and your phone's internet address under its own privacy terms. The app has no list of sites of its own and keeps no browsing history. When you open a page, it loads directly from that site. The site can see your phone's internet address (IP address) and may set its own cookies, and from then on that site's own privacy terms apply. We never see which pages you visit. Third-party cookies are turned off. In the menu on the home screen you can clear the browser's cookies, cache and site storage at any time.

The browser is Android System WebView, which is made by Google. Its Google Safe Browsing protection stays on, so Google may receive checks of the addresses you visit, as described in Google's Privacy Policy (https://policies.google.com/privacy). The app opts out of sending WebView usage statistics to Google. The browser sends nothing to us; syncing is separate, see "Your account and sync".

Device backups

Your phone's own backup service may include the app's data in a backup of your device: Google's Android backup on Android, and iCloud or computer backups on iPhone. These backups are made, stored and protected by Google or Apple under your device and account settings. We have no access to them. You can turn them off in your phone's settings.

Permissions

The app keeps the screen on while a counter is open. Taking a photo opens your phone's own camera app, and choosing a photo uses Android's photo picker, so the app never reads your camera or your photo library itself. It has internet access, used by the built-in web browser, for downloading PDF links you tap, and, if you sign in, for sign-in and sync, which can also run in the background. It asks for no other permissions: no location, contacts or microphone.

Deleting your data

Delete projects, parts, counters and photos in the app. Deleted projects stay in the trash for 30 days before they are gone. Uninstalling the app, or clearing its data in your phone's settings, deletes the data on your phone, but not your account. Signing out does not delete anything either.

To delete your account and everything stored on our server, use "Delete account" in the app, or the page [server address]/account/delete, which works with your email address and a code we send you. Deleting is immediate and cannot be undone. It removes your account, devices, sessions and synced data at once; your files are removed from storage shortly afterwards by an automatic clean-up. Copies in our server backups disappear when those backups expire, as described under "How long we keep data".

Google Play

Google may collect information when you use Google Play and Android, for example anonymous crash and performance statistics if you allow your phone to share them. We may see these in aggregated form only. This is Google's processing and is covered by Google's Privacy Policy (https://policies.google.com/privacy).

Children

The app is not aimed at children. We do not knowingly collect data from children. If you believe a child has created an account, write to us and we will delete it.

Changes to this policy

If the app ever starts handling data differently, we will update this policy and the date above before that version is released.

Contact

Questions about this policy: [contact email address]. You can also complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.