This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural. 'Company' (referred to as either 'the Company', 'We', 'Us' or 'Our' in this Agreement) refers to Loomdy Inc.

2. Collecting and Using Your Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to: Email address, First name and last name, Phone number, Address, State, Province, ZIP/Postal code, City, Usage Data.

2.1 Media File Metadata

When you upload photos or videos, our app reads metadata embedded in the file (EXIF for images, QuickTime/MP4 atoms for videos) and persists fields useful for organising your albums: capture date, dimensions, camera make and model, and — when available — the GPS coordinates of where the file was captured. We use this to power features such as the album map view, the file detail sheet, and chronological timeline ordering. The original file uploaded to our servers preserves all of its embedded metadata; nothing is stripped. You can disable indexed location storage at any time from Profile → Privacy & data → Location in uploads. Disabling the toggle prevents new uploads from having their GPS indexed in our database; previously indexed coordinates can be removed by deleting the file.

2.2 Usage Analytics and Session Replay

To fix bugs and improve the experience, we use two categories of diagnostic tools. (a) Usage analytics and crash reporting (Google Firebase): anonymous usage events, performance metrics and crash reports that tell us which features are used and where the app fails. (b) Session replay (Rejourney): a visual recording of how the app interface is used — screens visited, taps, scrolling and loading times. Your content is protected by design: photos and videos are redacted (blacked out) on your device before any recording leaves it, so your media is never included in a replay; text you type into input fields is masked; no precise location is collected; and replay data is only uploaded over Wi-Fi. Replay data is processed by Rejourney on GDPR-compliant infrastructure hosted in Germany, is not linked to your identity (no name, username or email address is attached to it), and is retained for a short period before automatic deletion. It is used exclusively to diagnose problems and improve the product — never for advertising, and it is never sold.

2.3 Face Recognition and Image Understanding

To power 'People' (grouping the photos where the same person appears) and text search inside your albums ('a photo of the beach'), our servers analyse the thumbnails of the photos you upload — never the originals. (a) Faces: a detector finds faces in each thumbnail and a neural network turns each face into a numeric vector (a 'face embedding') that lets us tell whether two faces look alike. These vectors are biometric-like data; they are stored only inside the album they came from, they are never used to identify you or anyone else outside Loomdy, and they are never shared or sold. Suggested groups of faces are shared with the members of that album; the names and relationships you assign to people ('Mom', 'Grandpa') are private to your account and are never shown to other members. (b) Image understanding: a second model turns each thumbnail into a vector describing what the picture shows, so you can search your albums with words. It does not identify people. Both processes run on our own infrastructure in the United States; no photo is sent to a third-party AI provider. Your choices: in the app, under Profile → Privacy & data → Intelligence in your photos, you can turn off face processing and/or image search for the albums you own. Turning a switch off stops new analysis immediately; data already computed is not removed automatically — use 'Delete my face data' on the same screen to erase, at once, your private people names and, for the albums you own, every face vector, face group and face crop. Photos uploaded to albums owned by someone else follow that owner's settings.

2.4 Importing from Google Photos

If you choose 'Import from Google Photos' inside an album, Loomdy asks Google for permission to see only the photos and videos you select in Google's own picker (the read-only scope photospicker.mediaitems.readonly). What we access: just the items you pick in that session (up to 50 per import) and the information Google provides with them — the file, its original filename, capture date and dimensions. We never see the rest of your Google Photos library, your albums, your contacts or your Google account data, and Google removes the location (GPS) from the photos it hands over. How we use it: the selected items are downloaded directly from Google to your phone and uploaded to the Loomdy album you chose, exactly as if you had picked them from your phone's gallery; from then on they are treated like any other photo in that album (see 2.3), visible to that album's members and deletable by you at any time. That is the only purpose. What we do not do: the access token Google issues stays on your device, is kept in memory only for the import and is never sent to or stored on our servers; the picking session is deleted at Google as soon as the import finishes or is cancelled; temporary copies on your phone are deleted when the import is cancelled and otherwise within 24 hours. We do not sell data obtained from Google, do not use it for advertising, do not transfer it to third parties except as needed to provide the import you requested or as required by law, and do not use it to develop, improve or train artificial-intelligence or machine-learning models. No person at Loomdy views it unless you ask us to (for example, in a support request), it is needed for security purposes or to comply with the law. Loomdy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy). You can withdraw this permission at any time from your Google Account (https://myaccount.google.com/permissions); photos you already imported remain in your album until you delete them.

3. Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Media you delete: when you delete a photo, an album or your account, the corresponding files are removed from our storage at once. Our storage keeps a protective copy of deleted objects for up to 7 days (this is what lets us recover from an accidental or malicious deletion); after that window the copy is permanently destroyed. What remains after account deletion: your login identifiers (e-mail addresses, phone numbers, social sign-ins), sessions, devices, password, date of birth, gender and country are deleted immediately; your first name, last name and profile picture are kept so that the members of albums you shared can still see who uploaded a photo or wrote a comment. If you prefer those to be removed as well, write to legal@loomdy.com and we will anonymise them. Deletion receipt: every account deletion produces a receipt with a random identifier that is not linked to you; it records what was destroyed and whether the storage clean-up completed, and you can check it at any time from the Loomdy app (Privacy & data → Deletion receipt → Verify a receipt), even after signing out — the check needs no account.

3.1 Your Data: Export and Deletion

You can download the original files of any album you belong to from the app (Album → Download): we prepare a compressed archive that stays available for 24 hours. From Profile → Privacy & data → Export all my albums you can request one archive per album you own, together with a summary file listing your albums, their members and roles. A single export of your whole account, including comments and stories, is being built and will be announced in this policy when available. You can delete individual files, whole albums, your face data (see 2.3) or your entire account from the app at any time; account deletion is immediate and irreversible.

4. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

5. Disclosure of Your Personal Data

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency). The Company may disclose Your Personal Data in the good faith belief that such action is necessary to: Comply with a legal obligation, Protect and defend the rights or property of the Company, Prevent or investigate possible wrongdoing in connection with the Service.

6. Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

8. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the 'Last updated' date at the top of this Privacy Policy.

9. Contact Us

If you have any questions about this Privacy Policy, You can contact us: By email: legal@loomdy.com