Looply data safety summary
What the current app processes. The developer must declare the final release accurately in Google Play Console.
Account and device data
Google account ID, email, display name, profile-image URL and user ID support accounts. Keyed device identifiers, device model, Android version and Integrity checks support registration and abuse prevention. Hashes are not anonymous data.
Testing and support activity
Listings, enrollments, readiness, daily check-ins, assigned-app foreground totals and credit records support testing coordination. Broad Android usage events are processed locally; the full event stream is not uploaded. Reports, blocks, notices, access issues and appeals support safety and service operation. Zoho Mail and Forms process information voluntarily submitted for support.
Optional sharing with a listing owner
Email-list testers explicitly choose whether to share their Play-account email with that listing's owner so the owner can add it to Play Console. Other testers and unrelated owners cannot read it. Owners also see participant names and testing progress. Looply clears shared emails when participation ends; external Play lists must be managed by the owner.
Service providers and independent services
Supabase handles authentication and backend data; Google handles sign-in and Play Integrity. Cloudflare hosts the website; Google Fonts and Zoho support tools process website-related requests. Group membership, Play opt-in and independent tested apps have their own data practices. Collection and sharing declarations must use Google's definitions, including applicable user-directed sharing and service-provider exceptions.
Security, choices and retention
Transport uses HTTPS; Android session credentials use secure storage. Access is checked on the server. Users can revoke Usage Access, decline notifications and request account deletion in the app, on this website or through support. Limited grant hashes, accounting events, other participants' independent histories and provider logs/backups can remain as described in the privacy policy. No advertising or analytics SDK is included in the current Android app.