Loop is an app for photo feedback in private communities. The launch covers Israel, European Union member states and the United States. The first community is for women aged 18 and over; these are that community’s admission rules. Phone numbers supported for signup are from Israel, EU member states and the United States. A phone number’s country is not proof of where someone lives. This policy explains what information we collect, why, who handles it for us, how long we keep it, and what rights you have. It applies to the Loop app and to this site.
Who we are
Loop is operated by Roy Malka, an individual in Israel (not a company), who is the controller responsible for deciding why and how the personal information described here is used, including under the GDPR where it applies and Israel’s Protection of Privacy Law, 5741-1981. Our public contact address is Hayarkon 29, Tel Aviv, 90612, Israel. You can reach us about anything in this policy at support@myloop.club.
What we collect and why
You are not required by law to give us any of this information. Without the information marked "needed", though, we cannot review your application or run your account.
| Information | Why we use it |
|---|---|
| Phone number (needed) | To create your account and sign you in with a one-time code we send by SMS, and to keep to one account per person. |
| An account id the app creates (needed) | To tell your account and its data apart from everyone else's. It identifies your account and is personal information even though it does not contain your name. |
| Display name (needed) | Shown next to comments you write as yourself. You can change it in Profile. |
| Date of birth and your statement that you are eligible (needed) | To check completed age of at least 18 and review eligibility for the launch community. We use your full birth date for the age check without storing that date in your profile; we retain your birth year, the time and method of the check, and your eligibility statement. This is a self-declaration, not an independent identity check. The age gate uses a conservative global date cutoff, so access may begin later than local midnight on your eighteenth birthday. For a 29 February birth date, it uses 1 March in a non-leap year. |
| Instagram username and a screenshot of your own Instagram profile while you are logged in (needed) | Context for the moderator who reviews your application. We never ask for your Instagram password and we do not connect to your Instagram account. A private profile or a small following does not count against you. |
| Photos you post, your question and the answer options | To show your post to members for feedback and to show you the results. Each photo is resized and re-encoded on your phone before it is uploaded, which removes its metadata, including its location. When it is uploaded, each photo is checked automatically for explicit, violent or hateful content, and a photo that fails the check can't be posted. |
| Votes, comments and Helpful marks | To show results, to order comments, and to work out your contribution (the Helpful marks your comments received), which only you and moderators see. |
| Reports and blocks | To review reports and keep blocked members apart. |
| Feed activity: which posts you were shown, skipped, voted on or commented on | So the feed does not show you the same post again and can list your activity. Counted together with everyone else's, it also gives the team the pilot's numbers, such as how fast a new post gets its first vote. |
| Device information: an installation id the app creates, the platform (iOS or Android) and a push token | To send the few notifications Loop sends: your application decision, a suspension, your post's results, and a neutral update on your post if a moderator removes it. |
| Language preference | To show the app in Hebrew or English. |
| Crash reports | When the app crashes or hits an error, it sends a report with the error, the app version, the device model and the system version, so we can fix it. Crash reports are set up to leave out photos, screenshots and personal details. We use filtering to reduce personal information, but error details can still contain identifying information. Contact us if you believe a report includes information that should be removed. |
| Server logs | Records of requests to our servers (time, what was asked, the result, and the network address it came from), for security, preventing abuse and fixing faults. |
| Terms acceptance | We record the accepted version, language, time and a digest of the documents to maintain evidence of your agreement. These acceptance records are removed with your account. Creating an account administratively is not recorded as your acceptance. |
Why we may use personal information
Where the GDPR applies, the grounds below apply to the stated purposes. Accepting the Terms is not blanket consent to every use of personal information.
| Purpose | Legal ground |
|---|---|
| Set up and authenticate your account; provide posts, voting, comments, results, language preferences and support for these functions | Performance of our agreement with you, including necessary steps you ask us to take before joining (Article 6(1)(b)). |
| Check the adults-only and first-community admission rules using your age declaration and submitted Instagram evidence; prevent impersonation and duplicate or abusive accounts | Legitimate interests in admitting eligible people and protecting the reviewed community (Article 6(1)(f)). We balance these interests with your rights and the impact on you. |
| Moderate content, handle reports and appeals, enforce blocks and bans, and keep proportionate safety records | Legitimate interests in protecting members and other people, preventing misuse and reviewing decisions (Article 6(1)(f)). |
| Secure the service, investigate failures and use crash reports to maintain reliability | Legitimate interests in keeping the service safe and working (Article 6(1)(f)). We limit this use to service reliability and security. |
| Measure service performance from feed activity, such as the time to a first vote | Legitimate interests in understanding and improving the photo-feedback service (Article 6(1)(f)); the measures are not used for advertising or cross-service profiling. |
| Send optional service notifications you enable | Provide the notification feature you request (Article 6(1)(b)). You can turn notifications off in your device settings and still use Loop. Device permission is not consent to unrelated processing or to every international transfer. |
| Answer GDPR rights requests and comply with applicable EU or member-state legal duties | Compliance with the relevant legal obligation (Article 6(1)(c)). |
| Record the version, language and time of your agreement and the document digest | Legitimate interests in keeping accurate evidence of the agreement and resolving disputes (Article 6(1)(f)). These records are deleted with your account. |
| Respond to ordinary nonmember enquiries, investigate complaints, and establish, exercise or defend legal claims | Legitimate interests in answering requests, resolving disputes and protecting legal rights (Article 6(1)(f)), with access and retention limited to what is necessary. |
Consent, when a particular use requires it, must be separate and specific; it is not inferred from account creation or these Terms. You may object to processing based on legitimate interests as explained in Your rights.
What we do not do
- No advertising, and no selling or renting your information to anyone.
- No tracking across other apps or websites and no advertising tools. We measure activity within Loop as explained above.
- No face recognition or other biometric checks. During the pilot, every application is reviewed by a person, without an automated identity or selfie check.
- We never decide eligibility from the photos you post.
Sources of information and automated checks
Most information comes from what you submit and your use of the app. We also receive reports or correspondence from other people, information produced by our service providers, and moderator decisions. We do not log into Instagram or ask for your Instagram password.
A person reviews membership applications and disputed moderation decisions. Automated age validation can prevent an ineligible application; automated photo screening can stop an upload that is classified as prohibited content. These checks can make mistakes. Contact support@myloop.club to explain a suspected error and request human review. We do not use the photo classifier to decide whether you are a woman or to establish your identity.
Do not submit identity documents, medical information or unrelated sensitive details in photos, screenshots or messages. Photos and text can nevertheless reveal sensitive information. Posting something in a restricted community is not a statement that you want it made public or used for unrelated purposes.
Who sees what inside Loop
- Other approved members see your posts (photos, question and options) while they are open, without your name. They see your display name on comments you write as yourself, and no name on comments you write anonymously. They never see your phone number, birth year, Instagram details, contribution, or who reported or blocked whom.
- You see your own posts and their results after they close, until you delete the post or your account.
- Moderators, members of the Loop team, see your application (including the Instagram screenshot, through links that expire after a few minutes), reported posts and comments, who wrote an anonymous comment, reports and blocks, your contribution, and the moderation history of your account. They do not see your phone number. Every moderator action is recorded with who did it, when and why.
Photos load through short-lived links issued after an access check. Anyone who obtains an unexpired link may be able to open or forward it, including briefly after access changes. These links normally expire after two minutes. The app blocks screenshots and screen recording on the feed where your phone allows it. This makes copying harder but cannot prevent it, for example someone photographing the screen with another phone.
Who handles your information for us
We use these service providers. Their handling of information depends on the service and applicable terms. Providers and their personnel may process information outside the main hosting region.
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services (AWS) | Hosts our servers, database and photo storage; runs sign-in (Amazon Cognito) and sends the SMS codes; keeps server logs. Checks each photo you post automatically when it is uploaded (Amazon Rekognition), to detect potentially prohibited content. Provider retention and service-improvement use depend on applicable terms and account settings; we do not promise that the provider retains no data. | Main application hosting: Frankfurt, Germany. Some service operations and support may involve other countries. |
| Expo (650 Industries) | Delivers push notifications. It receives your push token and the notification's text. | United States |
| Apple and Google | Deliver push notifications to your phone, through Apple Push Notification service and Firebase Cloud Messaging. | Under their own terms |
| Sentry (Functional Software) | Stores crash reports. | Project region and provider operations depend on account settings and service terms. |
We may also disclose information when the law or a court order requires it, or when it is needed to protect someone's safety. If Loop is ever transferred to another operator, your information goes with it under this policy, and we will tell members in the app before the transfer takes effect.
Where your information is stored
Application hosting is configured for AWS’s Frankfurt region in the European Union. Roy operates the service from Israel, so authorised access and administration may occur in Israel. When you enable notifications, push tokens and notification text pass through Expo in the United States and Apple or Google for delivery. Notifications do not include posted photos or comments. Provider support, subprocessors and network services may involve additional countries.
You can ask support@myloop.club which countries, recipients and transfer arrangements apply to your information and request a copy of relevant safeguards, subject to appropriate redaction of confidential terms. Hosting in the EU does not mean that every recipient or access location is in the EU. We do not treat notification permission or acceptance of the Terms as blanket authorisation for international transfers.
How long we keep it
- Account details and the application record, including your Instagram username, age information and decision history: currently retained until account deletion unless removed earlier following a request or review. These records are separate from the screenshot. Accepted, rejected and abandoned accounts are not yet subject to an automatic age-based purge.
- Submitted application screenshots: the original and stored evidence copies are scheduled for removal 30 days after approval or 90 days after rejection, measured from the recorded decision time. This routine expiry does not cover applications still pending or awaiting resubmission. A specific, documented preservation hold may delay routine removal. Cleanup removes normal access first and retries failed storage deletions; an already issued link may work briefly until it expires.
- Uploaded photos and application screenshots that are ready but never used in a published post or submitted application: scheduled for removal seven days after processing finishes. Cleanup runs periodically and retries failed storage deletions, so removal may take longer.
- Published posts, photos and comments: until you delete them or your account. A post closes to other members after 24 hours. Deletion removes normal app access first; storage and sign-in-provider cleanup follow asynchronously. An already issued photo link may work until it expires.
- Votes and Helpful marks can remain in other members’ totals without an association to your deleted account.
- Reports, moderation actions and audit records: some account identifiers and decision history remain after deletion for safety, disputes and legal obligations. They are not necessarily anonymous. Unnecessary identifying text can be reviewed for redaction; there is currently no automatic fixed expiry for all these records. Contact us to request review of retained information.
- Ban enforcement after account deletion: a keyed code derived from the banned account’s phone number can recognise a later signup with that number. Each marker applies for 24 calendar months from its creation when that banned account is deleted, then stops blocking signup and is scheduled for removal. A specific preservation hold may retain the marker as evidence beyond that period, but does not extend its signup-blocking effect. This is pseudonymous information, not anonymous data. An active account’s ban is separate; expiry of a deleted-account marker does not itself reverse a moderation decision.
- Automated database backups are configured for seven days. Manual or final snapshots and lawful preservation may last longer. Backup erasure follows the backup lifecycle; deletion is not a promise that every backup copy disappears immediately.
- Server logs are configured for 30 days. Our crash-report retention target is 30 days; actual provider retention depends on the project settings and service plan. Necessary security or legal records may be preserved for longer with restricted access.
- Ordinary support correspondence: scheduled for manual removal from the support mailbox 90 days after the case closes. This is a manual process, not an automatic mailbox setting. Specific information still needed for an active dispute, safety case or legal obligation may be kept separately under documented, restricted preservation and review. Mail-provider backups follow their own lifecycle. You may request review or earlier deletion.
See Delete your account for the deletion process.
How we protect it
Information is encrypted when it travels between the app and our servers and when it is stored. Access is limited to the people on the team who need it, and every moderator action is recorded. Evidence from applications is only shown to moderators, through links that expire after a few minutes.
Your rights
Under Israel’s Protection of Privacy Law you can request access and ask for correction or deletion of information that is wrong, incomplete, unclear or out of date. You can change your display name in Profile and request account deletion.
If the GDPR applies, rights can include access and a copy, correction, erasure, restriction, portability of qualifying information, and objection to processing based on legitimate interests. You can withdraw consent for processing based on consent without affecting earlier lawful processing. Rights have legal conditions and exceptions. EU requests are normally answered within one month; if an allowed extension is needed, we explain it within that month. You can complain to a competent supervisory authority, including where you habitually live, work or an alleged infringement occurred, and seek a judicial remedy.
If a US state privacy law applies to Loop and your request, rights may include knowing or accessing the categories and specific information held, correction, deletion, a portable copy, limits on qualifying uses of sensitive information, and an appeal of a denial. You may use an authorised agent where permitted, and we may verify both your identity and their authority. We do not sell personal information, share it for cross-context behavioural advertising or use it for targeted advertising. We do not penalise you for exercising applicable privacy rights; deleting necessary account information may mean we cannot continue the account service.
Email support@myloop.club with your request and enough information to locate the account or content. No account is required to contact us. For an account request, its phone number helps; do not send sign-in codes or identity documents without agreeing a necessary secure verification step. We verify proportionately before disclosing data or changing an account. We aim to answer other requests within 30 days, subject to the applicable legal deadline. If we refuse or need more time, we explain the reason and any available review or complaint route. To appeal, reply with “Privacy appeal” and your request reference or original message. You may also contact Israel’s Privacy Protection Authority or the competent regulator or US state attorney general, as applicable.
Age
Loop is for adults aged 18 and over. The first community is for women. We do not knowingly admit anyone under 18. The age gate uses a conservative global date cutoff and may delay eligibility beyond local midnight on the eighteenth birthday; a 29 February birthday is treated as 1 March in a non-leap year. It checks the date you provide and cannot prove your identity or that the date is true. If we learn that an account belongs to someone under 18, we restrict access and arrange deletion, subject to lawful safety or preservation obligations. Members and nonmembers can report an age concern through the app or support email.
Changes to this policy
When we change this policy, we update the date at the top. For a significant change, we will let members know in the app before it takes effect.
Contact
Roy Malka (Loop), Hayarkon 29, Tel Aviv, 90612, Israel. support@myloop.club.
When you contact us
We process your email address, message, relevant account or content details and any necessary attachments to answer support, privacy, accessibility and safety requests. Our mailbox provider handles this correspondence. Avoid sending unnecessary sensitive information, other people’s details or copies of illegal intimate material. Information may be disclosed where legally required; we do not promise absolute confidentiality.