Privacy Policy

GroupLoop is a private app for making plans with people you already know. The short version: we collect what the app needs to work — your name, your phone number, the contacts you choose to sync, and what you put in your profile — we don't sell it, we don't show ads, and you can delete your account and everything in it from inside the app at any time.

1. What we collect

• Account details. Your first and last name, your mobile phone number, and a password. We verify your number by texting you a one-time code; your password is stored only in encrypted (hashed) form.
• Profile content you add. Profile photos, your home city, interests (“bubbles”), Top Tens, movie reviews, and anything else you choose to put on your profile.
• Plans and activity. Events you create or are invited to, your RSVPs, photos you add to an event board, tags you apply to people in your circle, and feedback you send us.
• Contacts you choose to sync. Names and phone numbers from your address book, only after you say yes — see section 2.
• Off-app invites. When you invite someone who isn't on GroupLoop to a plan, we store their phone number with that invite so their RSVP can follow them if they later join. The invitation itself is sent by you, from your phone; we never text your contacts on our own.
• Device and diagnostic data. A push-notification token (if you allow notifications), and — when something crashes — a technical report with your device model, OS version, app version, the screen you were on, and your account ID. Crash reports never include your name, phone number, or contacts.

We do not collect your precise location, do not read your messages, and do not use advertising identifiers or any third-party ad or analytics trackers.

2. Your contacts, specifically

GroupLoop only works with people you actually know, so it needs a way to tell who from your phone is already here. When you tap Sync my contacts and grant permission, the app uploads the names and phone numbers in your address book to our servers and stores them, tied to your account. We use them to:

• show you which of your contacts are already on GroupLoop (matches are made on phone number, and are only visible when both people have synced each other),
• let you organize the people you know into groups and invite them to plans, and
• let you block someone from ever appearing in your GroupLoop.

Your synced contacts are yours. They are not shown to other users, not used to build profiles of people who haven't joined, not used for marketing, and never sold or shared with anyone outside the services listed in section 4. You can remove synced contacts, or delete your whole account, at any time from the app.

3. How we use it

• To run the app: create your account, keep you signed in, show your circle, and deliver plans, RSVPs, and photos to the right people.
• To send you notifications you've allowed — coordination around plans and, at most, a light weekly summary. You can turn these off in your phone settings at any time.
• To keep the app working: find and fix crashes, and prevent abuse.
• To improve GroupLoop, using what people actually use — never by selling or renting your information.

4. Who we share it with

We don't sell personal information, and we don't share it with advertisers. We use a small number of service providers who process data on our behalf, under contracts that limit them to doing so:

• Supabase — hosts our database, authentication, and file storage (United States).
• An SMS delivery provider — sends the one-time codes that verify your phone number.
• Expo — delivers push notifications to your device.
• Sentry — receives crash and error reports (section 1).
• Vercel — hosts this website and the shareable plan-invite pages.
• Apple — distributes the app through the App Store and TestFlight.

We may also disclose information if required by law or a valid legal request, to protect the rights and safety of our users, or as part of a merger or acquisition (in which case this policy continues to apply until you're told otherwise).

5. What other people can see

GroupLoop has no public feed and no search for strangers. Your profile — name, photos, home city, bubbles, Top Tens, and reviews — is visible only to people who are in your circle, meaning you have each other's numbers and have both synced. Plans, RSVPs, and board photos are visible to the people invited to that plan. Someone you invite off-app sees only the plan details on the invite page, not your circle.

6. How long we keep it

We keep your information for as long as your account exists. When you delete your account, your profile, synced contacts, tags, photos, reviews, and Top Tens are deleted from our systems, and your plans and RSVPs are removed from other people's boards. Encrypted database backups are overwritten on a rolling schedule shortly after. Crash reports are retained by Sentry for up to 90 days.

7. Your choices and rights

• See and edit your profile at any time in the app.
• Remove synced contacts or block someone from Profile → Synced contacts.
• Turn off notifications in your phone's Settings.
• Delete your account from Profile → Settings → Delete account. It's immediate and it's yours to do — no email required.
• Ask us anything, including for a copy of your data, at the address below. If you live somewhere with specific privacy rights (for example the EU/UK or California), you can exercise them the same way, and we won't treat you differently for doing so.

8. Security

Data travels over encrypted connections and is stored on encrypted disks. Access to your data inside our systems is limited by account — the database itself enforces that you can only read what you're allowed to see. No system is perfectly secure, so if you believe your account has been compromised, please contact us right away.

9. Children

GroupLoop is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, contact us and we'll delete it.

10. Changes to this policy

If we change this policy in a way that matters, we'll update the effective date above and tell you in the app before the change takes effect.

11. Contact us

GroupLoop Inc. · Raleigh, North Carolina
privacy@grouploop.app