Privacy Policy

1. Introduction

LootLoop (“LootLoop,” “we,” “us,” or “our”) is a family chore and reward app. A parent or legal guardian creates a family account and sets up profiles for their children, who can then complete chores, earn and spend points, save toward goals, and log reading. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. Because LootLoop is designed for families with children, we have built it to collect as little information as possible and to keep that information private to your family.

2. Information We Collect

We collect only what is needed to run the app for your family:

• Parent account information— the parent's email address (used to sign in and to confirm the account), a display name, and an authentication password (stored only in hashed form by our authentication provider).
• Children's profile information — a display name the parent chooses (a first name or nickname is encouraged), an age mode(an age band such as 5–8, 9–12, or 13–15 that controls how the interface looks — not a date of birth), an optional avatar, and a numeric PIN the child uses to sign in on the family's device. PINs are stored only as a secure hash, never in plain text.
• App activity — chores, point and savings balances and their transaction history, reward purchases, reading logs (book title, minutes, date), and schedule items. This is the data the app exists to track.
• Diagnostic data — if the app encounters an error or crash, we collect technical diagnostics (error type, a code stack trace, app version, and device model) to fix problems. These crash reports are configured to exclude names, PINs, balances, IP addresses, and any other personal information.

We do notcollect children's contact information, precise location, or photos beyond an optional parent-chosen avatar, and there is no chat, messaging, or public profile in LootLoop.

3. How We Use Information

We use information solely to provide and operate the Service: to authenticate accounts, sync your family's data across devices, run the chore/points/rewards/savings/reading features, send essential account emails (such as sign-up confirmation and password resets), and diagnose and fix technical problems. We do notuse your or your children's information for advertising or marketing, we do not sell or rent it, and we do not use third-party advertising or analytics tracking.

4. Children's Data & Parental Consent (COPPA)

LootLoop is intended to be used by children under the supervision of a parent or legal guardian, and we comply with the U.S. Children's Online Privacy Protection Act (COPPA).

• Children cannot sign up on their own.Only a parent can create the family account and each child profile. All of a child's information is entered and controlled by the parent.
• Consent.By creating a family account and adding a child profile, the parent provides consent for us to collect and use that child's information as described in this policy, solely to provide the Service.
• Parental rights.A parent can, at any time, review their child's information in the app, correct it, stop further collection by removing the child's profile, and delete the child's data or the entire family account (see Section 6). To exercise any of these rights you can also contact us at privacy@lootloop.us.

5. How We Share Information

We do not sell or share your family's information with third parties for their own purposes. We use a small number of trusted service providers who process data only on our behalf and under confidentiality obligations, solely to operate the Service:

• Supabase— secure database, authentication, and backend hosting (stores your family's account and app data).
• Vercel — hosting for the LootLoop web app.
• Resend— delivery of essential account emails (e.g. sign-up confirmation, password reset) to the parent's email address.
• Sentry — error and crash diagnostics, configured to exclude personal information as described in Section 2.

We may also disclose information if required by law or to protect the rights, safety, and security of our users or the Service. Your family's data is isolated per family and is never shared with other families.

6. Data Retention & Deletion

We keep your information for as long as your account is active. You can delete an individual child's profile from the Kids screen, or your entire family account from Settings (Settings → Account on iPhone and iPad; Settings on the web dashboard), or by contacting us at privacy@lootloop.us. Deleting a family permanently removes the family's profiles and all associated app data from our active systems immediately. Residual copies may persist in encrypted backups for a limited period before being overwritten, after which they are permanently gone.

7. Security

We use technical and organizational measures to protect your information, including encryption in transit, hashing of authentication passwords and child PINs, and database-level access controls that isolate each family's data from every other family. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

8. Your Rights

You may access, correct, export, or delete your and your children's information at any time, and you may withdraw consent by deleting a child profile or your account. Depending on where you live, you may have additional rights under applicable privacy laws. To make a request, use the in-app controls or contact us at privacy@lootloop.us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here with a revised “Last updated” date and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or your family's data, contact us at privacy@lootloop.us.