This policy explains what information Oruloop collects, how it's used, who can see it, and how you can access, correct, or delete it. "Oruloop," "we," "us," and "our" refer to the team behind the Oruloop app.
Information we collect
Account information: your email address (your login credential), phone number, display name, avatar initials, and avatar color.
Content you create or take part in while using the app, including any notes or details you write.
Push notification token: a device identifier used to deliver notifications to you, tied to one device at a time.
Technical information: our infrastructure providers (see "Third-party services" below) may automatically log standard technical data — like IP address, device type, and request timestamps — for security, reliability, and abuse prevention.
How we use your information
To provide the app: creating your account, syncing your content across devices, sending you the sign-in code you request, and delivering notifications you've enabled.
To connect you with people you choose to share activity with — your name, initials, avatar, and (where relevant) phone number are visible to people you're actually connected with in the app.
We do not sell your information, and we do not use third-party advertising or analytics services. If that changes, we'll update this policy first.
Who can see your information
Your name, initials, and avatar color are visible to other Oruloop users. Your phone number is visible only to people you're directly connected with in a loop, where it helps you recognize each other — it's never shown publicly.
Content you create follows the visibility you choose when creating it — private by default unless you choose to share it more widely.
Your email address is never shown to other users — it's your private sign-in credential, stored separately from your public profile.
Third-party services
Supabase hosts our database and handles authentication. Your account and content data is stored on Supabase's infrastructure (Southeast Asia region).
Resend delivers the email containing your sign-in code.
Expo's push notification service delivers push notifications to your device.
Each of these providers only receives what it needs to perform its specific function — we don't share your data with anyone else, and none of these providers are permitted to use your data for their own purposes.
Data retention and deletion
We keep your information for as long as your account is active. You can delete your account at any time from Settings in the app — this is immediate and irreversible, no waiting period.
Deleting your account removes your profile and personal data immediately. If you created or administer content that other people are still part of, that ownership passes to another participant so their history isn't affected — it's deleted outright only if you were the only person involved.
You can also request deletion by emailing us if you're ever unable to use the in-app flow.
Your rights
You can view and correct your profile information at any time in Settings.
You can delete your account and personal data at any time, as described above.
If you have questions about your data, or a request this policy doesn't cover, contact us — see below.
Children's privacy
Oruloop is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we'll remove it.
Security
We use reasonable technical safeguards to protect your information, including access controls on your data and encrypted connections between the app and our servers. No system is perfectly secure, and we can't guarantee absolute security.
Changes to this policy
We may update this policy as the app changes. We'll update the date at the top when we do — significant changes will be communicated in-app.
Contact us
Questions about this policy or your data:
privacy@oruloop.com