Privacy Policy

Information we collect

Account information: your email address (your login credential), display name, avatar initials, and avatar colour. We no longer ask for a phone number when you sign up. If you added one on an older version of the app, it is still on your account and you can ask us to remove it.

Activity you record: the loops you create or join, the challenges and targets you create or take part in, your daily check-ins and the dates and times of them, notes you write, lists you keep, the stakes you set, kudos you give and receive, and any photos you attach to a check-in.

Logs you choose to keep: readings you enter yourself, such as weight, body fat, muscle mass, waist, hip or BMI, and readings in any custom log you create, which can be anything you decide to track (for example a 5k time, a lift, sleep, heart rate, blood pressure or blood sugar). With the readings we store the goals you set for a log, how often you want to log it (its routine), any photo you attach to a reading, and any challenges you have hidden from a log. This is health related information, so we treat it carefully: it is private to you unless you choose to share a log, as explained below.

Body details, only if you add them: your height, birth year and sex. They are optional and never required. We use them only to work out the insights shown to you on your logs (such as BMI and the related ranges), and they are never shown to anyone else, not even to people you have shared a log with.

Readings a challenge asks for: a challenge can ask everyone in it to record a log, such as weight, with a photo at the start, at the end, and sometimes in between. Those readings and photos are saved into your own private log, exactly like readings you record yourself. The person who set up the challenge and the other people in it never see your readings or those photos.

Information we work out from the above: your streaks, points, rank inside a challenge, badges, weekly awards, your belt and your progress toward the next one (stripes, gradings and rest days), your Consistency Score and its breakdown, your life areas (how your targets spread across areas such as fitness, nutrition, finance and family), challenge recaps, and log insights such as trends, goal pace and BMI. These are calculated automatically from what you and the people in your challenges record, some of them on a nightly schedule. They are not based on anything we collect about you elsewhere, they are used only to show you (and, where this policy says so, the people in your loops) how things are going, and we do not use them to make any decision about you outside the app.

Anything you send us: messages you submit through the in-app feedback form, and emails you send to our support or privacy addresses.

Notifications: a push notification token (a device identifier used to deliver notifications to you, tied to one device at a time) and the notification settings you choose.

Time zone: your phone's time zone setting, so that reminders reach you at your local time. We do not collect your location, and photos are compressed on your phone before upload in a way that removes hidden details such as where they were taken.

Kept only on your phone: a few small settings, such as which tips you have hidden and which help answers you have read, are stored on your device rather than on our servers.

Technical information: our infrastructure providers (see "Third-party services" below) may automatically log standard technical data, such as IP address, device type, app version and request timestamps, for security, reliability, delivering app updates, and abuse prevention.

How we use your information

To provide the app: creating your account, syncing your content across devices, sending you the sign-in code you request, showing your challenges, streaks, belts, badges, logs and Consistency Score, running the scheduled jobs that close challenges and work out weekly results and belts, and delivering the notifications and reminders you've enabled.

To connect you with the people you choose to do things with, so that they can see your name, initials, avatar and, in your loops, your current belt.

To keep the app working and safe: fixing problems, delivering fixes to the app, preventing abuse, and responding when you contact us.

We do not sell your information, we do not use it to build advertising profiles, and we do not use third-party advertising or analytics services. We do not use your logs, readings, log photos or body details for anything except showing them back to you, showing them to the people you have chosen to share a log with, and working out the insights and challenge results described in this policy. If any of this changes, we'll update this policy first.

Who can see your information

People you share a loop or a challenge with can see your name, initials and avatar colour. People you share a loop with can also see your current belt.

Your challenge activity, including your check-ins, any photo you attach to a check-in, your points, your streak, your place on the leaderboard, the kudos you receive and who gave them, and any public award such as a weekly win, is visible to the other people in that challenge and to the members of the loop it runs in. That visibility is the point of a shared challenge, so please keep it in mind before joining one and before attaching a photo to a check-in.

When a challenge ends, your recap shows you your own numbers. Anything the whole loop sees from it is a total across everyone (such as how many check-ins the group made together), never one person's breakdown. Some weekly notes are shown only to the person they are about.

Logs, readings, log photos and goals are private to you by default. Someone else can see a log only if you share that log with them, and you can stop sharing it at any time. Your body details are never shown to anyone.

Your Consistency Score, life areas and log insights are shown only to you. The app may tell you where you stand among the people in your loops, but it never shows you anyone else's score.

Some older challenges are decided by results from a logged measurement. The app no longer offers this for new challenges. In those challenges the winner is worked out on our server, and the app shows who won and how much the winner's own reading changed. It never shows anyone's actual readings, and never anyone else's result or a ranking of results.

Anyone who has a loop's invite link or QR code can use it to join that loop, and will then see what its members share there, so only share it with people you want in the loop. Someone you already share a loop with can also add you to a new loop they create. You can leave any loop, and a loop's admin can remove people from it.

When you share something outside Oruloop, such as an invite link, a challenge link, a QR code, or a card about your week, your belt or a finished challenge, you choose where it goes, and from then on it is in the hands of that app or person, not ours. Log readings and body details are never put on a card made for sharing.

Your email address is never shown to other users. It is your private sign-in credential, stored separately from your public profile.

We do not verify anything anyone records, so information you see about another user in the app is what that person entered, not something we have checked. Please see our Terms of Service for what that means.

Third-party services

Supabase hosts our database, file storage and sign-in system, and runs the scheduled jobs described above. Your account, your content and any photos you upload are stored on Supabase's infrastructure in its Southeast Asia (Singapore) region, which means your information is stored outside India.

Resend delivers the email containing your sign-in code.

Expo delivers push notifications to your device (through Apple's or Google's notification service), and delivers fixes and updates to the app. When the app checks for an update, Expo receives standard technical data such as your IP address, your device platform and the app version.

Our website, oruloop.com, is hosted by Netlify and loads its fonts from Google Fonts, so those providers receive standard technical data, such as your IP address, when you visit it. The website does not use analytics or advertising cookies.

Each of these providers only receives what it needs to perform its specific function. We don't share your data with anyone else, and we don't sell it to anyone.

Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from Settings in the app. This is immediate and irreversible, with no waiting period.

Deleting your account removes your profile, your personal data, your logs, readings, goals and body details, and your belts and their history immediately. Every photo you uploaded, including check-in photos, log photos and any loop photo you added (even in a loop that carries on without you), is then erased from our file storage, normally within minutes. If you created or administer content that other people are still part of, that ownership passes to another participant so their history isn't affected. It's deleted outright only if you were the only person involved.

The same happens whenever a photo is no longer needed: when you remove or replace a photo, or delete a reading, a log, a challenge or a loop, the photo files that went with it are erased from our file storage too.

Backup copies we make to protect the service, for example before upgrading our database, may still hold your information for a limited time after you delete your account. We never use them to bring back a deleted account.

You can also request deletion by emailing us if you're ever unable to use the in-app flow.

Your rights

You can view and correct your profile information at any time in Settings, change your body details, and edit or delete the check-ins, log readings and other content you've created.

You can stop sharing a log, leave any loop or challenge, and turn notifications off in the app or in your phone's settings.

You can delete your account and personal data at any time, as described above.

You can ask us for a copy of the information we hold about you, or ask us to remove a specific piece of it, such as a phone number left over from an older version of the app.

If you have a question or a complaint about your data, contact us (see below) and we will respond. If you are not satisfied with our response, you may be able to complain to the data protection authority where you live, which in India is the Data Protection Board of India.

Children's privacy

Oruloop is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we'll remove it.

If you are between 13 and 18, please involve a parent or guardian before you record body measurements or photos in the app. Some challenge templates are made for families with children. A child under 13 must not have their own account, and a parent or guardian who records anything about a child in a challenge is responsible for what they record.

Security

We use reasonable technical safeguards to protect your information, including access controls on your data and encrypted connections between the app and our servers. Logs, log photos and body details are protected by access rules in our database and file storage, so that only you, and anyone you have shared a log with, can read a log, and only you can read your body details. No system is perfectly secure, and we can't guarantee absolute security.

Changes to this policy

We may update this policy as the app changes. We'll update the date at the top when we do, and significant changes will be communicated in-app.