Privacy Policy

Devon Büsser
Unterdorf 19
8752 Näfels
Schweiz
Email: [email protected]

Write to this address with any questions about your data or to exercise your rights.

Account

Your email address or phone number for logging in, your username, display name, profile picture and time zone.

Content

Your clips (video, with sound if you choose) including when they were recorded and their captions, reactions, and who has watched which clip. Daily videos are put together from your clips when you open them and are not stored permanently.

Friends and groups

Friendships and requests, invitations, groups and their members, and people you have blocked.

Settings and devices

Your reminders and notification settings (such as your waking hours), the devices you are signed in on (sessions) and, if you allow notifications, a push token for your device.

Login codes

The code you receive by email or text message to log in.

Reports

If you report a person or a clip, LoopCam stores who reported what, the reason and the reported content. The report is emailed to the operator so it can be reviewed.

Crash reports

If the app crashes, it sends the error message, the technical trace of the error (stack trace), the operating system and the app version. No clips or other content are included.

Server logs

Every request to the server generates technical data: IP address, time, the address requested, the server’s response, and your device and browser (user agent).

Contact matching

Only if you look for friends among your contacts: hashes of the phone numbers and email addresses in your address book (see below).

LoopCam+

LoopCam+ is planned and will be purchased through Apple or Google. LoopCam then only learns whether and until when your subscription is active. The operator never sees any payment details.

Only your friends see your status, and only for 24 hours. Clips in a group are only visible to its members. Your username, display name and profile picture are visible to others so they can find and invite you.

Videos are never public. They can only be accessed through links that expire after a few hours – and only people allowed to see the clip get such a link.

Under the FADP, no legal basis is required as long as the data protection principles are respected. For people in the EU and EEA, LoopCam relies on these legal bases under the GDPR:

• Contract (Art. 6(1)(b) GDPR): your account, logging in, your clips, friends, groups, daily videos, reminders and everything else the app does for you.
• Consent (Art. 6(1)(a) GDPR): push notifications, contact matching and recording sound with the microphone. You grant these on your device and can withdraw them there at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): keeping the service secure, preventing abuse and attacks, reviewing reports, fixing bugs using crash reports and server logs, and simple statistics from our own database, such as how many accounts are active.
• Legal obligation (Art. 6(1)(c) GDPR): where a law or an authority requires it.

If you look for friends among your contacts and allow access, the app calculates a hash (SHA-256) of each phone number and email address on your phone and sends only these hashes to the server. The server compares them with LoopCam accounts, shows you the matches and discards the hashes immediately. Nothing is stored, and names or other details from your address book never leave your phone.

To be honest: hashing is not anonymisation. Anyone who knows a number can calculate its hash. These are therefore pseudonymised data about your contacts – that is, about other people. That is why they are only used for this one comparison and never kept. Please only match contacts who you can reasonably assume are fine with it.

LoopCam does not sell data. To make the app work, these service providers process data on our behalf:

• Oracle Cloud (Oracle, USA) – servers and storage. The data is stored in the EU (Frankfurt) region.
• Cloudflare (USA) – network connection, protection against attacks and delivery of this website. Cloudflare sees IP addresses and requests.
• Infomaniak (Switzerland) – sending login codes by email.
• Twilio (USA) – sending login codes by text message.
• Expo (650 Industries, USA) – delivering push notifications.
• Apple and Google (USA) – the operating systems’ push services, the App Store and Google Play, and in future LoopCam+ purchases.

From a Swiss and EU perspective, the USA does not always offer an adequate level of data protection. Data is only transferred there to providers certified under the EU-US and Swiss-US Data Privacy Framework, or on the basis of the European Commission’s standard contractual clauses, which are also recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Other users see what you share with them (see “Who sees what”). Authorities only receive data where required by law.

• Clips, captions and reactions: until you delete them or delete your account. Your status is only visible to friends for 24 hours.
• Account, friends, groups and settings: until you delete your account.
• Sessions: expire after 90 days without use.
• Login codes: deleted after 24 hours at the latest.
• Push tokens: until you sign out on that device.
• Reports and crash reports: no longer than 12 months.
• Server logs: 30 days.
• Contact hashes: not stored at all.

If you delete your account, all your data is deleted immediately. It disappears from backups within 30 days at the latest. More on this under Delete account.

This website does not set any cookies. It only remembers in your browser whether you chose light or dark mode (for this visit) and whether you closed the hint about the English version.

The web app stores your login token in your browser (localStorage) so you stay signed in, and a queue of clips that haven’t been uploaded yet (IndexedDB). Both are needed for the app to work and are not used for tracking or advertising.

LoopCam shows no ads, sells no data and uses no third-party tracking or analytics services. There is no profiling and no automated decision-making that has legal or similarly significant effects on you.

All connections are encrypted (HTTPS). Logging in works without a password, using codes that are only valid for a short time. Only the operator has access to the servers.

You must be at least 16 to use LoopCam. If the operator learns that an account belongs to someone younger, it will be deleted.

You have the right to access your data, to have it corrected or deleted, to receive it and have it transferred (data portability), to restrict processing and to object to processing based on legitimate interests. You can withdraw your consent at any time with effect for the future.

Much of this can be done directly in the app under Settings: export all your data, change your profile, sign out other devices, block people and permanently delete your account and all your clips. For everything else, write to [email protected].

You can also lodge a complaint with a supervisory authority: in Switzerland with the FDPIC (edoeb.admin.ch), in the EU with the data protection authority in your country.

If LoopCam changes, this policy will be updated. The app will let you know about important changes. The current version on this page applies.

This policy is available in German and English. The German version is binding.