Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account information: email address, password (encrypted), sign-in via Apple/Google if you choose that option
• Health information you log: medication type and dose, injection/pill timing and site, symptoms and their severity, weight, progress photos, water and protein intake, and any free-text notes you add
• Communications: messages you send to support

1.2 Information collected automatically

• Device information: device type, operating system, app version
• Usage data: which features you use and how often, crash logs, general performance data
• We do not use third-party advertising trackers, and we do not sell your data to advertisers

1.3 Information from third parties

• If you connect Apple Health or Health Connect, we import the specific data types you authorize (e.g. steps, weight) — you control this permission at any time in your device settings

2. How We Use Your Information

We use your information to:

• Provide the core functionality of the app (tracking, reminders, history)
• Generate pattern insights from your own logged data, using a third-party AI service (see Section 4)
• Generate the doctor-visit PDF report you request
• Process your subscription and payments
• Respond to support requests
• Improve app performance and fix bugs
• Comply with legal obligations

We do not use your health data to train AI models, and we do not sell your personal or health information to any third party.

3. Legal Basis and Special Category Data

Loopwell is operated by an individual established in Portugal, an EU member state. This means the EU General Data Protection Regulation (GDPR) applies in full to all our processing of personal data, regardless of where you as a user are located — not just for users in the EU/EEA. If you are in the UK, the UK GDPR applies alongside; if you are in the US, additional state laws (e.g. Washington My Health My Data Act, California Confidentiality of Medical Information Act) may also apply.

Information about your medication, symptoms, and health is a "special category" of data under GDPR Article 9. We process it only:

• With your explicit consent, given when you create an account and log information (GDPR Art. 9(2)(a)), and
• As necessary to provide the service you've asked for (GDPR Art. 6(1)(b))

You may withdraw consent at any time by deleting your account (Section 7).

Loopwell is a consumer wellness app, not a covered entity or business associate under HIPAA. Data you enter is not shared with your healthcare provider unless you choose to export and share a report yourself.

3a. Your Rights Under GDPR (EU/EEA and UK Users)

Because we are established in the EU, you have the following rights over your personal data, in addition to those listed in Section 6:

• The right to lodge a complaint with a supervisory authority. As our business is established in Portugal, our lead supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt. UK users may instead contact the Information Commissioner's Office (ICO) — ico.org.uk.
• The right to data portability — receive your data in a structured, machine-readable format (available via Settings → Export Data)
• The right to object to processing based on legitimate interest, where applicable
• The right not to be subject to a decision based solely on automated processing, including profiling — Loopwell's AI insights are informational only and never used to make automated decisions about you

4. Third-Party Service Providers

We work with a small number of service providers who process data on our behalf, under contractual confidentiality obligations:

We do not permit these providers to use your data for any purpose other than providing the service to us.

5. Data Storage and Security

• Your data is encrypted in transit and at rest
• Access to production data is restricted and logged
• We retain your data for as long as your account is active, plus a limited period after deletion for backup purposes (see Section 7)
• No system is 100% secure; we cannot guarantee absolute security, but we follow industry-standard practices appropriate for health data

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can also edit any entry directly in the app, at any time)
• Export your data in CSV or PDF format, from Settings → Export Data
• Delete your account and associated data, from Settings → Delete Account
• Opt out of non-essential communications
• Withdraw consent for optional integrations (e.g. Apple Health) at any time

To exercise any of these rights, contact us at support@myloopwell.com. We will respond within the timeframe required by applicable law.

7. Data Retention and Deletion

When you delete your account:

• Your logged health data is deleted from active systems within 30 days
• Backup copies are purged within 90 days
• We may retain minimal transaction records as required by tax/accounting law

8. Children's Privacy

Loopwell is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

9. International Users and Data Transfers

Loopwell is operated from Portugal (EU). If our service providers process data outside the EU/EEA/UK (for example, in the United States), we rely on appropriate safeguards required by law, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK's International Data Transfer Addendum, to ensure your data remains protected to EU/UK standards wherever it is processed.

10. Changes to This Policy

We'll notify you in-app or by email of material changes before they take effect. Continued use after changes take effect means you accept the updated policy.

11. Contact Us