LayloopPrivacy Policy
Layloop (“the app”) has no accounts, ads or tracking. The products and routine you add stay on your device (and in your iCloud if you turn it on) and are never sent to our server. Our server processes only what the AI features and abuse prevention need.
1. What we process and why
| Information | Purpose | Where | Retention |
|---|---|---|---|
| Products, ingredient lists, how you use them, check-offs, settings | Your routine, conflict checks, weekly schedule | Your device; your iCloud (Apple) if turned on | Until you delete it. Never sent to our server |
| Approximate location | Weather-adjusted routine | On your device, to Apple Weather (WeatherKit) | Never sent to our server |
| Photos of ingredient labels and barcodes | Reading the ingredient list and barcode | On your device only | Photos are not kept after reading |
| AI requests: product name and brand, unmatched ingredient lines and the ingredient text, the front photo you choose for Find by Photo | Matching ingredient names, finding ingredient lists online | Only with your consent, through our server to Anthropic (Claude) | Not stored or logged by our server. Location and other details are removed from the photo before sending |
| Device attestation: App Attest public key and counter, Support ID (a random value) | Confirming requests come from the genuine app on a real device; abuse prevention | Our server (AWS Seoul) | While we provide the service; deleted on request |
| AI usage count and a flag for devices that used up the free count (Apple DeviceCheck) | Free-use limits; preventing free uses from resetting on reinstall | Our server, Apple DeviceCheck | While we provide the service |
| Purchase verification: Apple transaction ID | Unlocking purchased features, handling refunds | Our server | While we provide the service |
| Server logs: request type and result, a hash of the user identifier, AI model, usage, cost, processing time | Operations, troubleshooting, cost control | Our server (AWS Seoul) | Deleted automatically after 3 months |
We don’t collect your name, email address or phone number. If you email us, we keep that email only to reply.
2. Service providers and international transfers
| Recipient | Role | Country | Data |
|---|---|---|---|
| Amazon Web Services | Server hosting | Republic of Korea (Seoul region) | Server items in section 1 |
| Anthropic, PBC | AI processing (Claude) | United States | AI request content |
Transfer to Anthropic: sent over an encrypted connection each time you use an AI feature. Anthropic processes and retains it under the Anthropic Privacy Policy and its commercial terms. If you don’t consent or withdraw consent (Settings › AI), nothing is sent and every other feature keeps working without AI.
Weather (WeatherKit), device attestation (App Attest, DeviceCheck), iCloud and App Store payments are provided by Apple and handled under the Apple Privacy Policy.
3. Sharing with third parties
We don’t share personal information with third parties except where required by law. We don’t give information to advertising or analytics companies.
4. Retention and deletion
Information is deleted once its retention period ends or its purpose is fulfilled. Server logs are deleted automatically after 3 months, and device information on our server is deleted on request. Data on your device is removed when you delete the app; iCloud data can be removed in iPhone Settings › Apple Account › iCloud › Manage Storage.
5. Your rights
You can ask to access, correct or delete your information, or to stop its processing. Email support@layloop.app with the Support ID from Settings › AI. You can withdraw consent to AI data sharing in Settings at any time. Depending on where you live (for example the EU, UK, Japan or Korea), you may also complain to your data protection authority.
6. Cookies and identifiers
Neither the app nor this website uses cookies or advertising identifiers.
7. Security
- All traffic is encrypted (HTTPS).
- Our server accepts requests only from the app verified with Apple App Attest.
- Secrets such as API keys are kept in AWS Secrets Manager, and server access is limited to the operator.
- Photos and AI request content are not stored on our server.
8. Children
The app is not directed at children under 14.
9. Contact
Privacy officer: Name · support@layloop.app
10. Changes
We’ll announce changes on this page and in the app 7 days before they take effect. If we start processing new kinds of information, we’ll ask for your consent again in the app.