🔐 Privacy Policy

This Privacy Policy explains how Looppy ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our mobile application and website ("Looppy", the "Service"). We comply with the Swiss Federal Act on Data Protection (FADP / nFADP) and the EU General Data Protection Regulation (GDPR).

1. Who we are

Looppy is a Swiss marketplace platform operated from Switzerland. Contact: hello@looppy.ch.

2. Information we collect

Account information

• Email address, display name, and profile picture (optional)
• Password (stored hashed with bcrypt — we never see your plain password)
• Optional Sign in with Apple identifier

Listings & content

• Photos you upload, titles, descriptions, prices, categories
• Messages exchanged with other users via in-app chat
• Reviews, reports, and favorites

Location data

• Approximate location (canton/city) to show nearby listings — only when you grant permission
• You can disable location at any time in your device settings

Payment data

• Payments for boosts and premium features are processed by Stripe. We never store full card details — Stripe handles all sensitive payment info under PCI-DSS Level 1 compliance.

Technical data

• Device type, OS version, app version, language
• IP address (for security & fraud prevention only)
• Anonymous analytics (no third-party tracking SDKs)

3. How we use your data

• To provide and improve the Looppy Service
• To match buyers and sellers in Switzerland
• To process payments for boosts and premium features
• To prevent fraud, abuse, and scams
• To respond to support requests
• To send transactional emails (account, payment receipts, security)

We never sell your personal data to advertisers or third parties.

4. AI features

Looppy uses AI (OpenAI & Google Gemini via secure APIs) to generate listing titles, descriptions, price estimates, and translations. Only the content you submit (photo, title) is sent for AI processing. AI providers process your input transiently and do not use it to train their public models.

5. Sharing your data

We share data only with trusted service providers required to operate Looppy:

• Stripe — payment processing
• MongoDB Atlas (EU region) — secure database hosting
• Resend — transactional emails
• OpenAI & Google Gemini — AI processing
• Apple & Google — push notifications (no personal content)

All providers are bound by data protection agreements.

6. Where your data is stored

Your data is stored on secure servers in the European Union and Switzerland. We never transfer your data outside of Europe except to AI providers (transient processing only).

7. How long we keep your data

• Account data: as long as your account is active
• Listings: 90 days after deletion or sale
• Messages: 12 months after last activity
• Payment records: 10 years (Swiss accounting law)

8. Your rights

Under FADP and GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and personal data
• Export your data (data portability)
• Object to certain processing
• Lodge a complaint with the Swiss FDPIC or your local data protection authority

To exercise your rights, email us at hello@looppy.ch or use the "Delete my account" option in the app settings.

9. Children

Looppy is not intended for users under 16. If you are under 16, please do not use the Service.

10. Security

We protect your data with industry-standard measures: TLS 1.3 encryption in transit, encrypted database at rest, bcrypt password hashing, secure JWT tokens, and active moderation against abuse.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notice.

12. Contact

Questions or concerns? Email us at hello@looppy.ch.