LoopHood Privacy Policy

Effective Date: November 22, 2025

Last Updated: October 2, 2026

Company: LoopHood, Inc., a Delaware Corporation

Address: 611 DuPont Highway Suite 102, Dover, DE 19901

1. INTRODUCTION

LoopHood, Inc. ("LoopHood," "we," "us," or "our") is committed to protecting the privacy and personal information of users of our community platform. This Privacy Policy describes how we collect, use, store, and protect personal information in connection with the LoopHood website (loophood.com), the LoopHood mobile applications for Android and iOS, and related services (collectively, the "Platform"), including our $GOT (Gift of Thanks) voluntary gratuity system.

This Privacy Policy applies to all users of the Platform and covers all personal information collected through the Platform, including financial information related to transactions and $GOT payments. By using the Platform, you consent to the collection and use of your personal information as described in this Privacy Policy.

We are committed to compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Illinois Personal Information Protection Act, and other relevant privacy regulations.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your name, email address, and password (or the sign-in details described in Section 2.4). You may also provide a phone number, ZIP code, city, and state. Where a feature requires it, we may also ask for your date of birth or address. For business accounts, we may collect additional information such as business name, tax identification numbers, and business addresses.

Profile Information: You may choose to provide additional profile information such as profile photos, biographical information, interests, skills, and preferences to enhance your Platform experience and help other users connect with you.

Identity Verification: To ensure Platform security and comply with regulatory requirements, particularly for financial transactions and the $GOT system, we may collect government-issued identification documents that you choose to upload. Social Security numbers and date-of-birth details required for background checks are entered directly with our background check provider (Checkr) and are not stored by LoopHood; we receive only the status and result of the check.

Financial Information: For payment processing, including $GOT transactions, we collect payment method information such as credit or debit cards, bank account details for payouts, and digital wallets (such as Google Pay and Apple Pay). Card and bank details are entered into and stored by our payment processor, Stripe; LoopHood does not store full card numbers and keeps only limited details such as the card brand and the last four digits.

Communication Content: We collect information from your communications on the Platform, including messages, reviews, comments, and dispute resolution communications. This information helps us provide customer support and maintain Platform safety.

Photos and Content: We collect the photos and content you add to the Platform, including listing photos, profile photos, photos attached to messages, and photos submitted as evidence for disputes or insurance claims.

2.2 $GOT System Information

The $GOT (Gift of Thanks) system allows users to offer a monetary budget when they cannot offer a service in exchange. It is strictly a voluntary offer system:

Offer-Based: $GOT is an amount a user offers to pay for help. Users may never "request" or "demand" $GOT; it must always be offered by the person seeking help.
Transaction Data: We collect payment and transaction information to facilitate these peer-to-peer monetary offers securely.
Tax Information: We collect necessary tax information from recipients of $GOT to comply with IRS reporting requirements for income received.
History: We maintain records of all $GOT offers and transfers for safety, dispute resolution, and platform analytics.

2.3 Information Collected Automatically

Device Information: We automatically collect information about the devices you use to access the Platform, including device type, operating system, browser type, IP address, and unique device identifiers.
Usage Information: We collect information about how you use the Platform, including pages and screens visited, features used, searches, listings viewed or saved, and interaction patterns.
Location Information: With your consent, we collect location information to provide location-based services such as local search results, delivery coordination, and community features.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your Platform usage, remember your preferences, and provide personalized experiences.
Third-Party Analytics: On our website, we use Google Analytics and Meta Pixel to understand how visitors engage with our website and to measure the effectiveness of our marketing. These tools use cookies to collect usage data. You can opt out of these cookies via our Cookie Consent banner. Our mobile apps do not include Google Analytics, Meta Pixel, or any advertising SDK. In-app usage events are recorded by LoopHood and may be processed by our analytics provider, PostHog, on our behalf.

2.4 Information from Third Parties

Sign in with Google or Apple: If you choose to sign in with Google or Apple, we receive your name, email address, and an account identifier from that provider. We use this information only to create and sign in to your LoopHood account. We do not access your contacts, files, or any other data in your Google or Apple account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Business Partners: We may receive information from business partners participating in our Loop Partner program, including information about redemption of Loops for local deals.
Payment Processors: We receive information from payment processing partners related to transaction processing, fraud detection, and compliance verification.
Background Check Providers: For certain Platform features, we may obtain background check information from third-party providers to ensure user safety and Platform security.

2.5 SMS & Phone Verification

LoopHood collects your phone number when you voluntarily choose to verify your phone on your profile page. We use your phone number solely to:

Send a one-time verification code (OTP) to confirm your phone number
Display a "Phone Verified" trust badge on your profile

We do not use your phone number for marketing, promotional messages, or any purpose other than account verification.

SMS Provider: Verification codes are delivered via Twilio, Inc. Your phone number is shared with Twilio solely for OTP delivery. See Twilio's Privacy Policy.
Message Frequency: One (1) message per verification request. No recurring messages.
Message & Data Rates: Standard message and data rates may apply depending on your mobile carrier.
Opt-Out: You may stop receiving messages at any time by replying STOP to any message. Reply HELP for assistance.
Data Retention: Your phone number is stored in your profile for the duration of your account. You may delete your phone number at any time from your profile settings. Upon account deletion, your phone number is permanently removed within 30 days.

2.6 Mobile App Permissions

Our mobile apps ask for the following device permissions. Each one is optional, requested only when you use the related feature, and can be turned off at any time in your device settings:

Location (precise and approximate): To show nearby listings and neighbors, display the map, autofill your ZIP code, and improve local matching. Location is collected only while you use the app, not in the background. Other users see only your approximate area unless you choose to show your exact location.
Camera: To take photos for listings, your profile, and issue reports, and to scan QR codes.
Photos: To let you choose images to add to listings, messages, your profile, and reports, and to save images (such as QR codes) to your device when you ask. We only access the photos you select.
Notifications: To send push notifications about messages, bookings, and account activity. We store a push notification token for your device and deliver notifications through Firebase Cloud Messaging (Google) and Apple Push Notification service.

Our apps do not access your contacts, calendar, microphone, call logs, or SMS messages.

2.7 AI Assistant (Robin Hood)

If you chat with our AI assistant, Robin Hood, the messages you send are processed by our AI provider, OpenAI, to generate replies. We keep a limited recent conversation history to provide context. Do not share sensitive personal information in these chats. OpenAI processes this data on our behalf and does not use it to train its models under our API terms.

3. HOW WE USE YOUR INFORMATION

3.1 Platform Operations and Services

We use your personal information to provide, maintain, and improve the Platform, including:

Account Management: Creating and maintaining user accounts, authenticating users, and providing customer support.
Transaction Processing: Facilitating marketplace transactions, rental agreements, delivery services, and gig economy connections between users.
$GOT System Operations: Processing voluntary gratuity payments, generating tax documentation, maintaining transaction records, and ensuring compliance with financial regulations.
Reputation Management: Operating the Loop Score reputation system to build trust and encourage positive community behavior.
Dispute Resolution: Providing the 2Court automated dispute resolution system to help resolve conflicts between users fairly and efficiently.
Community Features: Enabling communication between users, facilitating community building, and providing social features that strengthen neighborhood connections.

3.2 Safety and Security

Fraud Prevention: Detecting and preventing fraudulent activities, including abuse of the $GOT system and other Platform features.
Identity Verification: Verifying user identities to ensure Platform safety and comply with regulatory requirements.
Security Monitoring: Monitoring Platform usage for security threats, unauthorized access, and other safety concerns.
Compliance: Ensuring compliance with applicable laws and regulations, including financial regulations related to the $GOT system.

3.3 Communication and Marketing

Platform Communications: Sending important notices about your account, transactions, policy changes, and Platform updates.
Customer Support: Providing customer support and responding to user inquiries and concerns.
Marketing Communications: With your consent, sending promotional emails, newsletters, and other marketing communications about Platform features and partner offers.
Business Partnership Communications: Facilitating communications related to business partnerships and Loop Credit redemption opportunities.

3.4 Analytics and Improvement

Platform Analytics: Analyzing Platform usage patterns to improve functionality, user experience, and community engagement.
$GOT System Analytics: Analyzing $GOT transaction patterns to improve the gratuity system and enhance community economic benefits while maintaining user privacy.
Research and Development: Conducting research to develop new features, improve existing services, and better understand community needs.
Performance Monitoring: Monitoring Platform performance, identifying technical issues, and optimizing system reliability.

4. INFORMATION SHARING AND DISCLOSURE

4.1 Sharing with Other Users

Public Profile Information: Information in your public profile, including name, photo, and reputation scores, is visible to other Platform users to facilitate community connections and trust building.
Transaction Information: Limited transaction information may be shared with other parties to transactions to facilitate completion and provide necessary context for services.
Communication Content: Messages and communications between users are shared as necessary to facilitate Platform services and resolve disputes.
$GOT Transaction Information: Basic information about $GOT transactions (such as the fact that a gratuity was provided) may be visible to relevant parties, but specific amounts and financial details are kept confidential except as required for tax reporting.

4.2 Service Providers and Business Partners

Payment Processors: We share financial information with payment processing partners to facilitate transactions, including $GOT payments, while maintaining appropriate security measures.
Technology Service Providers: We share information with technology service providers who help us operate the Platform, including cloud hosting, analytics, and customer support services.
Business Partners: We may share limited information with business partners participating in our partnership program to facilitate Loop redemption and promotional activities.
Professional Services: We share information with legal, accounting, and other professional service providers as necessary for business operations and compliance.

Our main service providers are: Stripe (payments, payouts, and identity verification); Checkr and Persona (background checks and identity verification); Twilio (SMS verification codes); Resend (email delivery); Google Firebase and Expo (push notifications); Google Maps (maps and location features); Cloudflare (file storage and bot protection); OpenAI (AI assistant); PostHog (product analytics); and Google and Apple (sign-in). These providers may only use your information to provide services to LoopHood.

4.3 No Sale of Personal Information

We do not sell your personal information, and we do not share personal information collected through our mobile apps with third parties for advertising.

4.4 Legal and Regulatory Requirements

Legal Compliance: We may disclose information when required by law, regulation, or legal process, including compliance with tax reporting requirements related to the $GOT system.
Law Enforcement: We may share information with law enforcement agencies when required by law or when we believe disclosure is necessary to protect safety, prevent fraud, or investigate potential crimes.
Regulatory Authorities: We may share information with financial regulatory authorities as required for compliance with payment processing and financial services regulations.
Tax Authorities: We share tax-related information with appropriate tax authorities as required by law, including 1099 forms for $GOT recipients.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

5. DATA SECURITY AND PROTECTION

5.1 Security Measures

We implement comprehensive security measures to protect personal information, including:

Encryption: All sensitive information, including financial data related to $GOT transactions, is encrypted both in transit and at rest using industry-standard encryption protocols.
Access Controls: We maintain strict access controls to ensure that personal information is only accessible to authorized personnel who need the information to perform their job functions.
Security Monitoring: We continuously monitor our systems for security threats and unauthorized access attempts.
Regular Security Audits: We conduct regular security audits and assessments to identify and address potential vulnerabilities.

5.2 $GOT System Security

The $GOT system includes enhanced security measures specifically designed for financial transactions:

Payment Processing Security: All $GOT payments are processed through PCI DSS compliant payment processors with advanced fraud detection capabilities.
Transaction Monitoring: We monitor $GOT transactions for suspicious patterns and potential fraud while maintaining user privacy.
Financial Data Protection: Financial information related to $GOT transactions is subject to additional security measures and access restrictions.
Audit Trails: We maintain comprehensive audit trails for all $GOT transactions to support compliance and security monitoring.

5.3 Data Breach Response

In the event of a data breach that affects personal information, we will:

Immediately investigate and contain the breach
Notify affected users within 72 hours when required by law
Notify relevant regulatory authorities as required
Provide information about steps being taken to address the breach
Offer appropriate support and resources to affected users

6. YOUR PRIVACY RIGHTS AND CHOICES

6.1 Access and Control

Account Information: You can access and update your account information at any time through your Platform account settings.
Communication Preferences: You can control the types of communications you receive from us through your account settings or by following unsubscribe instructions in emails.
Location Sharing: You can control location sharing through your device settings and Platform privacy controls.
$GOT System Preferences: You can control your $GOT system preferences, including payment methods and notification settings, through your account dashboard.

6.2 Data Subject Rights (GDPR)

If you are located in the European Union, you have additional rights under the GDPR:

Right of Access: You can request information about the personal data we hold about you and how it is processed.
Right to Rectification: You can request correction of inaccurate or incomplete personal data.
Right to Erasure: You can request deletion of your personal data in certain circumstances, subject to legal and regulatory requirements.
Right to Restrict Processing: You can request that we limit how we process your personal data in certain circumstances.
Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
Right to Object: You can object to certain types of processing of your personal data.

6.3 California Consumer Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out: You can opt-out of the sale of your personal information (note that we do not sell personal information).
Right to Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.

6.4 Illinois Residents (BIPA & PIPA)

LoopHood complies with the Illinois Biometric Information Privacy Act (BIPA). As stated in Section 9, we do not directly collect biometrics. If third-party tools require it, you will be presented with a specific consent screen at that time.

6.5 Exercising Your Rights

To exercise your privacy rights, please contact us using the information provided in the Contact section of this Privacy Policy. We will respond to your request within the timeframes required by applicable law.

7. DATA RETENTION

7.1 General Retention Policies

We retain personal information for as long as necessary to provide Platform services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of information and applicable legal requirements.

Account Information: We retain account information for as long as your account is active and for a reasonable period after account closure to comply with legal obligations and resolve any disputes.
Transaction Information: We retain transaction information for at least seven years to comply with financial record-keeping requirements and support dispute resolution.
Communication Content: We retain communication content for a reasonable period to provide customer support and resolve disputes.

7.2 $GOT System Data Retention

Tax Records: We retain $GOT transaction information and related tax documents for at least seven years to comply with IRS record-keeping requirements.
Financial Transaction Data: We retain detailed financial transaction data related to $GOT payments for the periods required by financial regulations and payment processing compliance requirements.
Compliance Records: We retain compliance-related information for the periods required by applicable financial regulations.

7.3 Data Deletion

When personal information is no longer needed for the purposes for which it was collected, we securely delete or anonymize the information in accordance with our data retention policies and applicable legal requirements.

7.4 Deleting Your Account

You can delete your account and associated data at any time:

In the app: Settings → Delete Account.
On the web: visit loophood.com/delete-account or email privacy@loophood.com from the email address on your account.

When your account is deleted, we delete your profile (name, photo, bio, phone number, email, and location), your listings and their photos, your messages and chat photos, saved items and searches, notifications, device push tokens, reviews, uploaded identity-verification documents, and your saved payment cards. This is completed within 30 days.

We keep the following after deletion, without your name or contact details: payment, payout, and transaction records (up to 7 years, for tax, accounting, and anti-fraud obligations); records of completed exchanges and disputes, including dispute evidence; and digital files you delivered to buyers. Stripe and Checkr keep their own records as required by law under their own privacy policies.

8. INTERNATIONAL DATA TRANSFERS

LoopHood is based in the United States, and your personal information may be transferred to, stored, and processed in the United States and other countries where our service providers are located. These countries may have different data protection laws than your country of residence.

When we transfer personal information from the European Union to other countries, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure adequate protection of your personal information.

9. BIOMETRIC INFORMATION

9.1 No Direct Collection

LoopHood does not directly collect, store, or process biometric identifiers (such as retina or iris scans, fingerprints, voiceprints, or scans of hand or face geometry).

9.2 Third-Party Verification

We use third-party partners (such as Checkr or Stripe Identity) for identity verification and background checks. These partners may ask you to provide a selfie or scan your driver's license for fraud prevention.

By using these features, you expressly consent to:

The collection and processing of your biometric data by our third-party partners.
The terms of service and privacy policies of those partners (e.g., Checkr Privacy Policy).
The retention of such data for the period defined by those partners or as required by law.

10. CHILDREN'S PRIVACY

The Platform is not intended for use by children under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

11. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites and services that are not operated by LoopHood. This Privacy Policy does not apply to third-party websites and services, and we are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party websites and services you visit.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Platform and, where required by law, by sending you a notification.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. CONTACT INFORMATION

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise your privacy rights, please contact us:

LoopHood, Inc.

Privacy Officer

Email: privacy@loophood.com

Address: 611 DuPont Highway Suite 102, Dover, DE 19901

For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@loophood.com.

14. REGULATORY COMPLIANCE

14.1 Financial Privacy Regulations

The $GOT system is designed to comply with applicable financial privacy regulations, including:

Gramm-Leach-Bliley Act: We implement appropriate safeguards for financial information and provide required privacy notices.
Payment Card Industry (PCI) Standards: We comply with PCI DSS requirements for handling payment card information.
Bank Secrecy Act: We maintain appropriate records and reporting for financial transactions as required by anti-money laundering regulations.

14.2 State Privacy Laws

We comply with applicable state privacy laws, including:

Illinois Personal Information Protection Act: We implement appropriate security measures and provide required breach notifications for Illinois residents.
Other State Laws: We monitor and comply with privacy laws in states where we operate or have users.

14.3 International Privacy Laws

For users outside the United States, we comply with applicable international privacy laws and implement appropriate safeguards for international data transfers.

Please wait a moment