Privacy Policy

1. Scope

Looply complies with Québec’s Law 25 and the Canadian PIPEDA. Person responsible for the protection of personal information: [NAME, email].

2. Data collected

• Account: display name, username, password (hashed — never readable), role, profile picture.
• Usage: login logs (date, account) for security and statistics purposes; favourites, playlists, messages, and content you create.
• No banking data is stored by Looply at this stage (payments will go through a certified provider, e.g. Stripe).

3. Purposes

Providing the service (authentication, playback, social features), securing it, improving it (aggregated statistics), and, if you enable it, personalizing recommendations. No data is sold to third parties.

4. Sub-processors

Hosting: Railway (United States). Optional AI recommendations: Anthropic (requests only include the selected mood and the catalogue, never your identity). Third-party directories consulted: Radio Browser, Apple Podcasts, Jamendo, MusicBrainz.

5. Retention and security

Data is retained as long as the account is active, then deleted or anonymized. Measures: password encryption (bcrypt), signed sessions (httpOnly JWT), role-based access control, encrypted transport (HTTPS).

6. Your rights

Access, correction, withdrawal of consent, portability, and deletion: write to [privacy@looply.app]. You may file a complaint with the Commission d’accès à l’information du Québec.