PRIVACY POLICY

Effective Date: 19-06-2026

This Privacy Policy explains how Loop ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and associated services. By authenticating and utilizing the Loop network, you explicitly consent to the data practices described in this document.

1. Information We Collect

To provide accurate technical matchmaking and automated assessments, we collect specific categories of data:

• Authentication & Identity Data: We utilize GitHub OAuth to verify identity. We collect your GitHub handle, public avatar URL, and a secure access token.
• Technical Telemetry (GitHub Data): We pull data from your public GitHub profile, including repository count, total stars, primary programming languages, and commit history to evaluate your technical stack (e.g., assessing proficiency in Data Structures and Algorithms).
• User-Provided Constraints: Information you explicitly provide to the system, including your training ground (college/university), available working hours per day, gender (for specific team requirements), and hackathon project details.
• Behavioral Data: We log your interactions within the Arena, specifically your right/left swipe decisions (applications and rejections) to manage the matchmaking ledger.
• Device Information: We collect Push Notification tokens via Expo and Firebase Cloud Messaging (FCM) to deliver real-time operational alerts to your specific device.

2. How We Use Your Information

Your data is strictly utilized to operate and secure the Loop network:

• AI Assessment Generation: To analyze your public code and generate a summary of your primary tech stack, assessment, and weekend build history.
• Vector Matchmaking: To convert your technical profile and project requirements into 768-dimensional mathematical vectors. These embeddings are used to calculate precise compatibility scores between developers and mission requirements.
• Communication: To notify you of inbound squad requests, application approvals, and mission terminations.
• Network Integrity: To enforce capacity limits on teams and filter out invalid or "ghost" profiles lacking demonstrable technical history.

3. Third-Party Data Processing

Loop relies on a heavily integrated, secure third-party infrastructure stack. Your data is transmitted to and processed by the following entities:

• Supabase: Acts as our primary backend infrastructure. Your profile data, project details, swipe history, and relational vectors (via pgvector) are stored securely in Supabase PostgreSQL databases. Supabase also handles the underlying GitHub OAuth state.
• Google Gemini AI: Your public GitHub data and user-provided project descriptions are transmitted to Google Gemini API models. This service is responsible for generating the natural language technical assessments and the mathematical vector embeddings required for the matchmaking algorithm.
• Google Play Services / Firebase: Utilized exclusively for routing and delivering secure push notifications to your device hardware.

4. Data Retention and Deletion (Burn Protocol)

You retain absolute control over your digital footprint within Loop. You can delete your data using either of the following methods:

Method 1: In-App Deletion (Instant)
Navigate to your Profile settings within the Loop app and execute the "Delete Account" function. This will immediately and permanently expunge your user profile, technical assessments, vector embeddings, active project postings, and swipe history from our Supabase servers. Push notification tokens are actively destroyed.

Method 2: Web Deletion Request (If App is Uninstalled)
If you no longer have the app installed and wish to purge your data, you may submit a manual deletion request. Email the developer directly at devanshgupta09072004@gmail.com with the subject line "DATA DELETION REQUEST". Include your exact GitHub handle in the email body. Your data will be manually expunged from our database within 7 days.

5. Security Protocols

We employ strict security measures to protect your telemetry. All network traffic is encrypted over HTTPS. Database interactions are protected by stringent Row Level Security (RLS) policies within Supabase, ensuring that users can only access or modify data authorized for their specific clearance level (e.g., founders modifying their own teams, users viewing matched profiles).

7. Child Safety and Exploitation Standards

Loop is committed to the protection of minors. We strictly prohibit the use of our platform for any activities related to Child Sexual Abuse and Exploitation (CSAE). We maintain a zero-tolerance policy regarding:

• The generation, distribution, or promotion of child sexual abuse material (CSAM).
• The exploitation, solicitation, or grooming of minors.
• Any content that depicts or encourages violence against minors.

We actively monitor platform activity for indicators of exploitation. Any account found to be involved in the abuse or exploitation of a minor will be permanently terminated, all associated data will be purged, and we will report such activity to the appropriate law enforcement authorities and the National Center for Missing & Exploited Children (NCMEC) where applicable.

7. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our backend architecture, third-party integrations, or legal obligations. We will notify you of any significant changes by updating the "Effective Date" at the top of this document and, where appropriate, through an in-app notification.

8. Contact Information

For inquiries regarding data privacy, compliance, or to request manual data deletion, please contact the developer directly via the details below:

• Developer Name: Devansh Gupta
• Developer Handle: @igdevansh09
• Contact Address: devanshgupta09072004@gmail.com
• Project Repository: LOOP