Privacy Policy
Effective Date: June 2, 2025
1. Information We Collect
We may collect:
- Account information (email, username, password hash)
- User-generated content (Loofa content, submissions, images, text)
- Usage data (interactions, timestamps, behavior)
- Device and log data (IP address, browser type)
2. How We Use Data
We use data to:
- Operate and improve the Service
- Deliver Loofa pages and submissions
- Detect spam, abuse, and violations
- Enforce Terms and safety policies
3. Public Content
Loofa pages are public and accessible via QR code or link. Users should avoid sharing sensitive information they do not want publicly visible.
4. Private Submissions
Submissions are delivered privately to Loofa owners and are not publicly visible.
5. Image & Media Processing
When you upload or submit media, we may process it using automated systems and third-party tools for safety purposes, including:
- Detecting NSFW or prohibited content
- Detecting harmful or illegal material
- Using automated systems that may flag or review sensitive content
6. Data Sharing
We do not sell personal data. We may share data with:
- Cloud hosting providers
- Analytics providers
- Safety and moderation services
- Legal authorities when required by law
7. Data Retention
We retain data as long as necessary to provide the Service, while your account is active, or as required by legal or safety obligations. You may request deletion of your data.
Private submissions sent to a Loofa (including any attached files) are automatically and permanently deleted 60 days after they are submitted. Aggregate usage metrics (such as QR scan counts) are not affected by this and are retained separately.
8. Security
We use reasonable safeguards, but no system is fully secure.
9. Children's Privacy
Loofabag is not intended for or directed at children under the age of 13 (or 16 where applicable by local law, such as the EU/UK). We do not knowingly collect personal data from anyone under these ages. If we become aware that a user under the applicable minimum age has created an account or provided personal information, we will take steps to promptly remove the account and delete all associated data.
10. International Users
Your data may be processed outside your country (e.g., Canada, US).
11. Your Rights
Depending on your location, you may have rights to access your data, correct or delete data, or withdraw consent.
12. Changes to Policy
We may update this Privacy Policy. Continued use means acceptance of changes.