Life, woven together

Privacy policy

Your household information belongs in your household.

Effective date and policy version: 2026-11-14. This policy covers Loom, Android package com.eyther.lumbridge, and its public policy pages.

Who is responsible

Loom is provided by its independent developer. Contact: eytherdeveloper@gmail.com. We act as the controller of the personal data described here.

Information Loom processes

• Account information: your email address, account identifier, display name and authentication/session information. Supabase Auth handles passwords and authentication; Loom stores sessions using the operating system's protected storage.
• Household information: household names, membership and roles, invitations, chosen currency and timezone.
• Shared content: shopping lists and items, reminder titles and schedules, expenses, participants and shares, repayment records, recurring schedules and monthly statement snapshots.
• Feed information: RSS/Atom subscription URLs and your article-read state.
• Device preferences: theme, analytics consent and notification preferences. Enabling push notifications registers a device token and platform with Loom for delivery. The Firebase Messaging SDK can initialize installation and delivery identifiers when the Android app starts, separately from optional usage analytics.
• Operational data: our hosting and infrastructure providers process request information, including IP addresses, timestamps and security/error logs, to operate and protect the service.

Why we use it

We process account and household data to provide the service you request, including authentication, household sharing, calculations, reminders, feed reading and exports. We rely on performance of our agreement for these functions, consent for optional analytics, and legitimate interests in service reliability and security. We may also process information to meet applicable legal obligations or respond to rights requests.

Optional Firebase Analytics

The Android app offers Google Firebase Analytics. Collection is off by default until you turn on Optional usage analytics in Settings. We log a limited set of screen names and successful feature-use events. Firebase also processes app and device information, a pseudonymous app-instance identifier, session information and approximate geographic information derived by Google from network requests. We do not attach your account ID, email, household identifier, shopping/reminder text, RSS URLs, expense amounts or financial records to analytics events.

Loom disables advertising-ID collection and advertising/personalization consent. The app has no advertisements. Analytics is currently available in the Android build. The public policy website contains no analytics scripts or advertising trackers.

Turn analytics off in Settings at any time to stop future collection and reset local analytics data and its app-instance identifier. Previously processed data follows the Google Analytics property's retention settings; aggregated reports may remain. Contact us about analytics data requests. Learn more from Firebase privacy information and Google's Privacy Policy.

Who can see information

Members of a household can see the content and financial records shared with that household, together with member display names. Treat shared lists, reminders and descriptions as visible to those members. You choose the people or apps that receive exported statements.

Supabase provides authentication, database hosting, server functions and related infrastructure. Google Firebase Cloud Messaging delivers Android notifications; Apple Push Notification service delivers iOS notifications. Notification messages may contain household content and may appear on a device's lock screen. Google processes optional Android analytics when enabled. GitHub hosts these public legal pages. These providers process information needed for their services; their documentation describes their locations and safeguards.

We do not sell personal data. We do not use your household content to target advertising. Information may be processed outside your country; applicable provider contractual safeguards and data-protection requirements apply to international transfers.

Retention and deletion

We keep active account information and household content for the service's operation. You can request account and associated-data deletion using Settings → Delete account and data, or the public deletion page. We verify requests and normally complete them within 30 days, or explain any lawful extension.

Deletion removes account credentials and identifying profile information, device registrations, personal notification preferences and personal article-read state. Household ownership may need to be transferred or a household you use alone removed. Shared records may be retained in pseudonymized form where a documented legal obligation or other lawful exception requires retention; we explain any retained information and the applicable reason when handling your request. You may also request redaction of personal information from shared content.

Provider backups and security logs can retain residual information until their normal retention periods expire. We do not return deleted identifying information to active use when restoring ordinary service backups. Data you exported or shared independently is controlled by its recipients.

Your choices and rights

You can withdraw optional analytics consent, manage notification permissions, switch households and export monthly statements. Depending on the law that applies to you, you may request access, correction, deletion, portability or restriction of your data, object to processing, and complain to your local data-protection authority. Contact eytherdeveloper@gmail.com; we may verify your identity before responding.

Age and security

Loom is intended for adults aged 18 or over. We use authenticated connections, household access controls and platform-protected session storage. No service can guarantee complete security; contact us if you believe an account or household has been compromised.

Changes

We update the effective date when this policy changes. Material changes will be communicated through the app or another appropriate channel. New optional data uses require an appropriate choice before they begin.