Loopa Consumer Health Data Privacy Policy
Last updated: 5h ago
Loopa Consumer Health Data Privacy Policy
Effective: September 5, 2026 · Version 1.0
This is a separate document, and it is separate on purpose. Washington's My Health My Data Act requires a consumer health data privacy policy that stands on its own, reached by its own link, and it requires that the document contain nothing beyond what the consumer health data laws ask for. So this page covers consumer health data and only consumer health data. Everything else about Loopa is in the Loopa Privacy Policy, which is the longer document and the one to read for anything not covered here.
It applies to you if you live in Washington, Nevada or Connecticut. Nothing stops anyone else reading it, and nothing in it is less true elsewhere.
Loopa is operated by Mobieus Partners LLC.
1. What consumer health data we collect, and what we use it for
Everything here is data you enter, connect or ask for. Loopa collects no health information about you in the background.
| What we collect | What we use it for |
|---|---|
| Weight, height, age, sex, body measurements and progress photos | Working out your targets and showing you your own trend |
| Food and drink you log, including photographs of meals you choose to analyze | Counting calories, protein, carbohydrate, fat, fiber and fluid against those targets |
| Water and other fluid you log | Showing your daily fluid total |
| Activity, workouts, sets, reps and weights | Folding your training into the day and showing your records |
| Sleep, vitals, glucose and INR readings you enter or connect | Showing them back to you over time |
| Menstrual cycle entries, if you switch the tracker on | Showing your cycle and its phases |
| Fasting start and end times | Timing a fast you started |
| Medications and supplements you record, their doses, schedules and the times you log taking them | Reminding you, and checking the combination for interactions |
| Interaction alerts we derive from that list | Telling you what FDA product labeling says about a combination you are taking |
| Medication protocol records: the protocol types you switch on, compounds you name, doses, injection sites, symptoms, wellbeing check-ins, lab results and supply figures | Running the reminders, the timeline and the summaries you asked for |
| Bariatric and weight-management track records: procedure or route, dates, stage, supplement plan and tolerance notes | Showing the stage you are on and the plan attached to it |
| Conditions, allergies, intolerances and foods you never want suggested | Keeping them out of meal plans and warning you in the food log |
| What you write in a note, a symptom entry or a question for your prescriber | Storing it for you and putting it in a summary you generate |
| Any report or summary you generate for a clinician | Producing the file at the moment you ask for it |
We also collect the account and device information any app needs to work, and that is described in the Loopa Privacy Policy rather than here.
2. The manner in which consumer health data is processed
It is stored in a database we operate, in the United States. Every item listed above is encrypted at rest under an encryption key belonging to your account, except for a small number of fields that have to be readable for the app to function at all: the cadence of a reminder schedule, the route and body site of a protocol compound, your fasting times, your habit check-ins and the plans the app generates for you. None of those names a substance or an amount. The Loopa Privacy Policy §8 lists them in full.
It is processed to run the features you switched on, and for nothing else. It is not used to build a profile of you for anyone, it is not used for advertising, and it is not used to train anybody's model.
3. Where we collect it from
- You, through the app or the website.
- Apple Health or Android Health Connect, if you connect one and choose which kinds of data may pass.
- A connected device account you link yourself: Withings, Oura or iHealth.
- A file you import from another tracker.
- Your care team, where you accepted a protocol they sent you.
There is no other source. We buy no health data, and we receive none from a data broker, an advertising network or a social network.
4. What consumer health data is shared, and who with
We do not sell consumer health data. We have never asked anyone to authorize a sale, because there is nothing to authorize.
Sharing happens only where you switched it on, and every one of these is off until you do.
| Category of third party | What they receive |
|---|---|
| An AI provider (Anthropic, through its API) | Only when you use an AI feature, and only what that feature needs. Never your name, email address, username or account identifier. Never a photograph you took in the app. |
| A Loopa Coach, if you have one | Only the categories you switched on, one at a time, each shown to you before you turn it on. A protocol category shows a pattern, dose days and averages, and never a substance name, an amount, a lab value or a note. |
| Members of your Loopa Family Group, if you join one | Only a meal you choose to share, or the shared pantry if you opt in. |
| A clinician you send a summary to | Only the summary you generated, at the moment you generated it. |
| Our hosting and infrastructure providers | They store and transmit the encrypted record in the course of running the service. They do not use it. |
We share consumer health data with no affiliate, because Mobieus Partners LLC has none that processes it.
Collecting or sharing a category not listed here, or for a purpose not listed here, would require us to tell you first and obtain your consent.
5. Cross-site tracking
Third parties do not collect consumer health data across websites or over time when you use Loopa. The Loopa apps contain no advertising SDK and no third-party analytics that receives health data. Ordinary website analytics on our marketing pages is covered by the Loopa Privacy Policy and receives none of the data described in this document.
6. Your rights, and how to use them
If you live in Washington, Nevada or Connecticut you may:
- Confirm whether we collect, share or sell your consumer health data, and access it;
- Obtain a list of the third parties with whom we have shared it;
- Withdraw consent to our collection and to our sharing, separately;
- Have it deleted, including by our notifying anyone we shared it with;
- Review and request changes to what we hold, by correcting it in the app or asking us;
- Appeal a decision if we refuse a request.
How to make a request. Email privacy@mobieus.io, or use the request form. You can also delete your health record yourself at any time, in the app under More › Preferences › Your Data, and delete your whole account under More › Delete Account.
We answer within 45 days and may extend once by a further 45 days where a request is complex, telling you why before the first period ends. Two requests a year are free. If we refuse, we will say why and how to appeal; email privacy@mobieus.io with "appeal" in the subject and a different person will review it.
Withdrawing consent. Turning a feature off in the app withdraws consent for it from that moment. Deleting the data removes what was already collected.
7. Geofencing
Loopa does not use a geofence around any health care facility, or anywhere else. Neither app requests location permission, and the service contains no geofencing capability.
8. Changes to this policy
If we make a material change to this document we will tell you before it takes effect: by a notice in the app, by email, or both, and by updating the effective date at the top. A change that would widen the categories we collect or share, or the purposes we use them for, takes your consent as well as a notice.
9. Who to contact
Mobieus Partners LLC privacy@mobieus.io
Washington residents: this policy is published under RCW 19.373.020. Nevada residents: under NRS 603A.495. Connecticut residents: under the consumer health data provisions of the Connecticut Data Privacy Act.
