The '''Your Data''' screen is in the app under '''You → Preferences → Your Data''', and on the web under [https://loopa.mobieus.io/account/settings?tab=data Settings → Your Data]. It answers four questions about your own account, from your own account — not a policy describing what happens in general, but a live account of what is true for you.
== What is encrypted ==
The first section lists the kinds of information you have actually put into Loopa, grouped by how each one is protected. It only lists what you have: if you have never tracked a cycle, there is no cycle row.
There are two groups, and the difference between them matters.
'''Encrypted on our servers.''' Scrambled with a key of your own before it is written down. A stolen copy of our database is unreadable on its own, because the key that unlocks it is kept somewhere else. Your food diary, weight, vitals, measurements, cycle, supplements, activity, profile, coach conversations, habits and progress photographs are all here.
'''Stored as ordinary text.''' Kept unscrambled. Your fasting times, the meal plans and weekly insights we generate for you, photographs of meals you chose to keep, anything you post in the community, your subscription record and your account details are here.
In both cases a small number of Loopa staff can read it if they have a reason to — and the next section is where you see whether they did. We do not have encryption that puts your record beyond our own reach, and we would rather tell you that than let the word "encrypted" do work it has not earned. See [[Your data and privacy]].
== Who has looked at your information ==
Every time a '''Loopa Coach''' opens something of yours, that is recorded here with their name, the date, and which category they looked at. If you have never had a coach, this section is not shown at all.
Every time '''Loopa support or an administrator''' opens your record, that is recorded too — the date, what they looked at, and the reason they gave. You see their role, not their name. Somebody answering a support ticket should not become a target for having done their job; their identity is on our internal record.
If nobody has, it says so. That is the point of the section.
'''What it does not cover.''' Loopa's own software reads your data constantly to run the app — adding up your day, working out your streak, deciding when to remind you. None of that is listed, because there is no person on the other end of it. And an engineer working directly on the database is not captured by this list either; the honest answer there is who we let near a database, not a log. We say so on the screen rather than implying the list is complete.
It shows the last 90 days, with '''Show all''' for everything.
== Who you are sharing with ==
One list of everybody who can currently see something of yours, whatever route they got it by — an accountability partner, a challenge you joined, your coach, your family group's shared kitchen, or a pact you made. Each row says who they are, what they can see, and when it started.
Each row has a '''Stop sharing''' button. It takes effect immediately: by the time the screen refreshes, they no longer have access, including to anything they could see before. You never need the other person's agreement to stop — either side can end a sharing arrangement alone. They are told that sharing ended. They are not told why, and there is no box for you to explain yourself in.
'''Stopping a family share does not affect your Premium.''' Your household's shared kitchen list and your subscription are two separate things, and turning the first off does nothing to the second. Leaving the group entirely is different — that does end Premium coverage that came from the group.
== What leaves your device when you use AI ==
Each AI feature you have used, and when you last used it. Tap one to see exactly what it sends, which is the same list you were shown before you first used it. See [[AI and your information]].
== Getting a copy, and leaving ==
The last two sections are '''Export your data''' — we email you a link to everything you have ever put in — and '''Delete your account'''. Deleting destroys your encryption key, which makes everything you stored permanently unreadable, including by us. Cancel any App Store or Google Play subscription separately; we cannot do that for you. See [[Exporting your data]] and [[Deleting your account]].
== See also ==
- [[Your data and privacy]]
- [[AI and your information]]
- [[Exporting your data]]
- [[Deleting your account]]
The '''Your Data''' screen is in the app under '''You → Preferences → Your Data''', and on the web under [https://loopa.mobieus.io/account/settings?tab=data Settings → Your Data]. It answers four questions about your own account, from your own account — not a policy describing what happens in general, but a live account of what is true for you. == What is encrypted == The first section lists the kinds of information you have actually put into Loopa, grouped by how each one is protected. It only lists what you have: if you have never tracked a cycle, there is no cycle row. There are two groups, and the difference between them matters. '''Encrypted on our servers.''' Scrambled with a key of your own before it is written down. A stolen copy of our database is unreadable on its own, because the key that unlocks it is kept somewhere else. Your food diary, weight, vitals, measurements, cycle, supplements, activity, profile, coach conversations, habits and progress photographs are all here. '''Stored as ordinary text.''' Kept unscrambled. Your fasting times, the meal plans and weekly insights we generate for you, photographs of meals you chose to keep, anything you post in the community, your subscription record and your account details are here. In both cases a small number of Loopa staff can read it if they have a reason to — and the next section is where you see whether they did. We do not have encryption that puts your record beyond our own reach, and we would rather tell you that than let the word "encrypted" do work it has not earned. See [[Your data and privacy]]. == Who has looked at your information == Every time a '''Loopa Coach''' opens something of yours, that is recorded here with their name, the date, and which category they looked at. If you have never had a coach, this section is not shown at all. Every time '''Loopa support or an administrator''' opens your record, that is recorded too — the date, what they looked at, and the reason they gave. You see their role, not their name. Somebody answering a support ticket should not become a target for having done their job; their identity is on our internal record. If nobody has, it says so. That is the point of the section. '''What it does not cover.''' Loopa's own software reads your data constantly to run the app — adding up your day, working out your streak, deciding when to remind you. None of that is listed, because there is no person on the other end of it. And an engineer working directly on the database is not captured by this list either; the honest answer there is who we let near a database, not a log. We say so on the screen rather than implying the list is complete. It shows the last 90 days, with '''Show all''' for everything. == Who you are sharing with == One list of everybody who can currently see something of yours, whatever route they got it by — an accountability partner, a challenge you joined, your coach, your family group's shared kitchen, or a pact you made. Each row says who they are, what they can see, and when it started. Each row has a '''Stop sharing''' button. It takes effect immediately: by the time the screen refreshes, they no longer have access, including to anything they could see before. You never need the other person's agreement to stop — either side can end a sharing arrangement alone. They are told that sharing ended. They are not told why, and there is no box for you to explain yourself in. '''Stopping a family share does not affect your Premium.''' Your household's shared kitchen list and your subscription are two separate things, and turning the first off does nothing to the second. Leaving the group entirely is different — that does end Premium coverage that came from the group. == What leaves your device when you use AI == Each AI feature you have used, and when you last used it. Tap one to see exactly what it sends, which is the same list you were shown before you first used it. See [[AI and your information]]. == Getting a copy, and leaving == The last two sections are '''Export your data''' — we email you a link to everything you have ever put in — and '''Delete your account'''. Deleting destroys your encryption key, which makes everything you stored permanently unreadable, including by us. Cancel any App Store or Google Play subscription separately; we cannot do that for you. See [[Exporting your data]] and [[Deleting your account]]. == See also == * [[Your data and privacy]] * [[AI and your information]] * [[Exporting your data]] * [[Deleting your account]]
