Privacy

LoopCut Privacy Policy

Last updated: 25 August 2026. LoopCut is designed so that sensitive phone-usage information stays on your device wherever possible. This policy describes the Android app and its connected services.

Contact support

Controller and contact

The data controller for LoopCut is Wei Zhang, Germany, operating the product as Cerevio Technologies. Privacy questions and rights requests can be sent to [email protected].

Data stored on your device

Guarded Apps, app-usage history, intervention history, typed intentions, Sleep Guard schedules, timer settings, and most preferences stay on your device by default. Uninstalling normally deletes local app data, subject to Android or device backup settings.

Account and purchase data

If you sign in with Google, LoopCut may process your email address, Google account identifier, display name, account status, and sign-in/security records. Premium features may require purchase tokens, subscription or entitlement status, and legally required payment records. Account processing supports the service contract; payment and tax records are processed for contract and legal obligations.

Partner referrals and eligibility

If you install LoopCut after using a Cerevio Partner link, LoopCut and the internal Cerevio Partner Platform may process referral click and installation evidence, app-authenticity results, account-creation timing, prior-purchase or restore eligibility, and a sanitized verified-purchase lifecycle state. This supports accurate referral attribution, prevents duplicate attribution or improper commission, and enforces the first-valid-attribution rule on the basis of our legitimate interests under Article 6(1)(f) GDPR. The keyed eligibility record is pseudonymous personal data. The Partner Platform receives only opaque or keyed references and allowlisted lifecycle fields—not your email, Firebase UID, Google account ID, raw purchase token or order ID, price, revenue, entitlement, or phone-usage data. Partners receive privacy-protected aggregates and never customer identity.

Reliability reports and optional analytics

Limited reliability reports may include app and Android versions, a broad device/manufacturer group, permission or setup status, failure step, error category, and technical diagnostics. Optional product analytics may include onboarding, permission flow, activation, Premium funnel, Sleep Guard use, language, and version data. Firebase Analytics stays disabled until you consent, and you can turn future collection off in Settings — Privacy & Data.

What is not sent for analytics

LoopCut does not send app or package names, websites or URLs, typed intentions, notification content, messages, browsing history, foreground-app history, screen text, passwords, contacts, call logs, precise location, advertising identifiers, or personal content for reliability reports or product analytics. LoopCut does not sell personal data or use advertising SDKs.

Service providers and international processing

LoopCut uses Google Sign-In and Firebase Authentication for accounts, Google Play Billing for purchases, and—with the relevant consent or control—Firebase Analytics, Google Analytics for Firebase, Google BigQuery, and limited reliability infrastructure. These providers may process data outside your country using applicable safeguards. LoopCut does not declare data sharing for advertising or sale.

Retention and deletion

Local data is normally removed when you uninstall. Account data is retained while the account is active and can be deleted in the app or by contacting us. Raw consented product-analytics events exported to BigQuery are retained for 90 days; longer-term tables are aggregated and designed to exclude user or installation identifiers and event-level timelines. Operational referral-attribution and sanitized purchase-binding evidence is retained for 18 months from the verified installation. A minimal keyed eligibility record is retained while the non-resetting existing-customer rule remains active, reviewed at least annually, and deleted or irreversibly anonymised 12 months after that rule or the partner program permanently ends, unless a documented legal hold requires longer. An account-deletion request removes the ordinary account and unnecessary mappings, but this minimal anti-duplication record may remain; you may object by contacting us. Purchase, tax, security, and legal records may be retained for the period required by law.

Support data and your rights

If you contact [email protected] or choose to send a diagnostic report, we use the information you submit to answer and troubleshoot your request. Depending on where you live, you may request access, correction, deletion, export, restriction, or object to certain processing. You may withdraw consent at any time; withdrawal stops future consent-based collection.

Android permissions and Accessibility Service

LoopCut uses Android permissions only to provide the protection features you choose. Its Accessibility Service is used for digital-wellbeing interventions and does not read screen content, text, interface labels, messages, passwords, or input, and does not record or transmit what you do inside other apps.