Privacy policy
- Your audio files, albums, track lists and listening history are stored only on your device (browser storage) and, if you connect it, in your own Google Drive. Our servers never receive or store them.
- Our server (serverless functions) only exchanges Google sign-in codes and checks license keys, and does not store the tokens or keys it handles.
- No ads, no analytics, no tracking cookies.
- Payments are processed by Lemon Squeezy as the Merchant of Record.
1. What we process and why
| Category | Data | Purpose | Where it's kept |
|---|---|---|---|
| App data | Albums and track info, audio files, skip points, bookmarks, positions, settings | Running the app | Only on your device; we have no access. Kept until you delete it |
| Google connection (optional) | OAuth tokens, your Google account email address | Downloading the Drive files you pick, device sync, showing the connected account | Stored on your device. The sign-in code exchange and token refresh pass through our serverless function in transit only; nothing is stored or logged |
| Sync file (Pro, optional) | Album and track list metadata (no audio) | Seeing the same albums on several devices | The hidden app folder (appDataFolder) in your own Google Drive |
| License check (Pro) | License key, device name (e.g. iPhone-1a2b3c4d) | Confirming the purchase and managing device slots | Forwarded to Lemon Squeezy for verification. Our server doesn't store it and returns a signed receipt, which is stored on your device |
| Purchase | Name, email, payment method, country, order history | Payment, taxes, sending the license key, support and refunds | Processed and kept by Lemon Squeezy. We can see the buyer's email and order history in the seller dashboard and use it only for support and refunds |
| Access logs | IP address, request time, browser information | Operating the service and security (abuse prevention) | Standard logs processed by our host Cloudflare. To stop repeated attempts the functions keep IP addresses in memory for up to 10 minutes; we don't otherwise collect or analyze them |
| Support | Email address and message | Replying | Kept for 3 years after the reply, then deleted |
2. Google user data
If you connect a Google account, MyLoop requests only these permissions:
drive.file— reads only the files you choose in the Google file picker. Chosen audio files are downloaded directly from Google's servers to your device for playback and storage. Other Drive files are not visible to the app.drive.appdata— reads and writes one sync file (library.json) in the app's hidden folder.openid,email— show which account is connected in Settings.
Data received from Google is used only for these features. It is not sent to our servers, sold, used for advertising or shared with anyone. No human reads it (unless you show it to us in a support request, or it's needed for security or required by law).
MyLoop's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting: Settings → Google Drive → Disconnect revokes the token and removes it from the device. To delete the sync file left in Drive, go to Google Drive settings → Manage apps → MyLoop → Delete hidden app data. You can also remove access under third-party apps in your Google account.
3. Retention and deletion
- App data on your device is deleted immediately when you use Settings → Reset this device or clear the site's data in your browser.
- Our server keeps no personal data, so there's nothing to delete there.
- Payment and order records may be kept by Lemon Squeezy and us for the periods required by law (for example 5 years for contract and payment records under Korean e-commerce law).
4. Service providers and international transfer
We use the services below; data may be transferred over the network to servers in the United States and other countries.
| Recipient | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. | US and others | Access logs, serverless requests (sign-in code, license key, device name) | Website hosting, serverless functions | Per Cloudflare's policy |
| Lemon Squeezy, LLC | US | Purchase data, license key, device name | Payment (merchant of record), license issuing and checks | Per Lemon Squeezy's policy and applicable law |
| Google LLC | US | Google connection data | Google sign-in and Drive that you connect yourself (handled between you and Google) | Per Google's policy |
If you don't want any transfer, use only the free features without connecting Google or buying Pro; your app data then never leaves the device.
5. Cookies and tracking
MyLoop uses no cookies, advertising identifiers or analytics. Browser storage (IndexedDB, localStorage) is used only to keep what the app needs on your device (albums, audio, settings, sign-in state).
6. Your rights
You can access, correct or delete your data and ask us to stop processing it at any time. App data and the Google connection can be changed or deleted inside the app; send requests about purchase data to the contact below. Children under 14 need a parent's or guardian's consent to purchase.
7. Security
- All traffic is encrypted with HTTPS.
- Google Drive access is limited to the files you pick and the app's own folder.
- Our server has no database of personal data. License receipts are digitally signed to prevent forgery.
8. Contact
SeedAI Inc. · [email protected]
9. Changes
Changes to this policy are posted on this page with the effective date. Significant changes are announced 7 days in advance. If this English version and the Korean version differ, the Korean version prevails.