UnloopPrivacy

Privacy policy

Last updated: 11 October 2026.

In short: your records never leave your device. The one exception is the optional coach: if you open it and agree, the messages you type to it are sent to an AI service to get a reply (section 9). Otherwise we see only whether your Whop account bought Unloop, and the purchase details Whop shows sellers. No analytics, no ads, no tracking cookies; we never sell data.

  1. Controller. Unloop, support@gounloop.com, phone +31 6 2215 8382. We have no data protection officer.
  2. Data that stays on your device. Records and their times, check-ins, your plan, your starting answers, your age confirmation and settings are stored in your browser. The app never sends them to us, Whop or anyone. The only thing that can leave your device is what you type to the optional coach (section 9). We cannot see, restore or delete them. Settings lets you back up, restore or delete all data.
  3. Sensitive data and consent. Urge records, and even the fact that you bought Unloop, can reveal information about your sex life, which the GDPR treats as special-category data (Art. 9). So we process as little as possible and ask for your explicit consent in the app, with a separate box you tick yourself, before you sign in. You can withdraw consent any time: sign out of Unloop on the membership page, which stops purchase checks from that browser or home-screen app (sign out in each one you use), or email us. To remove the records on your device too, use Settings → Delete all data. This does not affect earlier processing. After that we keep only what section 8 requires, and paid access can no longer be checked.
  4. What we receive, why, and on what basis.
    • Sign-in and purchase check. Sign-in asks Whop only for openid and member:basic:read, not for your email address. Our server function receives your Whop user ID, sign-in tokens and the membership records Whop keeps for your Unloop purchase (such as status, plan and dates), and returns a signed access pass to your device (status, dates, a link to your Whop order, and a pseudonymous reference to your Whop account made by hashing your Whop user ID). No user database. Checks never contain your records. Purpose: unlocking what you paid for. Basis: contract (Art. 6(1)(b)); explicit consent (Art. 9(2)(a)).
    • Purchase details. Whop's seller dashboard shows us details such as your name, email address, order ID, the amount and the date of your purchase. Purpose: purchase, support, refunds, bookkeeping. Basis: contract (6(1)(b)); legal duties on refunds and tax (6(1)(c)); explicit consent (9(2)(a)).
    • Your emails (support, refunds): name, email address, order ID, content, date and time. Purpose: answering you, refunds. Basis: as for purchase details. Please do not send us your records.
    • Hosting. Cloudflare serves the app and runs our server function. It handles IP address, time, page and browser type to deliver the page and protect the service; our own service keeps no request logs. Purpose: security and a working service. Basis: legitimate interest (6(1)(f)). We do not use logs to profile anyone.
  5. Cookies and device storage. Two cookies, both needed for the sign-in you ask for, encrypted and unreadable by page scripts: your Whop sign-in (up to 30 days after its last renewal; removed at sign-out), and a 10-minute cookie during sign-in. Your device also stores the access pass and your records. The coach uses no cookie of its own: its small record is kept on our server (section 9). No analytics or advertising cookies.
  6. Recipients. Whop, Inc. (US): checkout, payment, your Whop account and sign-in, as an independent controller under its own privacy policy. Cloudflare, Inc. (US): hosting, and the coach's small record described in section 9, as our processor. Namecheap, Inc. (US), Private Email: support mailbox, as our processor. Anthropic, PBC (US): writes the coach's replies from the text you send to the coach, only if you use it. Authorities only when the law requires it.
  7. Transfers outside the EU. Whop, Cloudflare, Namecheap and Anthropic may process data in the US. Transfers rely on the EU-U.S. Data Privacy Framework where the company is certified, otherwise on the European Commission's standard contractual clauses. Ask us for details.
  8. Retention. Sign-in cookie: up to 30 days after last renewal, or until sign-out. Access pass: on your device until a newer check replaces it, you sign out with the Whop account that owns it, or you delete all data; it stops unlocking Unloop 30 days and 72 hours after the last successful check. Device records: until you delete them. Support emails: 12 months after our answer. Purchase and refund records: 7 years (Dutch tax law). Hosting: our service keeps no request logs; Cloudflare handles the technical connection under its own policy. Coach messages: we keep none. The coach record: the message count until 30 days after your coach days end; when your coach days started and how many days your bundle includes, kept after that so the days cannot start over. Whop: see its policy.
  9. The coach (optional). The coach is an AI, not a person, therapist or doctor, and it is for people 18 and over. Nothing is sent to it unless you open it, tick a separate consent box and press Send. What leaves your phone: only the messages you type to the coach, the last few turns of that conversation, and, if you switch on "Share my plan line with the coach", the one plan sentence the app shows you. Your records, dates, check-ins and starting answers are never sent. Where it goes: through our server function to Anthropic, PBC (US), whose AI service writes the reply. How long Anthropic keeps text it receives is set by its own terms and privacy policy. What we keep: we do not store your messages or the replies, we write no message text to logs and we keep no copy. The app does not save the conversation either: it is gone when you close the coach or reload. We keep only three numbers against a one-way code made from your Whop account, not your name, email or the account itself: when your coach days started, how many days your bundle includes (30 or 90), and how many messages you sent today. They make the daily limit and your coach days work, and they cannot be reset by clearing your browser. They are numbers, never text, and 30 days after your coach days end the message count is deleted; the start date and the number of days stay, so a bundle you already paid for cannot start its days again. Your coach days start the first time you open the coach after it launches. Purpose: answering you in the coach. Basis: your explicit consent (Art. 6(1)(a) and 9(2)(a)), because what you write can reveal information about your sex life. You can stop any time by closing the coach. Text already sent cannot be taken back from Anthropic.
  10. Your rights. Access, correction, deletion, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent. Email support@gounloop.com; we answer within one month and may ask you to show the Whop account is yours. Device data: use Settings. Whop account: contact Whop; we help if needed. No automated decisions.
  11. Adults only. For people 18 and over. If a minor bought Unloop, contact us: we refund and delete what we can.
  12. Security. HTTPS; tokens only in encrypted cookies; signed access passes; minimal sign-in permissions; no user database. Keep your phone locked and backups safe.
  13. Complaints. Contact us first. You may complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or your country's data protection authority.
  14. Changes. Shown in the app before they apply.