Privacy notice

Data we collect

We collect the following personal data directly from you:

• Waitlist signups - your email address, when you join the waitlist.
• Feature requests - the title, description and email address you give when you request a feature. Your email address is never shown on the site, and we review a request before it appears. Feedback - the message you write and, only if you choose to give it, your email address. The forms ask you not to include personal health details.
• Votes on the roadmap - when you vote for a feature, the email address you enter and your IP address. Both are stored only as one-way hashes, so we cannot read them back, and an email address counts once for each feature.

We also collect the following data automatically, only where you have given consent:

• Analytics data - pages visited, approximate location, and device/browser type, via Google Analytics (GA4). This is only collected if you accept cookies - see our Cookie Policy for details.

Why we use it (lawful basis)

• Waitlist emails - legitimate interest / steps taken at your request, to notify you when Loomi becomes available.
• Feature requests and feedback - legitimate interest, to understand what people want from Loomi and, if you gave an email address, to reply to you.
• Votes - legitimate interest, to count each email address once for each feature and to stop vote manipulation.
• Analytics data - consent, given or withdrawn via the cookie banner at any time.

We also use limited technical data (such as IP address) for spam and rate-limiting protection on our waitlist, feedback, feature request and voting forms, on the basis of legitimate interest in keeping the site secure and usable. The request, feedback and voting forms also use Cloudflare Turnstile to tell people from bots. When one of those forms opens, your browser loads Turnstile from Cloudflare, which receives your IP address and some browser details to make that check.

How long we keep it

Waitlist data is kept only for as long as needed for the purpose it was collected for - typically until launch communications are sent - after which it is deleted unless we are required to keep it for a longer period by law. Feature requests and feedback, including the email address given with a request, are kept for as long as they are useful for planning Loomi, and are deleted on request. Votes are kept for as long as the feature stays on the roadmap. Analytics data is retained in line with our Google Analytics configuration.

Who we share it with

We use the following processors to run this website. None of them are permitted to use your data for their own purposes:

• Supabase - database hosting for waitlist signups, feature requests, feedback and votes.
• Vercel - website hosting.
• Cloudflare (Turnstile) - bot protection on the request, feedback and voting forms.
• Google (Analytics) - analytics processing, only after consent is given.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict or object to how we use your data
• Request a copy of your data in a portable format
• Complain to the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at: [email protected].

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date.