This policy explains what information KumaPixel Inc. collects when you use D'Loop and dloopconnect.com, and how we handle it. We will never sell your information.
1. Information We Collect
Account information. When you sign up for D'Loop, we ask for your email address, a username, and a password, or we receive your name, email address, and profile picture from Google if you sign in with Google. That's so you can sign in, use D'Loop, and so we can send you essential information about your account. We also ask for your date of birth right after you create your account. We use it only to confirm that you are 18 or older, and it is always private: we never show it to other people. Once saved, your date of birth can't be changed in the app. If it's wrong, contact us to correct it.
Profile information. You can add a display name, profile photo, bio, city, region, neighbourhood, and interests. These are optional, and you can change or remove them at any time.
Activity and content. We store what you share and do in the app, such as posts, photos, comments, messages, the meetups you host or ask to join, the groups you belong to, your friends, and the people you block, so D'Loop can work as intended. Uploaded photos are automatically screened for inappropriate content.
Location. If you allow it, the app uses your device's location while you use it to show nearby meetups and places.
Safety and moderation. If you report content or another person, or if your content or account is reported, we keep the report, the content involved, and any action we take, such as removing content or suspending an account.
Technical information. Our servers record your IP address and basic request details to protect the service from abuse, such as through rate limiting, and to fix problems.
Support. When you contact us with a question or to ask for help, we will keep that correspondence and your email address for future reference.
We don't use advertising or analytics trackers in the app or on our website, and we don't build advertising profiles about you.
D'Loop is only for people 18 and older, and we do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will delete it. If you believe someone under 18 is using D'Loop, please contact us at privacy@dloopconnect.com.
2. Who Can See Your Information
- Your profile is visible to everyone on D'Loop or to your friends only, depending on your profile privacy setting.
- Meetup hosts and group admins can see your profile when you ask to join, and can see their meetup's attendees or their group's members. People attending the same meetup or belonging to the same group may see who else is taking part.
- Messages are visible to the people in that chat.
- Public meetups can be shared by link, and the link shows a preview of the meetup outside the app. Private meetups and other non-public content still require you to sign in.
Please think about what you include in your bio, posts, and photos. Anything you choose to share, including sensitive details such as your health, beliefs, or sexual orientation, can be seen by whoever can see that content.
Hosts, group admins, and other members are responsible for how they use information they get from D'Loop outside the app, for example if you share your phone number with them. This policy covers only how KumaPixel Inc. handles your information.
3. When We Share Your Information
The only times we'll ever share your info:
- With the people you choose to share content with in the app, according to your privacy settings, as described in section 2.
- With the service providers we use to run D'Loop, listed in section 6.
- To investigate, prevent, or take action regarding illegal activities, threats to the safety of any person, violations of our Terms of Service, or as otherwise required by law.
- If KumaPixel Inc. is acquired by or merged with another company, we will notify you before any info about you is transferred and becomes subject to a different privacy policy.
We may share statistics that are aggregated or anonymized so that they can't reasonably identify you, such as the number of meetups held in a city.
4. Your Choices
- Location. You can turn location access on or off at any time in your device settings. Without it, you can still search for meetups and places by typing a location, but nearby results may be less accurate.
- Camera and photos. The app asks for camera and photo library access only when you choose to take or upload a photo, such as for your profile, a post, or a group. We only receive the photos you pick, never the rest of your library. You can turn these permissions off at any time in your device settings, though you won't be able to add new photos without them.
- Profile visibility. In Privacy Settings, you can make your profile visible to everyone or to your friends only.
- Invitations and friend requests. You can choose who can send you friend requests, meetup invitations, and group invitations.
- Blocking. You can block someone to stop them from viewing your profile, finding you in search, sending you friend requests, or messaging you directly. Blocking does not remove either of you from groups, group chats, or meetups you share.
- Your content. You can delete your posts and edit your profile information in the app.
5. Your Rights With Respect to Your Information
- Right of Access. You can ask for a copy of the personal information we hold about you.
- Right to Portability. You can ask for the information you gave us in a structured, commonly used format.
- Right to Correction. You can update most of your information in the app, or ask us to correct it. Some details, such as your date of birth, can only be corrected by contacting us.
- Right to Erasure. You can ask us to delete your account and personal information, subject to limits under applicable law. You can't delete your account in the app yet. To delete it, email us at privacy@dloopconnect.com from the email address on your account.
- Right to Withdraw Consent. You can withdraw consent you've given, such as for location access, at any time. This doesn't affect anything we did before you withdrew it, and some features may stop working.
- Right to Complain. You can file a complaint with the Office of the Privacy Commissioner of Canada or your local privacy authority.
To exercise these rights, contact us at privacy@dloopconnect.com. We may ask for information to confirm your identity before acting on a request. We won't treat you differently for exercising your rights. If we decline your request, we'll explain why, and you can ask us to reconsider by replying to our decision.
6. Processors We Use
To the extent necessary to run D'Loop, we use a few third-party providers: cloud hosting for our servers and database, Cloudflare for photo storage and screening, Mapbox for maps and place search, and Google for Google Sign-In.
7. Law Enforcement
We won't hand your data over to law enforcement unless we are legally required to, such as by a court order, or in an emergency involving a risk of serious harm. Unless we're legally prevented from it, we will inform you when such requests are made.
8. Security
We use SSL/TLS to protect information in transit between your device and our servers. Passwords are stored hashed, never in plain text.
9. How Long We Keep Information
- Account, profile, and content: for as long as your account is active. Posts and comments you delete are hidden right away but kept until your account is deleted.
- Server logs and IP addresses: for a short period, unless we need them longer to investigate abuse or a security issue.
- Support correspondence: for as long as needed to help you and keep a record of past requests.
- Reports and moderation records: for as long as needed to keep D'Loop safe, which can include after an account is deleted, for example to stop a banned person from creating a new account.
When you ask us to delete your account, your personal information is removed from our active systems within 30 days and from our backups within 60 days, except for records we must keep for legal or safety reasons. Messages you sent to others may remain visible to them.
10. Location of Service and Data
D'Loop is operated by KumaPixel Inc. in Canada. Your information may be stored and processed in Canada, the United States, or other countries where our providers operate. By using D'Loop, you consent to this transfer.
11. Cookies & Third-Party Links
Our website doesn't use cookies for visitors. The only cookie is a strictly necessary session cookie used when our staff sign in to the admin area.
Meetups, posts, and messages may contain links to other websites or apps. Those services have their own privacy policies, and this policy doesn't apply to them.
12. Privacy Officer, Changes & Questions
Our Privacy Officer is responsible for how we handle personal information and can be reached at privacy@dloopconnect.com.
We may update this policy occasionally. We will notify you about significant changes in the app, by email, or by placing a prominent notice on our website.
Questions about this privacy policy? Get in touch at privacy@dloopconnect.com and we'll be happy to answer them.
Adapted from the Basecamp open-source policies / CC BY 4.0