Privacy Policy

PalLoop helps friends run game nights: start a crew, track buy-ins and results, see who owes whom and settle up. This Privacy Policy explains what information we collect when you use the PalLoop app, the website at palloop.app and related services (together, the "Service"), how we use it, who can see it, and the choices and rights you have.

PalLoop is made by Superintelligent Labs ("we", "us", "our"). We are responsible for your information as described here (in European terms, the "controller"). If anything here is unclear, email support@palloop.app.

1. What we collect

Information you give us

• Your account: your name, email address and profile picture, and a nickname if you set one. If you sign in with Apple or Google, we receive the name and email address they share with us. If you sign up with email and a password, our sign-in provider (Supabase) stores your password in hashed form; we never see or store the password itself.
• Agreements: that you confirmed you are 18 or older and accepted these terms, and when.
• Groups and games: the groups you create or join and your role in them, game nights and schedules (including any place you type in for a game), RSVPs, who played, buy-ins, cash-outs, rounds, results, streaks and stats.
• Money between friends: who owes whom, what was marked as paid, and settlement history. PalLoop doesn't handle payments: you settle up with each other outside the app, and we never ask for your bank or card details.
• Things you share: group chat messages and reactions, photos and videos you add to a game night ("moments"), feature requests and comments, feedback, support requests, and reports about other people or content. Photos and videos are stored as you upload them, so any information inside the file (for example, where a video was taken, if your camera records that) stays with it.
• Questions you ask the assistant, and the text of voice commands if you use them (see section 3).
• People you invite: if you invite someone by email, we use their address to send the invitation, which shows your name. Only invite people who'd expect to hear from you.
• Waitlist and updates: if you leave your email on our website to hear about PalLoop, we keep the address, when you signed up, and your IP address and browser type, to send you updates and prevent abuse.
• Spotify: if you connect Spotify on the website to play music during a game, we store the access tokens Spotify gives us so we can control playback for you.

Information collected automatically

• Settings from your device: your time zone, language and region, so times, amounts and text show correctly.
• Error reports: when something goes wrong in the app, it sends us a report with the error, where in the app it happened, your account, and the platform and app version, so we can fix it.
• IP addresses and connection details: our servers see your IP address when you connect. We use it to keep the Service secure and to limit abuse, such as too many attempts in a short time. In our security and performance logs we store it only in a scrambled (hashed) form. We store it in full, with your browser type, on waitlist sign-ups, to prevent abuse.
• Website analytics: on the website (not in the iPhone app), we use PostHog to understand how pages are used and to find problems. This includes page views, clicks and recordings of browsing sessions, including when you're signed in. A recording shows what was on screen, which can include names, messages and amounts on the page.
• Notifications: if you turn them on, a push token from Apple or Google that lets us send notifications to your device, and the type of device.
• Replay page visits: when someone opens a replay page, we record the visit with their browser type and the page they came from.

Permissions on your phone. The app asks for access only when you use the feature that needs it, and you can change your mind in your phone's settings at any time:

• Microphone, for voice commands and the voice dealer.
• Camera, to scan invite QR codes and take photos for moments or your profile.
• Photos, to choose pictures and videos to share, and to save images you create to your library.

What we don't collect. We don't collect your precise location, your contacts, your phone number or your date of birth. We don't use advertising identifiers, we don't track you across other companies' apps or websites, and we don't buy information about you from anyone.

2. How we use your information

• To run the Service: your account, groups, games, balances, chat, moments, reminders, notifications and emails about your account and your groups.
• To power the features you use, including the AI features described in section 3.
• To keep PalLoop safe: to review reports, stop spam, fraud and abuse, enforce our Terms of Use, and protect accounts.
• To fix and improve the Service, using error reports and website analytics.
• To talk to you: to answer support requests, send service emails (such as invitations and sign-in and security messages), tell you about important changes, and send waitlist updates if you asked for them.
• To follow the law, keep financial records, and respond to lawful requests.

Legal bases (European Economic Area, UK and Switzerland). We use your information to provide the Service you asked for (performance of a contract); for our legitimate interests in keeping the Service secure, fixing and improving it, and preventing fraud, where those interests aren't outweighed by your rights; with your consent, for example for notifications, website analytics where consent is required, and waitlist emails, which you can withdraw at any time; and to meet our legal obligations.

3. AI features

Some features use AI models from other companies. When you use them, we send only what the feature needs:

• The assistant (Anthropic): your question, and the details needed to answer it, such as names, groups and game results. We keep your questions so the assistant can follow the conversation.
• PalLoop AI in group chats (Anthropic): when it's on for a group, recent messages in that chat, with the names of the people who wrote them, are sent so it can reply and help. It's on for new groups, and a group admin can turn it off in the group chat's settings.
• Recaps and captions (Anthropic): game results, names and details of the night, to write a recap.
• Voice commands (OpenAI and Anthropic): when you tap the microphone, your recording is sent to OpenAI to turn it into text, and the text to Anthropic to work out the action. We keep the text, not the recording.
• The live voice dealer (Google Gemini): only when this feature is turned on for your account. What's said at the table, and the players' names, are streamed to Gemini so it can turn speech into game actions.
• Feedback: feedback you send is sorted by an AI model (Anthropic) so it reaches the right place.

We don't use your content to train AI models, and we don't sell it to anyone who does. AI can make mistakes, so check anything important it suggests, especially amounts, before you rely on it.

4. Who can see your information

• People in your groups: your name, nickname and picture, the games you played in that group, your results and stats, what you owe or are owed in that group, and the messages and moments you post there.
• Other signed-in PalLoop users: anyone with an account can search for people by name and see your name, picture and level, so friends can find and invite you.
• Everyone using PalLoop: feature requests and comments you post, with your name.
• Anyone with a replay link: when a game ends, PalLoop makes a replay page for it that anyone with the link can open without signing in. It shows the players' names, results and moments and, unless the group turns off "Show $ amounts" in its settings, the amounts. Only share the link with people you'd show the game to.
• Anyone with a file's address: profile pictures, moments and images or videos made from a game are stored at web addresses that aren't password protected. Anyone who has the exact address can open the file.
• People you invite: your name, in the invitation.
• Our team: a small number of people can see account and group information to run the Service, answer your support requests, review reports and investigate abuse or security problems. This access is limited and logged.

5. Companies that help us

We share information with the companies below only so they can run parts of the Service for us, and only what they need. They may use it only to provide their service to us, under their terms with us.

• Supabase: our database, sign-in and file storage.
• Amazon Web Services: the servers that run PalLoop.
• Cloudflare: delivers our website securely and forwards email sent to our addresses.
• Anthropic: AI for the assistant, group chat AI, recaps, captions, voice commands and feedback.
• OpenAI: turns voice recordings into text.
• Google: Google sign-in, the Gemini voice dealer when it's turned on for you, the fonts on our website (your browser fetches them from Google, which sees your IP address), and the mailbox where email to our addresses arrives.
• Apple: Sign in with Apple and notifications on iPhone.
• Expo: delivers push notifications and app updates to your device.
• Resend: sends our emails.
• PostHog: website analytics and session recordings.
• Spotify: only if you connect it.

We may also disclose information:

• if the law requires it, or to respond to a valid legal request;
• to protect the safety, rights or property of our users, the public or us, or to prevent fraud or abuse;
• as part of a merger, sale or other transfer of our business, in which case the new owner must protect it as this policy says, and we'll tell you before it's covered by a different policy;
• with your permission.

We never sell your personal information, and we never share it for targeted or cross-context behavioural advertising.

6. Google sign-in and Google user data

You can sign in to PalLoop with your Google account. This section explains exactly what we get from Google and what we do with it.

• What we get: only your name, email address and profile picture, through Google's basic sign-in permissions (openid, email and profile). We don't ask for access to your Gmail, Google Drive, Calendar, Contacts or any other Google data.
• How we use it: to create your PalLoop account, sign you in, contact you about your account, and show your name and picture to other people as described in section 4. Nothing else.
• Who we share it with: Supabase stores it as part of your account. Your name may be included when an AI feature needs it, as described in section 3. We don't share Google user data with anyone else, except where the law requires it.
• What we never do: we never sell Google user data, use it for advertising or ad targeting, use it to build profiles for anyone else, or use it to train AI models. People on our team see it only to run the service and answer your support requests, to investigate abuse or a security problem, or when the law requires it.
• No images of people: PalLoop does not use Google APIs to create, edit or generate images of people, and never uses them for AI-generated intimate or sexual imagery of anyone.
• Gemini voice commands: if the voice dealer is turned on for your account, we send what's said during a game to Google's Gemini AI so it can turn it into a game action, such as adding a buy-in. We use the result only to run that game.
• Keeping and deleting it: we keep your Google name, email and picture only while you have an account. When you delete your account they are removed. You can also remove PalLoop's access at any time from your Google Account under Security, then Third-party apps and services.

PalLoop's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

7. How long we keep it

• Your account: until you delete it.
• Games, balances and settlements: kept as part of your groups' history, including after an account is deleted (see section 8), so everyone else's records still add up.
• Error reports: 90 days. Performance logs: 30 days. Security logs and records of our team's access: 1 year.
• Messages, moments, assistant questions, voice command text, feedback and reports: until they're deleted, or until you ask us to delete them.
• Waitlist sign-ups: until you ask us to remove you.
• Website analytics: as set in PostHog, and no longer than we need to understand how the website is used.

8. Deleting your account

You can delete your account at any time in the app under Settings → Delete account, or by emailing us from the address on your account. Here's how. When you delete your account:

• We remove your name, email address and profile picture (and the picture file), your notification tokens and settings, and any Spotify connection, and we delete your sign-in, so the account can't be used again. A device that's already signed in may stay signed in until its current session expires, which is usually within an hour.
• Your past games, results and balances stay in your groups' history under "Deleted User".
• Messages and moments you posted in groups, feature requests, feedback, reports, assistant questions and voice command text are not deleted automatically: they stay linked to the deleted account, not to your name. Email us and we'll delete them.

9. Your choices and rights

• Get a copy of your data: in the app, open Settings → Privacy → Export your data to download a file of your account, groups, games, settlements and recent messages. For anything it doesn't include, such as moments, assistant questions and feedback, email us.
• Correct it: edit your name and picture in the app, or ask us to correct anything else.
• Delete it: delete your account (section 8), or ask us to delete particular information.
• Control features: turn notifications and the microphone off in the app or in your phone's settings; group admins can turn off PalLoop AI for a group and hide amounts on replay pages.
• Stay safe: leave a group at any time, and block or report people, messages and moments from the app.
• Stop waitlist emails: email us and we'll take you off the list.

Depending on where you live, you may also have the right to object to or restrict how we use your information, to receive it in a portable format, and to withdraw consent at any time (which doesn't affect what we did before). We honour these requests wherever you live. To make one, email support@palloop.app from the address on your account; we may need to confirm it's you before acting, and we'll reply within the time the law where you live requires. You can ask someone to act for you, but we may ask them to show they have your permission. We won't treat you differently for using your rights.

United States residents. Laws in California and several other states give you the rights to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale, sharing for targeted advertising, and profiling. We don't sell or share personal information, don't use it for targeted advertising or profiling with legal or similarly significant effects, and don't use sensitive information to infer things about you. The categories we collect are listed in section 1, our purposes in sections 2 and 3, and the companies we disclose them to in section 5. If we deny a request, you can appeal by replying to our answer.

Europe and the UK. You can also complain to your local data protection authority. We'd appreciate the chance to sort things out with you first.

10. Security

Information travels between your device and our servers over encrypted connections, and our providers encrypt stored data. Access to personal information is limited to the people who need it and is logged. Passwords are stored only in hashed form. No service can be perfectly secure, so please use a strong password, keep your device locked, and tell us at support@palloop.app if anything looks wrong. If a security incident affects your information, we'll tell you and the authorities as the law requires.

11. Where your information is kept

PalLoop is run from the United States, and your information is stored and processed in the United States, including by the companies in section 5. Data protection laws there may differ from those where you live. Where the law requires, we rely on recognised safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

12. Age

PalLoop is for adults. You must be 18 or older to use it. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, tell us and we'll delete it.

13. Cookies and storage on your device

• Website: your browser stores your sign-in and your light or dark preference so the site works. PostHog uses cookies and browser storage for analytics (section 1). We don't use advertising cookies.
• App: the app stores your sign-in session, preferences, drafts and recent chats on your phone, so you stay signed in and it opens quickly.
• Because we don't track you across other sites, we don't change how the Service works in response to "Do Not Track" signals. We don't sell or share personal information, so there is nothing for a Global Privacy Control signal to opt you out of.

14. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect, and where the law requires, ask for your consent.

15. Contact us

Superintelligent Labs, maker of PalLoop. Email support@palloop.app with any question or request about your privacy or this policy.