Privacy Policy
This policy explains what data the Loom app and related web pages (the "Service", operated by UFIT Co., Ltd.) process, and how. The short version: your birth details stay on your device; our servers only ever see an anonymous four-letter code.
1. Data stored only on your device
- Your name (as you typed it), birth date, birth time, gender, and birthplace — used to calculate your Saju chart on-device. These are saved in local app storage and are never uploaded to our servers.
- Your ritual reflections and app preferences.
Deleting the app deletes this data. You can also re-weave (reset) from within the app.
2. Data our servers process
- Thread Code — an anonymous four-letter identity code (one of 150) derived from your chart. It is sent to our servers to generate reading text. It cannot be reversed into your birth details or identity.
- Reading responses are cached by code (not by person) to reduce cost.
3. Analytics
We use PostHog to understand aggregate app usage (screens viewed, feature usage, subscription funnel events) under a random identifier. We do not use advertising identifiers (IDFA/AAID), we show no ads, and we do not sell personal data or track you across other companies' apps.
4. Purchases
Loom+ subscriptions are processed by Apple App Store / Google Play and managed through RevenueCat, which processes purchase receipts and subscription state under a random app user ID. We never see your payment details.
5. Sharing
If you share your card, the link contains an obfuscated code slug — not your name or birth details. We share data only with the processors named above (PostHog, RevenueCat, Google Firebase for hosting/serving), and never sell it.
6. Data retention and deletion
On-device data lives until you delete it or the app. Server-side caches are keyed by anonymous code and periodically expire. Analytics data is retained under our PostHog project settings. For any deletion request or privacy question, contact us — we will respond within 30 days.
7. Children
The Service is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data.
8. Changes
Material changes to this policy will be posted here with a new effective date.