Vidiloop is operated by Ploonu LLC (“we”, “us”). This policy explains what we collect when you use the Vidiloop app or website, why we collect it, who processes it on our behalf, and how you can get it deleted. We do not sell your personal information, and we do not share it with data brokers or advertising networks for cross-app tracking.

Information you give us

We collect your date of birth to enforce a minimum age and to set safety defaults. We store the date you provide; we do not ask for or retain identity documents.

Information collected automatically

Advertising and tracking

In the iOS app, free accounts see video and native ads served through Google AdMob. Vidiloop+ subscribers do not see ads.

To show ads, AdMob may use your device’s advertising identifier (IDFA) and related device and ad-interaction data. Because that identifier can be used to track you across other companies’ apps and websites, iOS asks for your permission first through App Tracking Transparency. If you decline, we and AdMob do not use your IDFA and you will see non-personalized ads instead. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking. Declining does not limit any other part of Vidiloop.

Apple’s SKAdNetwork is also used to measure ad installs in a way that does not identify you individually.

On the website (vidiloop.com). We do not currently serve ads on the website, and no advertising scripts or advertising cookies are loaded there. If we turn web ads on, we will first ask for your consent where the law requires it and update this policy before we do.

The website and installed web app

The website stores a small amount of data in your browser so the service works: your sign-in tokens and basic account details (in local storage, removed when you sign out), a flag that remembers you dismissed the install prompt (session storage), and a cache of images and app files so the installed web app loads quickly and works offline. These are needed to provide the service you asked for and are not used for advertising or cross-site tracking. You can clear them at any time in your browser settings. The website serves its own typefaces and does not load fonts from third parties.

Automated content safety

When you post a loop, still frames from it are scored by an automated classifier running on Cloudflare Workers AI to detect sexual content and graphic violence. Frames are sent for scoring and the resulting scores are retained with the post; the frames themselves are not retained by the classifier or used to train any model. Content above our thresholds is withheld pending human review, and content in a middle range may be shown behind a sensitive-content screen. You can appeal a decision by writing to support@vidiloop.com.

Who processes data for us

We use a small number of service providers, each acting on our instructions:

Vidiloop+ subscriptions

Purchases are made through your Apple ID. We receive from Apple, by way of RevenueCat, only whether your subscription is active and when it expires. We do not receive your payment method, billing address, or Apple account details.

If you subscribe on the web, payment is handled by Stripe and subscriptions are managed by RevenueCat. We receive only whether your subscription is active and when it expires. We do not receive your card number. Stripe and RevenueCat process your payment details under their own privacy policies.

Direct messages

Direct messages follow these rules, which our servers enforce:

How long we keep things

Deleting your account

You can delete your Vidiloop account from within the iOS app or the website under Settings → Account → Delete Account, or by writing to support@vidiloop.com. Deleting your account removes your profile, loops, comments, messages, and social graph from Vidiloop, and deletes your encoded video from our video provider. A 30-day grace period applies before permanent erasure so an accidental deletion can be reversed by contacting us.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to certain processing, and to complain to your local data protection authority. You can download a copy of your data from the website under Settings → Account → Download my data, or write to support@vidiloop.com and we will respond within the time your law requires. We will not treat you differently for exercising a right.

Children

Vidiloop is not for children. You must be at least 13 to create an account. We do not knowingly collect personal information from anyone under 13; accounts that report an age under 13 are refused at sign-up and no record is created. If you believe a child has an account, write to support@vidiloop.com and we will remove it.

Security

Traffic is encrypted in transit. Passwords are stored only as salted PBKDF2-SHA256 hashes. Sessions use short-lived access tokens with revocable refresh tokens. No system is perfectly secure, and we cannot guarantee absolute security.

International transfers

Vidiloop runs on globally distributed infrastructure, and your information may be processed in the United States and other countries where our providers operate.

Changes

If we change this policy materially, we will update the effective date above and notify you in the app before the change takes effect.

Contact

Ploonu LLC — support@vidiloop.com