Legal
Privacy Policy
Effective and last updated: October 23, 2026
This Privacy Policy explains how FlowGPT Co. ("loopcat," "we," "us," or "our") collects, uses, discloses, and protects information when you use loopcat on the web at loopcat.ai, in the loopcat apps for Android and iOS, and in related services (the "Services").
1. Information we collect
Account information
When you sign in with Google, we receive your Google account identifier, name, email address, profile image, and email-verification status. When you sign in with Apple, we receive your Apple ID identifier and, if you choose to share them, your name and email address (which may be a private relay address created by Apple). If you use email sign-in, we process your email address and one-time verification codes. We never receive your Google or Apple password.
Profile and content
We collect information you choose to provide, including your display name, profile picture, and bio; if you give them, your gender, age range, and which characters you want to meet; your language; your Personas (name, gender, self-introduction, appearance, and any photo you upload); story prompts, choices, and messages; characters you create, with the text, images, and videos you upload for them; generated scenes, pictures, voices, and videos; saved stories, branches, captures, and Bond progress; and the reports, blocks, and feedback you send.
Voice input
If you hold to speak, your phone or browser first tries its own speech recognition, which is provided by your device's operating system or browser (for example, Google or Apple) under its own terms. If that is not available, the app or browser sends us a short recording, and we send it to a speech-to-text provider to turn it into text. We return the text to you and do not keep the recording or the text after the request is completed, except for temporary processing and security logs. In the apps, a recording is sent to us only if you have agreed to the AI notice.
Payment information
If you buy Bells or subscribe to loopcat VIP on loopcat.ai, our third-party payment processor collects your payment-card or other payment details, billing name, and billing address directly; we receive a payment token, the card brand and last four digits, the transaction amount, currency, status, and history. If you buy in the Android app, Google Play processes the payment; if you buy in the iOS app, Apple processes it. From Google Play or Apple we receive the order or transaction identifiers, the product, the price and currency charged, the purchase and renewal status, and whether it was a test purchase — not your payment details. We keep a record of your purchases and your Bells balance. We do not receive or store your full card number.
Usage, device, and technical information
We automatically collect service interactions such as stories opened or started, saves, dwell time, feature usage, playback, error and diagnostic events, approximate location inferred from IP address, browser or device information (such as device model, operating system, app version, language, screen size, and time zone), access times, and cookie, session, or app-installation identifiers (the apps create a random installation ID when first opened). To limit abuse of free Bells, we keep a salted hash of the network address an account was created from. We use interaction data to operate the Services, fix problems, and personalize recommendations; these events do not store the free text of your prompts.
Push notifications
If you allow notifications in the Android or iOS app, the app sends us a push token from Firebase Cloud Messaging (Android) or the Apple Push Notification service (iOS), together with your time zone and app version. We use them to send the notifications you allowed — for example, that your next scene is ready, or a daily check-in reminder — and to avoid sending them late at night in your time zone. You can turn notifications off in your phone's settings at any time. When you delete your account, we stop sending push notifications to your devices.
App integrity checks
In the Android app, when you sign in and for some actions (such as purchases, daily check-ins, and generating scenes), the app asks Google Play Integrity for a signed verdict and sends it to us with the request. The verdict tells us whether the request comes from a genuine copy of the app installed from Google Play on a genuine device. We use it to detect fraud and abuse and keep it in our security logs.
Advertising and attribution information
To measure our advertising, we and our measurement providers collect advertising and device identifiers (such as the Android advertising ID and an AppsFlyer ID), campaign and click identifiers, how you came to loopcat (referring and landing pages on the web; the Google Play install referrer in the Android app), IP address, browser and device information, and events such as account creation, checkout initiation, and completed purchases. Advertising measurement is currently on by default; see "Cookies, device storage, and identifiers" below for your choices. We do not include your story prompts, messages, or uploaded content in these advertising events.
Communications
We collect the information you provide when you contact support or send us feedback.
2. Google account data
loopcat requests only the standard Google sign-in scopes: OpenID, email, and profile. We use them to:
- authenticate you and protect your account;
- create and maintain your loopcat account and session; and
- display your name, email address, and profile image in account features.
We do not use Google account data for advertising, and we do not sell it. You can remove loopcat's access from your Google Account connections. Removing access does not by itself delete information already stored in your loopcat account; to delete it, delete your account in the app's Settings or at loopcat.ai/delete-account.
3. How we use information
- provide authentication, profiles, saved stories, media, generation, and other Service features;
- generate and personalize the stories, images, video, audio, and recommendations you request;
- verify and deliver purchases made through our payment processor, Google Play, or Apple;
- maintain, troubleshoot, secure, and improve the Services;
- measure advertising performance, attribute visits, installs, and conversions, and limit duplicate conversion reporting, unless you opt out;
- prevent fraud, abuse, harmful activity, and violations of our Terms, including by checking content for safety and checking that requests come from a genuine app;
- send the notifications you allowed;
- communicate with you about service, security, support, and policy updates; and
- comply with law and protect the rights, safety, and integrity of users, loopcat, and others.
We do not use your prompts, stories, or uploaded images to train generative models. We use aggregated, de-identified usage statistics to improve the Services.
4. How we disclose information
We do not sell your personal information. We may disclose information to:
- Service providers that support authentication, hosting, databases, cloud storage and delivery, email, push notifications, security, analytics, payment processing, and AI generation, safety checks, or transcription — including Google and Apple for sign-in, in-app purchases, push notifications, and app integrity checks. They may process information only to provide services to us under their applicable terms and safeguards.
- AI model providers. To write and voice your story, draw pictures, make videos, check content for safety, and turn speech into text, we send the parts of your information each step needs — such as what you type or choose, your Persona's details and photo, the story so far, and what you upload for a character you create — to the AI models that do it. Today these are models from Google (Gemini), OpenAI, Anthropic (Claude), and DeepSeek (including DeepSeek models hosted by Alibaba Cloud and Tencent Cloud); voice and speech-to-text models from ElevenLabs and Inworld; MiniMax video models run by fal.ai; for characters you create, ByteDance's Seedance and Seedream models, Seedance's reference-picture check (Huitang), and Mureka for music; safety-check models we reach through OpenRouter; and our own image and video models. We reach some of these models through our own model gateway and through resellers such as OpenRouter. The loopcat apps show this list and ask for your agreement before your first story.
- Advertising measurement providers, including Meta (on the web) and AppsFlyer (on the web and in the Android app), unless you opt out. AppsFlyer may send configured conversion postbacks to ad networks such as Google Ads. These providers process identifiers and conversion information under their own terms and privacy notices.
- Other players, when you make a character you created public: once we have reviewed it, other players can find and play it.
- Authorities or other parties when reasonably necessary to comply with law, legal process, or valid government requests; enforce our Terms; or protect rights and safety.
- Transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and notice where required.
- Other parties at your direction or when you otherwise consent.
6. Retention and deletion
We retain personal information for as long as needed to provide the Services, maintain your account, resolve disputes, enforce agreements, comply with legal obligations, and protect the Services. Retention periods vary by data type and purpose. Information may remain for a limited period in backups or when we must preserve it for legal, security, or fraud-prevention reasons.
You can delete your account yourself, at any time: in the app's Settings, or without the app at loopcat.ai/delete-account (we email you a code to confirm it is your account). Your account is permanently deleted right away, with no waiting period: you are signed out on every device, the account cannot be signed in to or restored, bots you published are taken off loopcat, and nothing in the account can be reached through the Services any more. Signing in again with the same Apple ID, Google account, or email address creates a new, empty account. What happens to the data stored with the account is described in the next paragraph. You may also request access, correction, or deletion by emailing loopcat@flowgpt.com. We may need to verify your identity before completing a request.
After your account is deleted, your profile (including your email address), Personas, characters you created, stories, uploads and generated media are automatically and permanently erased in a background process. You do not need to email us to start this. Erasure is not instantaneous; processing delays or failures may take additional time. We retain payment records with the account identifier removed, and payment providers retain their own records. Analytics events and advertising-measurement data already sent to our measurement providers are not deleted by this process, and copies may remain in backups. For questions about deletion or retained data, contact loopcat@flowgpt.com.
Deleting your account cancels a VIP subscription bought on loopcat.ai. It does not cancel a subscription bought through Google Play or the App Store: those are billed by Google or Apple, so cancel them in your store's subscription settings, or they keep renewing.
7. Security and international processing
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypting data in transit between the apps or your browser and our servers. No internet service is completely secure, and we cannot guarantee absolute security. loopcat and its providers, including the AI model providers described above, may process information in the United States and other countries whose data-protection laws may differ from those where you live.
8. 18 and over only
loopcat is intended only for adults who are at least 18 years old, and its stories can include mature themes. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us so we can investigate and delete it as appropriate at loopcat@flowgpt.com.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, or to withdraw consent. You may also have the right to appeal our response or complain to a local data-protection authority. To make a request, contact us at loopcat@flowgpt.com.
You can also review the AI notice in the app's Settings — in the iOS app you can withdraw your agreement there; loopcat cannot make stories without these AI providers, so you will need to agree again to keep playing — turn off push notifications or reset your advertising ID in your phone's settings, and delete your account as described above.
10. California privacy rights
If you are a California resident, the California Consumer Privacy Act gives you the right to know the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties we disclose it to; to delete personal information we collected from you; to correct inaccurate personal information; and to not be discriminated against for exercising these rights. We do not sell personal information. When advertising measurement is on (currently the default), our disclosure of online identifiers and conversion events to advertising measurement providers may be considered “sharing” for cross-context behavioral advertising under California law. You can opt out on the web by sending a Global Privacy Control signal, or by contacting us as described below. We have no actual knowledge of selling or sharing personal information of consumers under 16; loopcat is intended only for users age 18 or older.
In the preceding 12 months we collected the categories described in "Information we collect" (identifiers, including device and advertising identifiers and push tokens; account and profile information; content you submit; commercial information such as purchase history; internet or network activity; approximate geolocation from IP address; and audio if you use voice input) for the purposes in "How we use information", and disclosed them to the categories of service providers and AI model providers in "How we disclose information". Advertising and attribution information is disclosed to advertising measurement providers unless you have opted out.
To exercise your rights, email loopcat@flowgpt.com. We will verify your identity using information associated with your account and respond within 45 days, extendable once by a further 45 days with notice. You may use an authorized agent if you give the agent signed permission and we can verify your identity. If we deny a request, you may appeal by replying to our response. Under California Civil Code §1798.83 you may also request a notice of personal information we disclosed to third parties for their direct marketing; we do not make such disclosures.
11. Changes to this policy
We may update this Privacy Policy as the Services or law changes. We will update the date above and provide additional notice when required. Your continued use after the effective date is subject to the updated policy.
12. Contact us
Questions, complaints, or privacy requests can be sent to loopcat@flowgpt.com.
FlowGPT Co.385 14th Street, Apt 1502
Oakland, CA 94612, United States