Privacy & data choices

Your craft.
Your choice.

This notice describes the LoopCraft iOS private pilot and its hosted assistant. There is no advertising, tracking SDK or analytics SDK in the app.

On your device

Favorites, reading progress, counters, timer preferences, imported patterns, stitch charts and video downloads are stored locally. Private assistant access codes are stored in endpoint-scoped iOS Keychain, not in the app bundle. Photos are resized and re-encoded to remove metadata before sending. Choosing a photo alone does not upload it.

When you choose to connect

Hosted service and AI processing

The default service uses Cloudflare for HTTPS/network delivery and a Contabo-hosted server. Claude requests pass through the owner's private AI gateway. The LoopCraft API processes questions and photos in memory and does not intentionally store them in files or its quota database. Anonymous invitation subjects, request-attempt counts and timestamps are retained for up to 35 days for allowances; recent rate-limit timestamps are retained for one hour. The supplied service disables request access logs. Hosting, network and AI providers may process operational data, including IP addresses, under their own policies; we do not promise zero third-party retention.

Do not send sensitive personal information or images you do not have permission to share. AI responses and visual suggestions can be inaccurate.

Your choices

You can use written lessons and local tools without AI. Remove the photo before sending, cancel a pending request, remove the access code in preferences, delete imports and charts, or remove downloaded videos. A request already received by a provider may continue processing after cancellation. Contact the person who supplied your invitation for access revocation or questions about service-side records. This pilot's public operator contact details must be finalized before a public store release.

Notifications

Timer reminders are local and optional. iOS asks permission only when you enable them in the timer. No remote push registration or device token is used.