Privacy Policy
Effective November 4, 2026
Private testing phase
Loomda is in a private, invite-only testing phase. It is set up and supervised by a parent or guardian on behalf of their own child — it is not offered directly to children.
You can also look around without an account (“Try without an account”). See Visitor mode below for what happens to that data.
Who we are
Loomda decides how this data is used. Reach us at hello@loomda.app.
What we store
When you use Loomda, we store in our database:
- Your email address, used to sign you in (if you sign in with Google, Google tells us your email and name)
- Each child's first name, chosen character, the language you pick for them, and PIN if you set one, plus your own parent PIN if you set one (both stored scrambled, so we can't read them), and the age or grade you give when setting up a course
- Course plans, the notes you add for the tutor (each new note is checked by AI first, and one the tutor can't follow isn't saved), and your tutor settings. For a custom course, also the topic you describe and the lessons written for your child, saved so they load quickly.
- Your child's lessons: their answers and taps, the questions they ask the tutor and the tutor's replies, and the summaries written for you
- Badges, stars and progress, and the home color and title your child picks from what their stars unlocked
- The buddy your child picks and the gear it wears, kept with your child so it shows on any device
- Safety alerts: if something your child writes looks like distress or an unsafe request, a short excerpt is saved so you can see it on your child's Progress page
- The devices you link for your child: the name you gave each one, when it was linked and last used, and a scrambled copy of its sign-in key. An unlinked device stops working right away; we keep the record that it was linked until you delete your account.
- Loomda Tokens: your balance, each purchase (what you bought, the amount paid and when it expires), each use, and your plan's status. To charge tokens fairly, we also record how much AI each lesson, question and summary used.
- Feedback you send us from the parent area. Your child can also send feedback from a lesson (a face and, for older kids, a few words); it goes to you first and only reaches us if you choose to send it on.
Some choices stay only on the device and never reach us: the outfit and frame your child picks, the sound setting, and which tips they've already seen.
To see what works and fix what doesn't, we also record which screens and buttons are used (for example, that a lesson was started or a setup step was reached), without names or anything your child writes. If your child taps a face at the end of a lesson to say it was too easy, just right or too hard, we record that tap the same way, with the course's age range. This stays in our own database, is deleted with your account, and is removed after 13 months. On our public pages (the start page, How it works, Try it and this page), Vercel counts visits without cookies or personal data; it isn't used in the parent or child areas.
Who processes it for us
- Anthropic (Claude API) powers the AI parts of Loomda: it answers questions your child asks the tutor, writes hints, answer buttons and your lesson summaries, plans and writes custom courses, and runs the “Try it yourself first” preview. It also runs our safety checks on what children type, on the tutor's own replies, on each course you set up and on each new note you add. For these, it receives your child's first name and age, the course details, your notes, and the messages involved. Ready-made lessons and the sample lesson on our site are pre-written and don't use it. Under Anthropic's commercial terms, it doesn't use this data to train its models. See Anthropic's privacy policy.
- Paddle (paddle.com) sells Loomda Tokens and plans as our reseller. When you buy, you pay in Paddle's checkout, which collects your payment details, email and country; we never see your card. Paddle tells us what you bought and gives us a customer number so you can manage your plan. It handles this data under its own privacy policy and keeps billing records as tax law requires.
- Hosting and security providers run our servers and database, send sign-in emails, keep short-lived counters (by network address) that stop abuse and expire within hours, and tell us when a page crashes (only the page and the error). They store data only to run Loomda for us.
We don't sell this data, use it for advertising, or share it with anyone else.
We process this data with your consent, and to provide the service you signed up for. Our providers run servers in the United States and elsewhere, so it may be processed outside Israel and the EU, under their data protection terms.
Who can see it
You, from the parent area (protected by your sign-in, and by your parent PIN if you set one). While Loomda is invite-only, the team running it may look at conversations and safety alerts to keep children safe and fix problems.
Visitor mode
If you choose “Try without an account”, we create a temporary visitor account with no email. While you use it, we store what you add and do, as listed above. When you end visitor mode or sign in, we delete it right away, and visitor accounts are deleted automatically within two days. Buying anything and linking your child's own device need a real account.
Cookies and device storage
We use only the cookies Loomda needs to work: your sign-in, visitor mode, a linked child's device and sign-in, and your language. No advertising or tracking cookies. A few settings are kept in the browser's own storage, as listed above.
Keeping and deleting it
- Your account data: until you delete it. Deleting a course from the parent area removes it from our database together with its conversations, summaries, badges and alerts; once a child has no courses, you can delete the child too. To delete your whole account, email hello@loomda.app and we'll do it directly. Unused tokens are lost when the account is deleted.
- Visitor accounts: deleted when you leave, or within two days.
- Records of AI cost: kept for our accounting, with the link to your family removed when you delete your account.
- Records of which screens and buttons are used: 13 months.
- Abuse-prevention counters: a few hours.
- Billing records at Paddle: kept by Paddle under its own terms.
Content already sent to Anthropic to produce a reply is handled under Anthropic's own retention terms; deleting it in Loomda doesn't reach back into Anthropic.
Your rights and your child's
You can see your child's lessons, summaries and progress in the parent area at any time. You can also ask us for a copy of your data, to correct or delete it, or to stop collecting more (which means stopping use). Email hello@loomda.app and we'll reply within 30 days. We don't ask a child for more than a lesson needs. In the EU or UK you can also complain to your data protection authority, and in Israel to the Privacy Protection Authority.
Your consent
By using Loomda you confirm you are the parent or legal guardian of the child using it, and you consent to the storage and processing described above. You can withdraw consent at any time by emailing hello@loomda.app and stopping use; we'll delete your data.
Questions
Reach us any time at hello@loomda.app. This policy will change as Loomda moves toward a public launch, and we'll tell you when it does.