Privacy should feel as private as the subject.

Last updated 5 October 2026

LooPoo is a private self-observation tool operated by Remodeled AI, LLC. The check-ins you choose to save belong on your device, under your control.

What stays on your device

Your private history contains only the details you choose to enter: illustrated shape, comfort, anything noticeable, approximate visit duration, whether you felt finished, optional timing, routine factors, and a private note. Optional digestive-condition and dietary-restriction choices are stored separately so they can shape local food ideas without becoming part of your journal.

Your journal is stored only on this device and isn’t included in iCloud or computer backups. To move to a new phone, use Account › Back up & restore to save a password-protected backup file wherever you choose. LooPoo never uploads it and cannot open it without your password.

Journal records and digestive-condition choices stay on your device. Food choices are sent only when you request an AI recipe, as described below. You can change the preferences from Account in the app.

If you turn on the optional app lock, iOS checks your Face ID, Touch ID, or passcode. LooPoo never receives biometric data. The Log a visit widget, Control Center, and Siri shortcuts only open a new check-in. The optional Your week widget shows days since your last visit and one dot per day on your Home Screen; it shows no shapes or notes, is hidden while discreet notifications or the app lock are on, and is redacted on the Lock Screen and in StandBy.

When you create an AI recipe

The first time you create an AI recipe, LooPoo asks for your permission and lists exactly what will be sent. You can withdraw it anytime in Account › Privacy. After you allow it, choosing Create my recipe sends your food idea, meal, cooking time, style, selected ingredients, and the diet filters for that recipe through our Cloudflare service to OpenAI to generate and check a recipe.

Describe food only in the optional request field. Do not enter health or personal details. The app checks for common sensitive content before sending. Your saved journal, condition names, notes, medications, and cycle information are never attached to a recipe request.

Recipe text and AI-generated photos can join the shared library. Library entries have no user name, account profile, or public request history. Saved favorites and meal plans stay on your device.

Our service checks your Apple transaction and RevenueCat membership. An opaque subscription identifier is used for creation limits and abuse rate limits, which store counts only. Recipe jobs are not stored with that identifier: each job is bound to a random key held by your device, which our service never stores. Your food idea, ingredients, and diet filters are removed when a job ends; the finished job keeps only a sealed check value, and the recipe library keeps a keyed one-way code so an identical request can reuse a recipe. New library recipes are dated only to the week. If you report a recipe, it is hidden on your device, and our service keeps only a token made from a random key your device sends with the report. We do not combine these records with your membership; creation counts are kept per membership for limits. Job records expire after 24 hours, usage counters after 35 days, and reports after 30 days. Scheduled cleanup can add up to 15 minutes. Anonymous shared recipes and images remain available until removed from the library.

We request that OpenAI not store Responses for later retrieval. OpenAI can still retain API content for abuse monitoring under its data controls; this setting does not mean zero retention. Cloudflare also processes network and security information to operate the service.

What analytics never receives

If you opt in to coarse product analytics, LooPoo sends app-flow events and a separate random analytics identifier to PostHog (hosted in the United States). The app asks once, after your first saved visit, and you can change the choice in Account › Privacy. These events can describe a screen or a completed action, but cannot include the content of your record. Analytics is off by default. Turning it off stops future product events; it does not automatically erase events already received by the service.

We do not sell health data or use it for advertising. Notification text is generic and does not include check-in details; discreet mode reduces it to “Reminder.”

What this website handles

This public site provides product, privacy, terms, deletion, and support information. It has no check-in form and does not receive your journal details. Cloudflare hosts the site. If you choose to open an email draft, your email provider handles the message and any information you decide to send.

Purchases

Apple processes in-app subscriptions. LooPoo uses RevenueCat to validate purchases, recognize membership, restore access, and report subscription activity. RevenueCat receives a random app user identifier and purchase information, such as the product, transaction and subscription status. Its paywall also records when membership options are viewed or closed, linked to that identifier, to understand how the membership flow is used. This subscription and paywall processing is separate from the optional product-analytics setting.

Check-in details and health or food preferences are not sent as purchase metadata. LooPoo does not send your name, email, or payment-card details to RevenueCat. See RevenueCat’s privacy policy for its handling of service data.

Your controls

From Account in LooPoo, you can update your health and food preferences, export your check-in history, or delete all local data. Deletion removes check-ins, day notes and quiet days, setup answers, preferences, meal plans, saved recipes, reminders, the Your week widget's data, and the optional analytics identifier from the device. It does not cancel an Apple subscription.

Appointment PDFs are created on your device. Notes and routine factors are excluded unless you choose to include them. Sharing a report or shopping list sends it only to the destination you select.

Local deletion does not remove anonymous recipes already added to the shared library or reset creation limits. Short-lived recipe service records expire as described above. It does not erase purchase records held by Apple or RevenueCat, paywall events held by RevenueCat, or analytics events already sent to PostHog. For questions or requests about provider-held information, use the privacy contact below. See the deletion guide for the in-app steps. You do not need to create an account or send an email to delete local data.

Contact

For privacy questions or requests, email privacy@loopoo.app. Please do not include check-in details or private health information.