Privacy Policy — LoopOut

Last updated: 16 September 2026

LoopOut ("the app") counts the short-form videos you watch — Instagram Reels, YouTube Shorts, TikTok, Snapchat Spotlight and Facebook Reels — and helps you stay under a daily limit you set.

This policy describes exactly what the app accesses, what stays on your phone, and what is uploaded if you turn on cloud backup.

We do not sell your data, and the app contains no ads. The app does use Google Firebase Analytics and Firebase Crashlytics to understand which features are used and to receive crash reports. Analytics is on by default and can be switched off in Settings → Account → Share usage data.


Summary


What the app accesses on your device

On-screen content (Accessibility service)

To count videos, the app inspects the on-screen view hierarchy of a fixed list of apps, and no others:

This list is enforced by Android itself, from the app's accessibility configuration. The system delivers the app nothing at all about any other app you use.

The service looks for the signature of a full-screen short-video player and increments a counter. It reads video captions and creator names only in memory, and only to tell one video from the next so the same video is not counted twice. That text is never written to storage, never logged, and never uploaded. Messages, photos, browsing history and the content of any app are never read, stored or transmitted.

You enable this service yourself in Android Settings, after an explicit in-app explanation, and can disable it at any time in Settings → Accessibility.

Screen-time statistics (Usage access)

With your permission, the app reads Android's own app-usage statistics to show how many minutes you spent in the tracked apps. This is queried live from the system each time it is displayed and is not stored in the app's database.

Apps you add yourself

You can add other installed apps to track their screen time. For those apps the app stores the package name and label, and reads screen time only. Their on-screen content is never inspected.

Step count (Physical activity)

One of the challenges you can pick to unlock reels is "walk a number of steps". If you choose it, the app reads your device's step counter only while that challenge is on screen, and only to count up to the number of steps needed to finish it.

To be exact about what this is and is not:


What is stored on your device

This is removed when you uninstall the app or clear its storage in Android Settings.


Cloud backup

Cloud backup is enabled automatically when you sign in with Google, and stays on for as long as the account exists. It is not a separate choice and there is no in-app switch to turn it off while remaining signed in.

Your control over it is the account itself. Not signing in means nothing is uploaded; the app is fully functional without an account. If you have signed in and want the uploads to stop, use Delete account and backed-up data in Settings → Account, which erases everything held on the server and signs you out.

Signing in

Sign-in uses Google. The app receives your Google account identifier, name, email and profile-picture URL. Your Google password is never seen by the app. Sign-in alone uploads no usage data — backup is a separate choice.

Your profile picture, when shown in the app, is loaded directly from Google's servers.

Exactly what is uploaded

If backup is on, the app uploads one row per completed day. Today is never uploaded; only days that have already ended. The complete list of fields is:

FieldWhat it is
user_idYour account identifier
dateThe calendar date the row is for
reels_instagram, reels_youtube, reels_tiktok, reels_snapchat, reels_facebookNumber of videos watched that day, per platform
limit_instagram, limit_youtube, limit_tiktok, limit_snapchat, limit_facebookThe daily limits you had set
minutes_instagram, minutes_youtube, minutes_tiktok, minutes_snapchat, minutes_facebookMinutes spent in each app — only for the most recently completed day
brain_health_scoreThe day's score, 0–100
under_limit, streak_dayWhether you stayed under your limit, and your streak length

That is the entire list. Nothing else is transmitted. In particular the app never uploads: screen content, video titles, captions, creator names, which specific videos you watched, the apps you added to tracking, your per-app limits, your settings, or your parental PIN.

Backup begins from the day you turn it on. Days before that are not uploaded.

Who processes it

Backup data is stored with Supabase (Supabase Inc.), which provides the database and the sign-in service. Data is held on Supabase infrastructure in Sydney, Australia (region ap-southeast-2). If you are outside Australia, turning on backup means the data listed above is transferred to and stored in Australia.

Access is enforced by database row-level security: backup rows are readable and writable only by the account that created them. (Friend battles, described below, are the one exception, and only for the specific fields listed there.) Data is transmitted over HTTPS.

Supabase's privacy policy: https://supabase.com/privacy

No other third party receives your data.


Friend battles (optional)

Friend battles are a daily leaderboard against people you invite: whoever watched fewer short videos that day is ahead. It is off unless you turn it on, and turning it on requires you to sign in, agree to cloud backup, and separately accept a screen that lists exactly what a friend will see.

Exactly what a friend can see

FieldWhat it is
display_nameYour name, taken from your Google account
avatar_urlYour Google profile photo
total_reels (per day)How many short videos you watched that day, as a single number

That is the entire list. A friend cannot see which apps you use, your per-platform breakdown, your screen time, your limits, your rules, your streaks, your brain-health score, or your email address. The daily backup row described above is not readable by anyone but you.

Who can see it

Only accounts you are mutually connected to. A connection is created in exactly one way: someone enters the six-character code the other person shared with them. There is no directory, no search by name or email, and no friend-of-friend visibility. Codes are random and are not derived from anything about you.

Turning it off

Days you shared while battling remain in your account until you remove the friend or delete your account.


Turning backup off, and deleting your data

Analytics and crash reporting

The app uses Google Firebase Analytics and Firebase Crashlytics.

This data is processed by Google as part of the Firebase service and is used only to improve the app.

Push notifications

If you sign in, this device registers a push token with your account — a routing address that lets Google's messaging service deliver a notification to this phone. It is not usage data and says nothing about what you watch. It is used to tell you when a friend accepts a battle invite, and occasionally to send app news.

Not signing in means no token is ever registered. Deleting your account deletes the token with everything else. You can also turn these notifications off without touching your account, in your phone's notification settings. They are split into two channels so you can silence one and keep the other: Updates from LoopOut (news and tips from us, quiet by default) and Friend activity (when a friend accepts your invite).

Deleting your data

The account controls are in the app, under Settings → your account:

If you cannot reach the app, email mehdiaasar0@gmail.com from the address you signed in with and your account and backed-up data will be deleted.


How the data is used

Solely to run the app's features: counting videos, enforcing the limits you set, showing your stats and streaks, and — if you enabled them — backing up your daily totals to your own account and showing your daily total to friends you connected with. It is not used for advertising or profiling, and it is never sold. Apart from friend battles, which share only the three fields listed in that section and only with people you connected to yourself, your data is not shared with anyone.


Children

The app is not directed at children under 13 and does not knowingly collect data from them.


Changes

Material changes will be reflected by updating the date at the top of this policy.


Contact

Aasar Mehdi — mehdiaasar0@gmail.com