ConnectionLoopConnectionLoop Privacy Policy
Effective date: October 26, 2026 Who we are: Doyel Labs LLC, a Wyoming limited liability company ("Doyel Labs", "we", "us") Contact: support@doyel-labs.com
ConnectionLoop is a private, invite-only app where a family or small group keeps one calendar, lists, notes, photos, and a chat. This policy explains what information the app handles, why, who can see it, how long we keep it, and the choices you have. We wrote it to be read, not skimmed. If anything is unclear, email us.
1. The short version
- We do not sell your information. We never have and we have no plans to. There are no ads in ConnectionLoop.
- Your family's things stay inside your family. Plans, lists, notes, photos and messages are visible only to the people who have been invited into that family or group.
- We keep as little as we can. No location tracking, no contacts upload, no advertising identifiers, no third-party analytics or trackers.
- You are in control. You can leave a family, delete anything you posted, and delete your whole account from inside the app.
- Ages 13 and up. ConnectionLoop is not for children under 13, and we do not knowingly collect their information.
2. Information we collect
We only collect what the app needs to work. Here is the complete list.
Information you give us
| What | When | Why |
|---|---|---|
| Name (the display name you choose) | Creating an account | So your family knows who posted what |
| Email address | Creating an account | To sign you in, confirm your account, reset a forgotten password, and send the few emails described below |
| Password | Creating an account | To protect your account. We never see it; it is stored only as a one-way hash by our sign-in provider |
| Profile photo (optional) | If you add one | Shown next to your name inside your family or group |
| Family or group name | When you start one | To label the shared space |
| Calendar plans, lists, notes, photos, chat messages, comments, who is going, reminders, and similar content | When you or your family add them, or when you choose to bring events in from a calendar you connected | This is the product: a shared place for your family. Your content is visible only to members of that family or group |
| Invite codes | When you invite someone or join | To control who can enter a family or group |
| Reports and feedback | If you report content or message us | To review problems and respond to you |
| A short voice recording, only when you tap "Say your list" on a list | Only while you are speaking a shopping list; you start and stop it | To turn your words into list items. The recording, with the language your app is set to, is sent once to Google Cloud Speech-to-Text, which returns the words. We do not keep the recording or the words on our servers; the items are made on your phone and you check them before anything is added |
Information collected automatically
| What | Why |
|---|---|
| A device push-notification token, only if you turn on phone alerts | To deliver the alerts you asked for. Turning alerts off removes its use |
| Basic technical records generated by our service providers when the app talks to them (for example, the time of a request and the type of device) | To keep the service running, secure, and reliable. We do not use these to build profiles or for advertising |
| Whether your email is confirmed, and your notification and appearance preferences | To run the features you set up |
| Crash notes, if "Share crash notes" is on (it is on by default; Privacy & Safety turns it off): when the app breaks, the error's own words and the file and line where it happened, plus the app version and the kind of phone. Email addresses, long numbers and web-address details are removed on the phone before anything is sent, and again on the server. Never what anyone wrote, never a photo, never a name | So we find and fix crashes. Notes are sent at most once a day, kept for 30 days, and summarised for the developer once a week |
Information stored only on your phone
Some features run entirely on your device and never send anything to us: "Type it fast" and the splitting of a spoken list into items, App lock (using your phone's Face ID, fingerprint or passcode), the Sunday "Your week" note, per-item sync status, and your theme choice. Your sign-in session is stored in your phone's secure keychain. Which phone calendars you connected, and the links between those events and the group, stay on that phone.
Calendars you choose to connect
Connecting a calendar is optional. You pick the calendars and, for each group, whether events come in, go out, or both.
- This phone (Apple, iCloud, and other calendars already on the device). The app reads and updates only the calendars you turn on, using the calendar permission. That sync runs while the app is open. Event text you bring in is stored as a group plan. Plans you send out are written onto the calendar you chose.
- Google Calendar and Microsoft Outlook / Microsoft 365. Sign-in happens in the provider's own page. We store a refresh token on our servers, encrypted, and the app cannot read it. We use it only to sync the calendars you selected. Google and Microsoft tell our server when those calendars change, and we also check about once an hour. Disconnecting stops sync. It does not delete plans already in the group, and it does not wipe the external calendar. Deleting your account revokes the grant when the provider allows it and deletes the stored token. Shared plans stay with the group, the same as other content you posted.
What we do not collect
We do not collect precise or approximate location, your contacts, your photo library beyond the photos you choose to post, your browsing history, health data, financial information, or advertising identifiers. We do not use third-party analytics, advertising, or tracking software.
3. How we use information
We use the information above to:
- create and secure your account, sign you in, and keep you signed in;
- show your family's shared calendar, lists, notes, photos and chat to the members of that family or group, and to nobody else;
- send the emails needed to run your account: confirming your email address, resetting a forgotten password, and telling you if your sign-in email was changed;
- deliver in-app alerts and, if you turn them on, phone notifications about new plans and messages;
- let owners and admins manage who is in a family or group, and let anyone report content;
- find and fix problems, prevent abuse, and keep the service safe;
- respond when you contact us; and
- comply with the law.
We do not use your content to train artificial-intelligence systems, to advertise to you, or to profile you.
4. Who can see your information
Your family or group. Everyone who has been invited into a family or group can see what is shared inside it: names, profile photos, plans, lists, notes, photos and messages. Families and groups are invite-only. There is no public directory and no way to search for people or families.
Owners and admins. The person who created a family or group, and anyone they make an admin, can add and remove members, change roles, create and revoke invite codes, and review reported content. They cannot read your email address in the app.
Service providers who help us run ConnectionLoop. We use a small number of companies to store data and deliver email and notifications. They may process your information only on our instructions and only to provide their service to us:
- Google Firebase and Google Cloud (United States): sign-in, database, file storage, cloud functions, web hosting, nightly backups, and Speech-to-Text for "Say your list". Google's privacy practices are described at policies.google.com/privacy.
- Resend (United States): delivers our account emails (confirm your email, reset your password, sign-in email changed) from noreply@connectionloop.app.
- Expo (United States): delivers phone notifications when you turn them on.
- Apple and Google, through the App Store and Google Play, handle app distribution and subscription payments under their own policies. We do not receive your card number.
- RevenueCat (United States): tells us whether the organizer's subscription is active, which product it is, and when it renews, so we can enforce seats. It receives the organizer's account id, not family content.
- Google Calendar API and Microsoft Graph, only if you connect those calendars: we send and receive the events you chose to sync. Their privacy practices are at policies.google.com/privacy and privacy.microsoft.com.
Legal reasons. We may disclose information if we believe in good faith that it is required by law, a court order, or a government request; to enforce our Terms; or to protect the rights, property, or safety of Doyel Labs, our users, or the public.
Business changes. If Doyel Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will require the new owner to honor this policy or tell you before your information becomes subject to a different one.
No selling, no sharing for advertising. We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined in United States state privacy laws.
5. How long we keep information
- Your account and content: for as long as your account exists.
- When you leave a family or group: you lose access to it right away. Things you posted stay in that family, because they are part of a shared record that others rely on, unless you delete them first or the family is deleted.
- When you delete your account: we delete your account, your profile, your messages, your comments, your photos, and any calendar tokens we stored for you, and we remove you from every family or group. Plans and lists you created stay with that family or group, and your name disappears because the profile is gone. If you still own a group, it passes to the longest-standing admin, then to the longest-standing adult member. A kid is never made the owner. If no adult is left, that group is deleted. Deletion is recorded in steps and retried if it is interrupted, and it finishes within 30 days. Deleting your account does not cancel an App Store or Google Play subscription; cancel that in the store. Backups are cleared on their own schedule within 90 days.
- Invite codes: expire on their own after one year and can be revoked at any time.
- Reports and safety records: kept for up to one year so we can respond to repeated problems.
- Crash notes: 30 days.
- Voice recordings for "Say your list": not kept. The recording is turned into words and discarded; the words are not stored by us.
- Technical records: kept by our service providers for a short period for security and reliability, then deleted.
6. Your choices and rights
You can do all of the following from inside the app, with no email required:
- See and change your name and profile photo (Me).
- Delete any plan, list item, note, photo, or message you posted.
- Leave a family or group (Privacy & Safety).
- Turn phone alerts on or off (Me, or your phone's Settings).
- Connect or disconnect a calendar (Me → Calendars). Disconnecting stops sync. It does not delete group plans.
- Turn "Share crash notes" off (Privacy & Safety). Crash notes then stay on your phone.
- Say a list or type it. The microphone is used only while the Say your list screen is open and listening.
- Delete your account (Privacy & Safety). This removes your personal information as described above.
- Report a message or photo to the owners and admins of that family.
Depending on where you live, the law may also give you rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising these rights. To use any of these rights, email support@doyel-labs.com from the address on your account. We will verify it is you, respond within the time the law allows (30 to 45 days in most places), and we will not charge you. If we decline a request we will tell you why, and you may appeal by replying to our message.
Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana and other United States states with privacy laws: we do not sell personal information, do not share it for targeted advertising, and do not use it for profiling with legal or similarly significant effects. Because of that, there is nothing to opt out of, but the rights above are available to you. Requests may be made by you or by an authorized agent with your written permission.
Residents of the European Economic Area, United Kingdom and Switzerland: we process your information to perform our contract with you (running the app), to meet legal obligations, and where it is in our legitimate interest to keep the service secure and reliable. Your information is stored in the United States by the providers named above under standard contractual clauses or equivalent safeguards. You may lodge a complaint with your local data protection authority.
7. Children and teens
ConnectionLoop is for people 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has made an account, email us and we will delete it promptly.
Teens 13 to 17 may use ConnectionLoop within a family or group. We recommend a parent or guardian creates the family and invites them. Everyone in a family sees the same shared content; there is no separate teen or child mode, and nothing in the app is shown to people outside the family.
8. How we protect information
- Families and groups are invite-only, and invite codes are random, expire, and can be revoked at any time.
- Access rules are enforced on the server for every request. A person can only read and write the families they belong to.
- Data is encrypted in transit and at rest by our providers.
- Sign-in sessions live in your phone's secure keychain. App lock adds Face ID, fingerprint, or your passcode before the app opens.
- Our sign-in system guards against guessing passwords and does not reveal whether an email address has an account.
- Emails from us come only from noreply@connectionloop.app and only for the reasons listed in this policy. We will never email you asking for your password.
- Our own staff have no routine reason to look at family content, and we do not do so except to investigate a report, a legal request, or a security problem.
No method of storage or transmission is perfectly secure. If we learn of a breach that affects your information, we will notify you and the relevant authorities as the law requires.
9. Where information is processed
Doyel Labs is in the United States and our service providers store information in the United States. If you use ConnectionLoop from elsewhere, your information will be transferred to and processed in the United States under the safeguards described above.
10. Third-party links and services
The app may open links your family shares, and it uses your phone's mail, camera, photo picker, and share features. Those services have their own policies. This policy covers only ConnectionLoop.
11. Changes to this policy
When we change this policy we will update the effective date at the top and, for changes that matter, tell you in the app before they take effect. The current version is always at connectionloop.app/privacy and inside the app under Privacy & Safety.
12. Contact us
Doyel Labs LLC Email: support@doyel-labs.com Web: connectionloop.app
Please put "Privacy" in the subject line so we can route it quickly.
← Back to ConnectionLoop