Privacy Policy — QueerLoop+

QueerLoop+ is dedicated to protecting the privacy, identity, and personal data of our members. This policy describes what information we collect, why we collect it, how it is secured, and how you can manage or delete your data across our apps on iOS and Android.

QueerLoop+ is operated by the individual developer and proprietor trading as QueerLoop+, or any successor entity. For questions about this policy, contact us at hello@queerloopplus.com

• Account & profile information: email address, username, display name, cryptographically hashed password, and optional profile details (pronouns, bio, profile photo, community affiliations)
• Sensitive identity labels & interests (voluntary): identity labels such as Lesbian, Gay, Bisexual, Transgender, Non-Binary, Queer, etc. — added voluntarily, editable or removable at any time in Edit Profile
• Third-party sign-in data: name, authenticated email, and provider identifiers when you sign in with Apple or Google
• User-generated content: posts, photo uploads, video reels, captions, tags, comments, bookmarks, and direct messages
• Search & interaction history: searches, keywords, and hashtags in Discover, plus post engagement history
• Safety & moderation reports: details of reports you file, used strictly by human moderators to investigate violations
• Activity status & read receipts: whether you're active and whether messages are read — toggleable in Settings → Privacy
• Device & technical data: IP address, device model, OS version, push notification tokens, and language preferences
• Guest browsing: public content can be viewed without an account; we don't track identities or link browsing history to guest sessions

Identity labels reveal sexual orientation and gender identity — treated as sensitive or special category data under GDPR and similar regulations. You provide this information voluntarily, and you can edit or remove it at any time. We never require it, and we never share or sell it.

• To authenticate your account, maintain your session, and secure access
• To publish, transcode, and deliver your posts, photos, and reels according to your selected audience settings
• To facilitate community connections, direct messaging, and interactive features
• To enforce our Community Guidelines and Terms of Service, investigate reports, remove objectionable content, and ban abusive accounts — including reviewing the last 30 days of messages from a reported chat, strictly to investigate that report
• To deliver service updates, security notifications, and optional push notifications you can disable in Settings

• We never sell, rent, lease, or trade your personal data, profile information, or usage habits to data brokers, marketing agencies, or advertising networks
• We never share your identity information with advertisers
• We never show your exact location to other users

We share information only with trusted providers bound by strict confidentiality and data protection agreements: Amazon Web Services (AWS S3) for cloud storage and media transcoding, and Firebase Cloud Messaging / Apple Push Notification service for delivering notifications. We disclose personal information to law enforcement only when strictly required by a binding court order or legal warrant, or to prevent imminent physical harm.

You maintain full granular control under Settings → Privacy:

• Direct messaging controls: Everyone, People you follow, Mutual follows, or Nobody
• Commenting controls: same four options as direct messaging
• Private account: approve follow requests before others can view your posts
• Appear in Discover: toggle whether your profile appears in public search and feeds
• Hide likes, and independently toggle activity status and read receipts
• Post audience visibility: Everyone, Followers Only, or Community Only, set per post
• Blocking & muting: blocked users cannot see your profile, posts, or message you

Media and database records are encrypted at rest (AES-256), and passwords are protected with one-way cryptographic hashing and never stored in plaintext. Data is also protected in transit (HTTPS), with restricted access and regular backups. No online service can guarantee 100% security, but we follow industry best practices.

Depending on your location, you may have rights under GDPR, CCPA/CPRA, or similar laws. You can at any time:

• Access all personal data stored in your profile, in Settings
• Rectify your username, bio, and details in Edit Profile
• Erase your account and data permanently — in the app via Settings → Delete account, or see our Account Deletion page
• Restrict or object to processing, via in-app visibility toggles

When account deletion is requested, all personal data (profile, posts, reels, photos, videos, captions, comments, and messages) is permanently erased from active servers within 30 days. Safety and abuse reports you filed remain in moderation records to preserve community safety, but your name and identifying details are permanently stripped and anonymized.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legal requirements. When updates are published, the effective date above is revised, and in-app notifications are shown for significant updates.