Privacy Policy

The Care Loop operates this website and platform. Where required, we act as the data controller for the personal data described here.

• Account data: name, email, password (stored hashed), account type (shopper or brand) and, for brands, company name.
• Product & usage data: products you scan, save or interact with, and the Trust Score results shown to you.
• Care Pass details you choose to share: a name, city or region, contact and note you type in yourself when you make a Care Pass link public. Off by default. Shown to anyone with the link until you switch them off or replace the link.
• Technical data: device, browser, IP address, and analytics events (only where you have consented to analytics cookies).
• Early access sign-ups: the name, email and role you enter on the waiting-list form. To limit abuse, we keep a salted one-way hash of your IP address (never the address itself) for up to 24 hours, then delete it. It is not shown anywhere.
• Communications: messages you send us and your support history.

We process personal data to:

• provide and secure your account and the platform;
• deliver Trust Score scores and personalised features;
• respond to your requests and provide support;
• improve and analyse the product (where analytics consent is given);
• comply with legal obligations and prevent abuse.

Legal bases (GDPR Art. 6): performance of our contract with you (providing the service), our legitimate interests (security, improvement), your consent (analytics and marketing cookies), and compliance with legal obligations.

We do not sell your personal data. We share it only with trusted service providers that help us run the platform (such as hosting, database, authentication and analytics providers) under contractual confidentiality and data-protection terms, and where required by law.

When you report a problem with an item you own, the problem type (for example "Leaking") is counted anonymously for that model. Your care and repair records (care, maintenance, cleaning, service and repair) are counted the same way; you can switch this off for each item. Counts appear on the model page and to the brand only once at least three different owners have reported the same thing. Your notes are never counted or shown.

Your description of a problem stays private to you. It is shared with the brand only if you switch on "Share my description with" the brand, and shown on the model page only if you switch that on too. Email addresses and phone numbers are removed from any shared copy. The brand never sees your name, contact details, photo, receipt, shop, city or exact dates.

You can switch sharing off, mark a report as fixed or withdraw it at any time from the item page. A withdrawn report leaves every count at once. Reviews are private drafts until you publish them, and you can unpublish, edit or delete them.

If you sell, give away, donate or recycle an item, your reports and review stay counted and you can still change them. A new owner does not receive them. They are deleted when you remove the item or delete your account.

Your data may be processed in countries outside your own. Where we transfer data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

We keep personal data only for as long as needed for the purposes above or as required by law. When you delete your account, we delete or anonymise associated personal data within a reasonable period, except where retention is legally required.

If you are in the EEA or UK, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erase your data ('right to be forgotten');
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with your local supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to opt out of the 'sale' or 'sharing' of personal information, and not to be discriminated against for exercising your rights. We do not sell your personal information. To exercise any right, contact us at hello@thecareloop.app.

We use cookies and similar technologies as described in our Cookie Policy. You can change your choices at any time via "Cookie settings" in the footer.

We use technical and organisational measures including encryption in transit, access controls and row-level security to protect your data. No system is perfectly secure, but we work to keep your data safe.

The platform is not directed at children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. Material changes will be notified through the platform or by email where appropriate. The "last updated" date above reflects the latest version.