Privacy Policy
Effective date: 2026-07-13
Last updated: 2026-08-19
1. Who we are
Loop Social LLC ("Loop Social," "we," "us," "our") provides the LoSo mobile and web applications and related services (the "Service") that help people discover places and events, save them, organize them with friends in private groups ("Circles"), and get personalized recommendations.
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to anyone who uses the Service.
If you have questions, contact us at [email protected] or by mail at:
Loop Social LLC 4030 Wake Forest Road, STE 349 Raleigh, NC 27609, United States
2. Who can use the Service
The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. In particular, we do not knowingly collect personal information from children under 13 as defined by the Children’s Online Privacy Protection Act (“COPPA”). If you believe a minor has created an account, contact us at [email protected] and we will promptly delete the account and associated data.
3. Information we collect
3.1 Information you give us
Account information: email address, mobile phone number, first name, last name, username, and (optional) profile photo.
Authentication credentials: one-time SMS verification codes. You sign in with your mobile number and a one-time code — LoSo no longer has passwords. Accounts created before we moved to code-only sign-in may still have a stored password hash (we never store your password in plain text). It cannot be used to sign in; it is only accepted to confirm your identity if one of those accounts asks us to delete it.
Content you create: events you create, recommendations of places (and any notes you add), and reports you submit about events or other users.
Places and organizations you follow, save, or block: the places you choose to follow to see their updates, places you save for later, and places you block from your recommendations. Some businesses and groups on LoSo — running clubs, promoters, and others without a fixed address — are followed as an organization rather than as a place; we record those follows separately. Following either kind opts you in to updates from them (see Section 7).
Events you save, going to, or hide: events you save for later, events you've RSVP'd to ("going"), and events you've hidden from your feed.
Guests you bring: when you RSVP to a private event, you can say how many additional guests you're bringing and optionally type their names. Names are optional and free text — only provide them if the guest is comfortable with the host and other attendees seeing them. We store them with your RSVP, use them only to show the event's hosts and other invitees who is coming, and delete them when you change your RSVP, when the event is deleted, or when you delete your account.
Social graph: your friendships and pending friend requests, the friends you have marked as "close friends" (and which of your friends have marked you), Circles you create or join, and the membership of those Circles.
Phone contacts (if you grant permission): When you enable contact sync, we upload the phone numbers and display names from your device's address book to our servers. We do this primarily so you can invite people by text message — including people who don't have the LoSo app — by selecting them from your contacts and sending them either an event link or an invitation to join LoSo. We also use the upload to show you which of your contacts are already on LoSo so you can invite them in-app, and to power "people you may know" suggestions (see Section 6.1). We retain your uploaded contacts until you disconnect them in the app or delete your account. You can revoke contacts access in your device settings at any time, and you can delete your uploaded contacts from our servers in Account Settings → Contacts.
Preferences: category and discovery preferences you set in the app.
Communications: when you contact us (e.g., support requests), we keep a record of that correspondence.
3.2 Information collected automatically
Search activity: the queries you make in the app, including the location context of those searches (ZIP code, latitude/longitude, and search radius). We use this to deliver results and improve recommendations.
Device information: push-notification tokens (so we can deliver notifications to your device), and basic device/app metadata (e.g., app version, operating system) sent with API requests.
Usage information: the actions you take in the app (e.g., places saved, events RSVP'd to, recommendations made).
Log data: server logs that may include IP address, timestamps, and request paths, used for security and debugging.
Crash and performance data: when the app crashes or encounters an error, our error-monitoring provider (Sentry) collects diagnostic information — including device and OS version, app version, a stack trace, and your user ID — so we can detect and fix bugs.
Product analytics: we use Amplitude as a product-analytics provider to understand which features are used and where the product can be improved. Amplitude receives your user ID, session identifiers, screen views, named product events (e.g., "event_viewed", "place_saved", "friend_requested"), and coarse user properties such as the ZIP code you use in the app. We do not send your name, email, phone number, contacts, message contents, or profile photo to Amplitude, and we do not enable Amplitude's advertising-identifier collection (IDFA/AAID/App Set ID). We do not use advertising SDKs in the app. We also keep our own copy of these product events in our database — the event name, its properties, your user ID, a session identifier, your platform and app version, and the time — as an append-only stream we use for the same purposes and to produce the aggregate figures businesses see (see Sections 6.2 and 9).
3.3 Information from third parties
Phone verification and text invitations: Twilio sends and verifies the SMS code we use to confirm your phone number, and delivers the invitations that LoSo users send to contacts by text. See our SMS Messaging Program page for what those messages say, how often they are sent, and how to stop them.
Public venue/event data: we ingest information about places and events from third-party sources, including Google Maps, Eventbrite, and Ticketmaster. This is about venues and events, not about you. If you contribute a place or event we may combine it with this third-party data to enrich the listing.
3.4 Information we do not collect
We do not collect government identifiers, financial account numbers, payment-card data, or health or biometric data.
We do not ask for or store your home, postal, or physical address.
We do not request precise device GPS coordinates in the background; location context is derived only from searches you actively perform.
We do not access the calendar app on your device. Where this policy refers to your "in-app calendar," we mean LoSo's own view of the events you have saved or RSVP'd to within the app — not your phone's calendar.
4. How we use your information
We use your information to:
Provide the Service: create and authenticate your account, deliver the feed, run searches, store the things you save, send push notifications you've enabled, and connect you with people in your Circles.
Personalize and improve: generate AI-powered place descriptions and event recommendations using the AI providers described in Section 5; understand which features are used and where the product can be improved.
Invitations: if you sync your contacts, we use them so you can invite people over SMS — to a specific event, or to LoSo itself — including people who don't yet have LoSo, and to identify which of your contacts already have LoSo accounts. If someone you invited to LoSo later signs up with that number, we connect the two so we can send them a friend request from you and let you know they joined. We may also surface mutual connections as suggested people you may know.
Communicate: send service notifications (e.g., security alerts, important changes), deliver broadcasts and event updates from organizations you follow or whose events you have marked (see Section 7), respond to support requests, and — only if you opt in — send product updates.
Trust & Safety: detect and prevent abuse, fraud, harassment, or violations of our Terms of Service; investigate reports submitted via the Service.
Comply with law: meet legal obligations and respond to lawful requests.
We do not use your personal information to train third-party generative AI models. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. AI features
The Service uses artificial-intelligence features powered by OpenAI (a service provider) for two things:
AI event/place discovery search. When you submit a search query in our AI-powered search, we send your query text and a coarse location signal (ZIP code) to OpenAI to generate relevant suggestions. We do not send your name, email, phone, or account ID.
Place descriptions. When a user requests a description for a venue, we send the venue's public information (name, type, neighborhood, address, rating) to OpenAI to generate a natural-language description. No user-identifying information is sent.
OpenAI processes this information as our service provider under terms that prohibit using your data to train their general-purpose models. We retain a copy of the prompts and responses in our own systems for safety, debugging, and product improvement (see Section 9 on retention).
6. How we share your information
We do not sell your personal information to third parties. We may use information you provide to us — including interests you indicate in the app — to show you promoted content from businesses within LoSo. We do not share your personal information with these businesses, and we do not engage in cross-context behavioral advertising or share your data with third-party advertising networks.
We share information in the following limited ways:
6.1 With other users (per your settings)
Your profile is visible to people you connect with through Circles or friendships. Your profile includes your username, profile photo, optionally your first name, the interests you've selected, and the places you've recommended.
Place recommendations. When you recommend a place, the place's page may show an aggregate count of how many of the viewer's friends have recommended it. Your name appears in the list of recommenders only to viewers who are your friends.
Close friends. You can mark a friend as a "close friend" to share your in-app event RSVPs ("going" events) and your in-app calendar with them — your events may appear in their feed. The friend you mark is notified and can see in their settings that you have marked them. Close-friend is one-way (you do not need them to mark you back) and requires an existing friendship; you can update your close-friend list at any time. If a friend has marked you as a close friend and you do not want to see their events in your feed, you can mute them — muting is silent and does not affect what they share with others.
Content you post or save is visible according to the audience you choose (e.g., visible only within a Circle, visible to friends).
People you invite to a Circle can see that you invited them.
Guests you bring. The number of guests you add to an RSVP, and any names you type for them, are visible to the event's hosts and to the other people invited to that event. They are not shown to anyone else and are not used for recommendations, suggestions, or advertising.
People you may know. If another LoSo user has uploaded their contacts and your phone number appears in them, we may suggest your profile to that user. We do not reveal that the suggestion came from their contacts, and we do not share any other information from their contact entry for you. You can stop appearing in others' suggestions at any time in Account Settings → Contacts.
6.2 With businesses and organizations on LoSo
Businesses, venues, and groups can manage their own page, events, and updates on LoSo through a separate business dashboard. What they see about the people who engage with them is aggregate and anonymous:
Counts only. A business sees how many people follow it, how many marked its events "going" or "interested", how many times its page and events were shown or opened, how many saves, shares, and recommendations it received, and how many people a broadcast was delivered to — as whole numbers and daily totals.
No identities. We do not give businesses your name, username, profile photo, phone number, email address, or a list of their followers or attendees, and we do not tell them which specific person took an action.
No targeting data. We do not build advertising profiles of you for businesses, and we do not sell or share your information with them for their own marketing.
If you contact a business through information it publishes (for example, by calling the number or opening the website on its page), that interaction is between you and them, and this policy does not cover what they do with it.
6.3 With service providers
We use third-party service providers to operate the Service, including for AI features (OpenAI), SMS verification and invitation delivery (Twilio), push-notification delivery (Expo, whose push service relays our notifications to Apple's and Google's push networks — it receives your device push token, the notification title and body, and the identifiers the app needs to open the right screen), maps, geocoding, and venue data (Google Maps, Eventbrite, Ticketmaster), photo storage (AWS S3 / Tigris), error monitoring and diagnostics (Sentry), product analytics (Amplitude), hosting, and transactional email. Each receives only the information needed for its function and is contractually required to protect it. Contact us at [email protected] for the current list.
6.4 For legal and safety reasons
We may disclose information if we believe in good faith it is necessary to (a) comply with applicable law, legal process, or government request; (b) enforce our Terms; (c) detect or prevent fraud, security, or technical issues; or (d) protect the rights, property, or safety of Loop Social, our users, or the public.
6.5 Business transfers
If Loop Social is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (e.g., via email or in-app notice) before your information is transferred and becomes subject to a different privacy policy.
7. Messages from businesses and organizations
Businesses and organizations on LoSo can send two kinds of message to people who have engaged with them. Both arrive as a push notification (if you have push turned on) and as an in-app notification, and both are sent by us on their behalf.
Broadcasts go to everyone who follows the organization — or, where an organization has claimed a place, everyone who follows that place. Following is the opt-in. Each broadcast is also posted in full to that organization's thread in Messages: a one-way thread you can read but cannot post to. Broadcasts may also appear in your feed. Organizations are capped on how many broadcasts they can send per rolling week.
Event updates go to everyone who has marked one of that organization's events "going" or "interested". Marking an event either way opens a channel from the host organization for that event — a time change, a venue change, a cancellation — so "interested" is not a silent action. Organizations are capped at three updates per event.
Your controls:
Mute the organization. Muting stops both broadcasts and event updates from it: no push and no in-app notification. The broadcast is still posted to that organization's Messages thread, so if you open the thread you will see messages sent while you were muted. Muting is not visible to the organization and the organization cannot override it.
Unfollow. Unfollowing the organization (or the place it has claimed) stops future broadcasts and removes its thread from your Messages list. Event updates follow your "going" and "interested" marks — remove the mark and updates about that event stop.
Hide the thread. You can hide an organization's thread from your Messages list. This is temporary: the next message from that organization brings the thread back.
Turn off push in your device settings or in the app. In-app notifications still appear on the bell.
The organization does not learn who received, read, or muted a specific message — only the total number of recipients (see Section 6.2).
8. Where we store your information
Loop Social is based in the United States. Your information is processed and stored in the United States.
9. How long we keep information
We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, your personal information is deleted immediately; backup copies age out within 35 days. We may retain limited records longer where required by law, to resolve disputes, or to prevent abuse — for example, a hashed reference to your former account, or reports submitted about other users.
Product-analytics events are an exception you should know about. The append-only analytics stream described in Section 3.2 is not erased when you delete your account. Instead, the user ID on those rows is cleared, so the records remain as de-identified activity — an event name, its properties, a session identifier, a platform and app version, and a timestamp — no longer linked to you. We keep them because they are the basis of the aggregate product and business figures described in Section 6.2.
10. Your rights and choices
10.1 Everyone
Access and correct: view and update your profile in the app.
Delete your account: in Settings → Account → Delete Account. Deletion is immediate and cannot be undone. Your profile, content, saves, place and organization follows, friendships, close-friend designations, Circles, mutes, push-notification tokens, uploaded contacts and any "people you may know" suggestions derived from them, and uploaded photos are removed promptly. Two things are kept: a limited audit record (a hashed reference to your former account) for abuse prevention, and the product-analytics rows described in Section 9, which are de-identified rather than deleted.
Push notifications: turn them off in your device settings or in the app.
Marketing emails: opt out using the unsubscribe link in any marketing email. Service-related emails (e.g., security alerts) cannot be opted out of while you have an account.
Text messages: reply STOP to any text message from LoSo to stop all future messages to that number immediately, whether or not you have a LoSo account. Reply HELP for assistance. Message and data rates may apply. We send invitations only when a LoSo user selects your number from their own contacts, and never as marketing. Full details are on our SMS Messaging Program page.
10.2 EU / UK / Swiss residents
If you are in the EU, UK, or Switzerland and want to exercise rights granted under applicable law (such as access, correction, deletion, or portability), email [email protected] and we will respond within 30 days.
10.3 California residents (CCPA / CPRA)
You have the right to: - Know what personal information we collect, use, disclose, or sell/share. - Access a copy of your personal information. - Correct inaccurate personal information. - Delete your personal information. - Limit the use of sensitive personal information. - Opt out of the "sale" or "sharing" of your personal information. – Designate an authorized agent to make a request on your behalf.
We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA. Because we do not engage in these practices, no opt-out is necessary, but you may still confirm by emailing [email protected]. We will respond to verifiable consumer requests within 45 days, or notify you if we need an extension.
We will not discriminate against you for exercising your privacy rights.
The categories of personal information we collect, the sources, the purposes, and the categories of recipients are described in Sections 3, 4, and 6 of this policy.
10.4 Other US states
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights similar to those described above, including the rights to access, correct, delete, and (where applicable) opt out of profiling or targeted advertising. We do not engage in profiling that produces legal effects, and we do not engage in targeted advertising. We honor Global Privacy Control (GPC) and similar universal opt-out signals where required by applicable state law. To exercise any rights, email [email protected]. If we deny your request, you may appeal the decision by emailing [email protected] with the subject line “Privacy Rights Appeal,” and we will respond within the time frame required by applicable law.
11. Security
We use industry-standard safeguards to protect your information, including TLS encryption for data in transit and encryption at rest for stored data. Sign-in is by one-time SMS code, so there is no LoSo password to leak; where an older account still has a stored password hash it is hashed, never plain text. No system is perfectly secure; if you believe your account has been compromised, contact [email protected].
12. Cookies and similar technologies
The LoSo mobile app does not use browser cookies. When you use LoSo in a web browser, we use browser storage for two purposes: (a) strictly necessary storage that keeps you signed in and remembers your preferences, and (b) first-party analytics storage used by Amplitude to measure product usage. We do not use cookies or similar technologies for advertising, and we do not allow third parties to use them on the Service for advertising. Our marketing website may use a small number of cookies for essential functions and aggregate analytics; this will be described in the website's cookie notice.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you (e.g., by email or in-app notice) before the changes take effect. The "Effective date" at the top reflects when the current version became effective. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
14. Contact
Email: [email protected]
Mail: Loop Social LLC, 4030 Wake Forest Road, STE 349, Raleigh, NC 27609