← Back to Home

Privacy Policy

Last updated: December 2025

Introduction

Looponia ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

This policy is compliant with the General Data Protection Regulation (GDPR), including the 2025 amendments under the EU Digital Omnibus package, the EU Data Act (effective September 2025), and the EU AI Act regulations.

Information We Collect

Data You Provide

  • Account Information: Email address, display name (optional)
  • Content: Notes, tasks, financial data, recordings
  • Contact: Information you provide when contacting us

Data Collected Automatically

  • Device Information: Device type, OS version
  • Usage Data: App usage patterns (anonymized)
  • Crash Reports: Technical error information

Legal Basis for Processing (GDPR Art. 6)

We process your data under the following legal bases:

  • Consent: When you explicitly agree (e.g., marketing)
  • Contract: To provide services you requested
  • Legitimate Interest: For analytics and service improvement (as recognized under 2025 GDPR amendments for AI development)
  • Legal Obligation: When required by law

How We Use Your Information

  • To provide and maintain our service
  • To sync your data across devices (if enabled)
  • To improve our application through anonymized analytics
  • To communicate with you about updates or issues
  • To provide customer support

On-Device Machine Learning

📱

Google ML Kit (On-Device)

Looponia uses Google ML Kit for features like handwriting recognition and text detection. Importantly, all ML Kit processing happens entirely on your device — your handwriting data is never sent to external servers or the cloud.

This on-device approach ensures maximum privacy while still providing intelligent features. ML Kit models are downloaded once and run locally, meaning these features work even without an internet connection.

Note: Looponia does not use cloud-based AI services. All machine learning processing is performed locally on your device.

Data Storage & Security

🔒

Your Data Stays Yours

By default, all your data is stored locally on your device. your data is protected through secure connections (TLS) and encrypted at rest on Firebase servers.

In compliance with GDPR Article 32, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Your Rights (GDPR 2025)

Under the GDPR (including 2025 amendments) and the EU Data Act, you have the following rights:

Right to Access

Request a copy of your data

Right to Rectification

Correct inaccurate data

Right to Erasure

Delete your account and data

Right to Portability

Export your data (EU Data Act)

Right to Object

Object to AI/automated processing

Right to Restriction

Limit how we process your data

Third-Party Services

We may use the following third-party services:

  • Firebase (Google): Authentication and cloud sync
  • Crashlytics: Crash reporting

Each of these services has their own Privacy Policy. We ensure all third-party processors comply with GDPR requirements through Data Processing Agreements (DPAs).

International Data Transfers

Your data may be transferred to servers located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during such transfers.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days. Crash logs and anonymized analytics may be retained for up to 12 months for service improvement purposes.

Children's Privacy

Looponia is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy to reflect changes in law (such as the upcoming Procedural Regulation EU 2025/2518 effective April 2027) or our practices. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Looponia

Padua, Italy

privacy@looponia.com