For the LoopClosed app (Android and iPhone) and loopclosed.org · Effective 7 November 2026
LoopClosed is a product of Kept Index LLC (Wyoming, USA). Contact: [email protected].
LoopClosed has no account. The loops, notes, photos, signatures, mistakes, retest results and subjects you create are stored only in the app's private storage on your device. Android's automatic cloud backup is switched off for LoopClosed, so this data is not copied to your Google account; use Settings → Back up to keep a copy.
LoopClosed Learn is a separate app from Kept Index LLC for people aged 18 and over; you confirm your age when you start. Your mistakes, subjects and retest results stay on your phone. They are never ranked, and never shown to teachers, parents or other students unless you choose to share: by sending one question as a challenge link (below), or by joining a class.
If you join a coaching-centre or university class with a code, the app sends that class a summary every few hours: the name you chose, counts of open, stuck and mastered mistakes in total and per subject, counts of why marks were lost, your recall rate, retests done in the last 7 days and days to your exam. Question text, answers, photos, notes, other loops, your phone number, email and location are never sent. The class organiser sees the summary on a private dashboard. Leave the class in Settings → Classes and your summary is deleted. A member who has not opened the app for a year is removed automatically. Teachers who create a class provide only the class and institution name.
The AI tutor is off until you agree to turn it on. When you ask about a mistake, the app sends only that mistake: the question text and, if you choose, a smaller copy of its photo, your answer, the right answer, the subject, why you think you lost the mark, and the conversation so far. It goes through the LoopClosed link server (operated by Kept Index LLC on Cloudflare) to an AI provider (currently Anthropic, or Google) that writes the answer. The link server does not store the question, photo or answer; it keeps only a daily question count tied to a random install number, so it can limit use. The conversation is saved only on your phone and you can clear it at any time. AI answers can be wrong; check important answers with your teacher or textbook.
Only when you tap Challenge friends and create a link, the link server stores what you chose on that screen: a smaller copy of the question photo, the question text, the answer if you switched it on, the subject and your first name. Anyone with the link can see these. The server counts how many people opened it, tried it and got it right, but records nothing about who they are. It is deleted after 90 days, when you delete the link, or when you delete the mistake.
Only when you choose to send a confirmation link, the link server (operated by Kept Index LLC on Cloudflare) stores that request: the title, statement, amount, reference, your name and the other person's name, plus their reply, the photos or PDFs they upload, the server time and their country. It is deleted automatically after 30 days, or immediately when you delete the link. The other person's fingerprint, face or PIN never leaves their phone — their phone only reports that the check succeeded. That report shows their phone was unlocked by its user; it is not an identity check.
When you seal evidence while online, only its fingerprint (a SHA-256 code, not the photos or details) is sent to the server to record the time.
Off unless you switch them on. They contain only the app version, phone platform and the error message, after the app removes names, email addresses, phone and other numbers, web links and file paths. Never your loops or photos.
A backup is a file the app creates only when you ask. It contains your loops and photos and goes wherever you choose to save it (for example your email or cloud drive) under that service's terms. If you set a password, the file is encrypted (XChaCha20-Poly1305 with a key derived from your password) and nobody can open it without the password — including Kept Index, so we cannot recover a forgotten one. Without a password, anyone with the file can read it.
The camera and photo library are used only when you choose to attach a photo as proof. Photos are copied into the app's private storage on your device.
Only if you switch on "Stamp camera photos with location", the app reads your location at the moment you take a photo and saves it with that photo on your device.
Reminders are scheduled locally on your device. No push server is used.
When you share a follow-up message or a proof report, it goes through the app you choose (WhatsApp, email, etc.) under that app's own privacy terms.
The beta contains no advertising or tracking SDKs and does not sell or share data.
Settings → Delete all data removes everything on the phone and asks the link server to delete your links. If the server cannot be reached, the app keeps retrying until it confirms. Uninstalling the app also deletes the data on the phone; links still on the server expire after 30 days.
LoopClosed is not directed at children under 13. LoopClosed Learn is only for people aged 18 and over (college and university students and adult exam candidates); you confirm this when you start.
If a future version adds cloud sync or accounts, this policy will be updated and you will be asked before any more data leaves your device.
Questions or requests: [email protected]