Mobile privacy policy

Updated 30 October 2026

This policy covers Loop Albania Business, also displayed on your device as Loop Business, on iPhone, iPad and Android. The app serves existing Loop business owners and staff.

Julian Muslia is the publisher and contact for the app. Businesses manage their staff access and the customer and order records in their workspaces. This policy describes the mobile app; pages opened in your browser are also subject to the notices shown on those websites.

Information the app uses

• Account and business information: your sign-in email or username, authentication information, account identifiers, name, business membership, role, assigned locations and permissions. If you choose Continue with Google or Continue with Apple, we receive the email address, name and account identifier that provider shares. These enable sign-in and determine your access.
• Business settings and photos: business details, logo and photos that administrators enter or upload in Settings, using a photo from the library or, if you allow camera access, a new photo.
• Order information: order identifiers, table or umbrella references, items, quantities, prices, customer notes, timestamps and statuses. Actions taken in the app are sent to your business's Loop workspace to process its orders.
• Hotel reservations and guests: reservation dates, rooms, rates, notes and status, and the guest details your business records, such as name, email, phone number, country, identity document number and image, vehicle licence plate, check-in and check-out times and extras.
• Payments and reports: amounts, payment methods and payment records entered for orders and reservations, and the reports built from them. The app does not process card payments or store card numbers.
• Order messages and moderation: customer and staff messages associated with an order, message timestamps, and administrator reports, block reasons and customer reference identifiers. These support communication about an order and management of abusive or invalid orders. Messages are shared with the customer and authorized business staff; block reasons may be shown to the affected customer.
• Service and diagnostic information: requests to our service providers include information such as IP address, device or operating system details, app version and request or SDK diagnostic information needed to operate, secure and maintain the service.
• Notifications: on devices where notifications are enabled and you allow them, a push notification token linked to your staff account, so the app can alert you to new orders. Signing out removes the token.
• Support information: when you contact us, we receive the contact details, messages and attachments you choose to send.

Why information is used and who receives it

Information is used to authenticate accounts, apply business permissions, display and update orders and hotel reservations, record check-ins, check-outs and payments, produce reports, send order notifications, provide support and maintain service security and reliability. It is not sold and is not used for advertising.

The app uses Supabase for authentication and business data services. The Loop website and its APIs use hosting infrastructure, including Vercel. Google Firebase stores uploaded business photos and delivers push notifications (through Apple Push Notification service on iPhone and iPad). When a hotel connects a channel manager, Channex receives the availability, rate and reservation information needed to synchronise with booking sites on the hotel's behalf. Google and Apple handle social sign-in when you choose it. Providers process the information needed to deliver these services. See Supabase's, Vercel's, Firebase's and Channex's privacy information.

Your authorized business team can access workspace records according to its permissions. Service providers may process information in countries other than your own. Information may also need to be disclosed to comply with applicable legal obligations.

The native app does not display advertising, include Google Analytics or Firebase Crashlytics, or use your information for tracking across other companies' apps and websites for advertising. It does not request access to your contacts, microphone or location. It asks for camera access only when you choose to take a photo, and for notification permission only to deliver order alerts. It does not collect payment-card information or offer purchases.

Storage and retention

The native app stores sign-in session tokens in protected device storage. It stores your language preference locally. Reports and PDFs you export are created on your device and are only sent where you choose in the share or print sheet. Signing out clears the local session. Signing out or uninstalling the app does not delete the business's cloud records.

Account and business records are retained while needed to operate the workspace, support the business and meet applicable recordkeeping or security requirements. Retention of customer and order records depends on the business responsible for them. Service-provider logs and backups follow the providers' retention processes. Contact us about the records associated with your account.

Your choices and requests

You can sign out or delete your account in Account. Your business administrator manages your staff permissions and workspace access.

Delete your account or data

You can delete your Loop Business account in the app: open Settings → Account and tap Delete account, then confirm. If your account is not linked to a business, the same option is on the screen that says so.

• Staff accounts and accounts without a business are deleted immediately: your sign-in, profile, business access and the notification tokens of your devices. You are then signed out.
• Accounts that own a business send a deletion request instead, because the business is deleted with them. The Loop team deletes the account and the business within 30 days and confirms by email. You can keep using the app until then.

If you can no longer sign in, email julianmusliaa@gmail.com with the subject "Loop Business account deletion" from your sign-in email; we delete the account within 30 days and confirm by email.

Orders, reservations, guest records, payments and messages belong to the business that created them and are kept or deleted by that business, subject to its legal recordkeeping duties; your name may remain on records of actions you took. Guests whose details a hotel recorded should contact that hotel, or email us and we will forward the request. Service-provider backups are overwritten on their normal schedules.

To request access to or correction of personal information, contact your business administrator or julianmusliaa@gmail.com. We may need to verify your identity and coordinate with the business responsible for the records. Some business records may need to be retained to meet legal obligations. Depending on where you live, you may also have rights to restrict or object to processing, request portability, or complain to your local data protection authority.

Children

This is a business staff application and is not designed for children. Contact us if you believe a child has provided personal information through the app.

Changes and contact

Updates to this policy will appear here with a revised date. For privacy questions, contact Julian Muslia at julianmusliaa@gmail.com or +355 69 297 6678.