Legal

Privacy Policy

Last updated 2 July 2026

Short version: your health data stays on your phone, we only keep what we need to run the app, and we never sell your data.

1. Who we are

Loamkeep ("Loamkeep", "we", "us") is a screen-time app that turns movement and meditation into earned minutes for the apps you choose to gate. This policy covers both our website at loamkeep.com and the Loamkeep mobile app.

Loamkeep is operated by a sole independent developer based in Romania, who acts as the data controller responsible for your personal data. The fastest way to reach the controller is privacy@loamkeep.com. If you need the controller's full legal identity, for example to exercise your rights or lodge a complaint, we will provide it on request through that address.

2. What we collect

When you join the waitlist (website)

Your first name and email address, and which platform you want (iOS or Android).
Basic technical data your browser sends when you submit the form, such as your IP address, handled by our email provider.

When you use the app

Account: your first name, your email address, and a sign-in identifier from Apple or Google if you use those to log in. Sign-in codes we email you are stored only as a one-way hash, together with the IP address and device that requested them, to prevent abuse.
Device and session: a device identifier and a login token, stored only as a one-way hash. We never store the raw token.
Your settings: which apps and websites you choose to gate (by name), your difficulty and free-scroll settings, and your earn and spend history (the minutes ledger).
Quest results: whether you completed a walk, workout, or meditation goal on a given day, and the target that applied.
Purchases: if you buy a paid feature, Apple processes the payment. We never see your card details, only a confirmation of the purchase and its status.
Server logs: like most services, our servers keep short-lived technical logs (IP address, request time, and the endpoint called) for security and debugging.

Health data

Loamkeep reads step count, workouts, and mindful minutes from Apple Health on your device to check whether you met a goal. Your raw health data never leaves your phone and is never sent to our servers. Only the result of a goal (met or not met, and how many minutes it earned) is synced. We never use health data for advertising and we never sell it, as required by Apple.

3. Cookies and local storage

Our website does not use advertising or tracking cookies, and we do not run third-party analytics on it. The site stores one value in your browser's local storage: your light or dark theme choice. It never leaves your device.

The website loads its fonts from Google Fonts. When the page loads, your browser requests those font files from Google's servers, which means Google receives your IP address as part of that request. Google's own privacy policy applies to that processing.

Because we do not track you across sites, browser signals like Do Not Track and Global Privacy Control require no action from us: there is no tracking to switch off.

Our website and app may link to other sites and services, such as Apple's or Google's. This policy does not cover them. Check their own privacy policies before sharing data there.

4. How we use your data

To run the app: track your earned minutes, gate and unlock your chosen apps, and keep you signed in across your devices.
To send you sign-in codes and essential account emails.
To email you about the launch, product updates, and content on a healthier relationship with your screen if you joined the waitlist or opted in. You can unsubscribe at any time from any such email.
To keep the service secure and prevent abuse.

We do not use your data for third-party advertising, and we do not sell it.

5. Legal bases (GDPR)

Contract: to provide the app and its core features to you.
Consent: for marketing and launch emails, and for reading your Apple Health data (you grant this in the Health permission prompt). You can withdraw consent at any time.
Legitimate interest: to keep the service secure and prevent fraud and abuse.

6. Who we share it with

We do not sell your data. We share it only with service providers who process it on our behalf, under contract, to run Loamkeep. These fall into a few categories:

Email delivery, to send waitlist, launch, and sign-in emails.
Hosting and infrastructure, to run our servers and store your account and app data.
Sign-in providers, if you choose to log in with Apple or Google.
App stores (Apple, Google), to distribute the app.
Font delivery (Google Fonts), which receives your IP address when the website loads, as described in section 3.

We keep an up-to-date list of the specific providers we use and will share it on request at privacy@loamkeep.com. We may also disclose data if required by law, or if Loamkeep is transferred to a new owner, in which case we will let you know.

7. Where your data is processed

Our providers may process data outside your country, including outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

8. How long we keep it

Account and app data: for as long as your account exists. Delete your account and we remove it, except where we must keep records to meet a legal obligation.
Sign-in codes: they expire within minutes and are deleted shortly after.
Waitlist email: until you unsubscribe or ask us to remove it.
Server logs: deleted on a rolling basis, typically within 30 days.

9. Your rights

Under GDPR and similar laws, you can ask us to:

Access a copy of your data, or export it.
Correct or delete your data.
Restrict or object to how we use it.
Withdraw consent at any time, without affecting what we did before.

Email privacy@loamkeep.com and we will respond within 30 days. You also have the right to complain to your local data protection authority.

If you live in California or another US state with a similar privacy law: we do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You can still exercise the access, deletion, and correction rights above.

We do not use your data for automated decisions that have legal or similarly significant effects on you.

10. Security

We store login tokens and sign-in codes only as one-way hashes, use encrypted connections, and limit who can access data. No system is perfectly secure, but we take reasonable steps to protect your data.

11. Children

Loamkeep is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has given us their data, contact us and we will delete it.

12. Changes to this policy

If we make a material change, we will update the date above and, where appropriate, notify you in the app or by email. Continuing to use Loamkeep after a change means you accept the updated policy.

13. Contact

Questions about your privacy? Email privacy@loamkeep.com.