Privacy Policy

1. Information LocalLoop handles

The app’s privacy manifest identifies the following data as linked to an account and used for app functionality, not tracking:

• Precise Location: coordinates and accuracy used for maps, nearby-city selection, route guidance, service-area and fallback logic, and submitted pickup and drop-off points. Background location is requested only during an active trip and stops when that trip ends.
• Email Address, Name, and User ID: account email, display name, account identifier, role, verification state, and an opaque session token stored in the iOS Keychain.
• Purchase History: ride and delivery requests, trip status, order items, completed work, and cancellation records.
• Other Financial Info: fare lines, the LocalLoop service fee, payment state, driver earnings, and payout-ledger entries. Review-tenant amounts are simulations; no card is charged and no payout is sent.
• Product Interaction: service-area selections, offer and trip actions, checklist state, substitutions, ratings, legal-consent versions, and related timestamps.
• Emails or Text Messages: messages typed into LocalLoop threads. LocalLoop does not read the device’s email or text-message inbox.
• Customer Support: support-thread content and safety reports submitted in the app. A server receipt does not promise that a person will monitor or answer the report.
• Other Diagnostic Data: request identifiers, synchronization failures, idempotency records, and audit events used to operate and troubleshoot the service.
• Other User Content: vehicle details, an optional license plate, store-order and substitution text, cancellation reasons, safety descriptions, rating tags, and rating notes.

LocalLoop does not use this information for cross-app tracking, targeted advertising, or sale to data brokers. The privacy manifest declares tracking as false and lists no tracking domains.

2. How information is used

LocalLoop uses information to authenticate users; provide city and sector catalogs; create quotes and requests; match and accept offers; manage trips, deliveries, messages, ratings, earnings, and legal consent; prevent duplicate or conflicting actions; respond to deletion requests; maintain safety and audit records; and diagnose service errors.

3. Location and Apple services

LocalLoop uses Apple MapKit and Core Location. Apple may process map, search, and directions requests under its terms. The iOS app uses the device’s current location for map and navigation features and sends the hosted service the pickup and drop-off coordinates included in a request. The current iOS flow does not use location for advertising or cross-app tracking. A share sheet includes trip text or a point-in-time coordinate only when the user chooses to share it.

4. Service providers and disclosure

Cloudflare processes review-tenant data on LocalLoop’s behalf through Workers application hosting, the D1 database, and queue or scheduled processing. Apple provides iOS, MapKit, Core Location, notifications, and the user-controlled share sheet. The isolated review tenant does not send a real payment to a processor. If production payments, identity, screening, communications, or other providers are enabled later, this policy and the App Store privacy disclosures must be updated before those providers receive production data.

LocalLoop may disclose information when required by law or when necessary to protect users and the service. LocalLoop does not sell personal information or disclose it for advertising.

5. Storage, deletion, and retention

LocalLoop stores app state in the iOS protected container, stores session credentials in the iOS Keychain, and stores review-account and operational records in the Cloudflare-hosted review database. The service does not maintain a separate continuous iOS breadcrumb archive in the current flow.

When an eligible signed-in user requests account deletion, the app clears its LocalLoop state and credentials from the device, and the hosted service disables the account, revokes sessions, cancels eligible unmatched requests, removes live driver presence and service selections, and erases or redacts eligible precise locations, addresses, order text, authored messages, ratings, substitutions, and cached request payloads. An active trip must first be completed or cancelled.

Email, identity-provider subject, and display name may be held for up to 30 days for payment-dispute and safety handling, then pseudonymized. Authored safety and cancellation free text is also redacted after that period. Financial amounts, trip state, consent versions, and structured safety records may be retained against a pseudonymous account identifier when legally required for tax, audit, dispute, fraud, insurance, safety, or other legal obligations. Retained records do not restore marketplace access. See Account deletion for the operational flow.

6. Your choices

• Change location or notification permissions in iOS Settings.
• Choose whether to share trip text through the iOS share sheet.
• Use Account & privacy in the app to request account deletion.
• Email privacy@rvaiconsulting.com with a privacy question. Email is an additional contact path, not a replacement for the in-app deletion control.

7. Children

LocalLoop is not directed to children under 18. The operator does not knowingly collect personal information from children through the app.

8. Security

LocalLoop uses HTTPS for the hosted API, opaque role-bound sessions, least-privilege customer and driver roles, iOS Keychain storage for session credentials, and iOS file protection for local records. No storage or transmission method is perfectly secure. Never publish a reviewer token or pickup handshake code.

9. International use

The operator is based in the United States, and the review environment is intended for U.S. evaluation. Public service availability outside an approved U.S. operating area has not been established.

10. Changes and contact

Material changes receive a new policy version and may require a new in-app acceptance. Contact RVAi Consulting LLC at privacy@rvaiconsulting.com. No response time is promised on this page.