Privacy policy · IslooLoop

Version 2026-10-04. This is the whole thing — no separate long version hiding somewhere.

The short version

Your confessions are anonymous to other users by default — no name, no photo, and nothing tying one confession to the next. You can turn that off in settings and be named instead; that is your choice and it is off to begin with.

Two things are true regardless. Your email address is never shown to anyone. And moderators can always see which account wrote something when it is reported — anonymity from other users is not anonymity from us, and it could not be, or there would be no way to deal with someone abusing the place.

What we collect

From Facebook or Google, when you sign in: your name, your email address, and your profile photo. That is all we ask for. We do not get your password, your posts on those platforms, or your messages.
Not your friend list. IslooLoop asks Facebook for your email address and public profile and nothing else. We do not request your friend list, your friends' details, your posts, your likes or your messages, and we could not read them if we tried.
What you tell us at signup: your interests, hobbies, the topics you want more of, the topics you want to avoid, your birth year, and optionally your city or area and a short bio.
What you do here: your confessions, comments, reactions, message requests and messages, anonymous invites and cards you send or receive, who you follow, and any reports you file.
Roughly where you are — and only roughly. A city or neighbourhood, like “Toronto” or “Brooklyn”, and only because you typed it. We do not collect GPS coordinates, we do not track your location in the background, and there is no precise location anywhere in this app.

What we do with it

Build your feed. Your interests, hobbies and chosen topics decide what turns up in “For You”. The topics you said you want to avoid are filtered out. Your city or area powers the “Nearby” tab.
Show your confessions to other people. Your posts, comments and reactions are public. Whether your name and photo go with them is the setting described above — anonymous unless you say otherwise.
Let people talk only when both sides want it. Message requests must be accepted before a chat opens. You can pause new requests or limit them from settings. Messages expire after 24 hours by default.
Keep the place liveable. We run posts past a keyword filter, and moderators review anything reported or flagged.
Warn before you accidentally identify yourself. The compose screen may point out emails, phone numbers, handles, links or exact locations in your draft. That warning is there to help you edit before posting.

We do not sell your data. We do not run ads on it. We do not hand it to anyone except where the law actually requires it, and we ask for a valid legal request before we do.

Who sees what

Everyone on IslooLoop sees: your confessions, your comments and the city or area you tagged a post with — shown as Anonymous unless you have chosen to be identified.
Everyone sees, only if you turn identity on: your real name, your profile photo, your bio, your city or area, and a profile page listing your confessions.
Only people in a conversation see: the messages in that conversation. If someone reports a conversation, moderators can review the report and nearby message context for safety.
Only the two people involved see: an anonymous invite or card and which of them answered. Neither sees the other's name, photo or account. If it is reported, moderators can see both accounts and nearby context for safety. A card you download or share leaves the app and can be saved, copied or reposted by anyone you send it to.
Nobody but you sees: your email address, your birth year, your interest and dislike selections, and the reports you file.
Moderators see: the account behind any reported confession or comment, including its name and email, whatever your identity setting says. Every action a moderator takes is logged against their name.

Being anonymous to other users does not make a confession untraceable. It is stored against your account, moderators can see it, and it can be handed to the authorities if the law requires that. Write accordingly.

How we protect your data

Privacy is the point of this place, so protection is built into how it works rather than added on top. Specifically:

Encrypted connections. Everything between your device and IslooLoop travels over HTTPS. Our database provider encrypts stored data at rest.
No passwords to steal. You sign in with Google or Facebook, so we never see or store a password for your account. We keep a provider token only while it is valid.
Anonymous by construction. Account identifiers are removed from what is sent to other people's browsers, not merely hidden on screen. Chats show each person as a different icon in every conversation, so two chats cannot be linked to the same account.
Sessions that can be revoked instantly. Your sign-in is a signed, HTTP-only cookie that the browser's scripts cannot read, and it is checked against our records on every request, so a ban, suspension or deletion takes effect immediately.
Least access. Only moderators can see which account is behind a reported item. Moderators sign in separately with hashed passwords and short sessions, and every action they take is written to an audit log.
Abuse protection. Rate limits slow down spam and scraping, a keyword filter and human moderators review risky content, and the app sends security headers that block it being embedded in other sites.
Only what we need. We collect the minimum to run the service, delete expired data on a schedule, and use no advertising or third-party tracking.
Where data lives. Our database is hosted in Singapore. By using IslooLoop you understand that your data is processed there, whichever country you are in.

Two honest limits. Messages are protected in transit and at rest but are not end-to-end encrypted, which is why moderators can review a reported conversation. And no system is perfectly secure: if you find a weakness, please tell us at privacy@islooloop.pk before sharing it publicly, and we will respond and fix it promptly.

Reporting is confidential

If you report someone, they are never told who reported them. Not in the app, not in any notification, not ever. Moderators can see it, because they need to spot people abusing the report button.

Message reports are handled the same way: confidential to the reporter, visible to moderators with enough conversation context to decide whether to dismiss, action or block the conversation.

Moderation, and the things that matter more than a rule

Posts containing certain words are held for a moderator to read before they go live, rather than being deleted. Anything that reads like self-harm, suicide, or abuse goes to a priority queue and gets looked at first — because a person needs a response, not a deleted post.

We remove content that is illegal, that harasses or targets someone, that shares someone else's private information, or that sexualises anyone. Accounts that keep doing it get suspended or banned. Illegal material may be reported to the authorities.

If you are struggling right now, find a free helpline in your country at findahelpline.com, or call your local emergency number if you are in immediate danger.

Age

You must be at least 14 to have a profile; the signup form and our servers both enforce it. We ask for the year and month you were born to check this, store only the year, and discard the month straight away. Age is self-declared, so we also act on reports of anyone who appears to be under the minimum, and we prioritise any report that involves someone under 18. Being anonymous to other users does not put anyone beyond a moderator's reach.

How long we keep things

Your account and posts: until you delete them or your account.
Sign-in tokens from Facebook and Google: only as long as they are valid, and cleared when you sign out. We do not hoard long-lived access to your provider account.
Private messages: expire after 24 hours and are purged by the retention sweep. A report may keep enough context for moderators to review safety. Screenshots are still possible, so disappearing messages are not a promise that nobody can save what they saw.
Anonymous invites and cards: invites expire after 7 days and cards after 30. Expired ones are removed by the retention sweep a week later, unless an open report needs them for review. Cards you save as an image are created on your device and are never uploaded to us.
Reports that a moderator dismissed: 90 days, then deleted.
Reports we acted on, and moderator action logs: kept, so there is a record of who did what.
Deleted accounts: the personal data goes immediately (see below). An empty placeholder row remains so that moderation history does not break.

Deleting your account

You can delete your account from your profile settings, and it happens straightaway — no waiting period, no “are you sure” loop that never ends. Your name, email, photo, bio, city or area, birth year, interests, follows, message conversations and friend matches are all erased, and every sign-in token we hold is destroyed.

You choose what happens to your posts:

Delete them too (the default) — posts, comments and reactions are removed outright.
Leave them up, detached — the words stay but the link to you is cut. They show as “Deleted user” with no name, photo, or way back to you.

Either way, nothing personal is left sitting behind a supposedly deleted account.

Your other choices

Turn your identity on or off whenever you like, from settings. It applies to everything you have already posted as well as everything new.
Change your interests, city or area and bio whenever you like, from your profile.
Turn off comments on any individual confession before you post it.
Pause new message requests or limit private replies from settings.
Revoke IslooLoop's access from Facebook or Google at any time, from their own app settings. That stops you signing in here; use the option below if you also want your account and content gone.
Ask us for a copy of what we hold about you.

Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, give you a portable copy, or stop using it for something you no longer agree to. Deleting your account does most of this instantly; for anything else email privacy@islooloop.pk from the address you signed up with and we aim to reply within 30 days. If you are in a region with a data protection authority and are unhappy with how we handled a request, you may also contact that authority.

Changes

If we change this policy in a way that matters, we will ask you to read and accept the new version before you carry on using IslooLoop.

Contact

Questions, data requests, or something we got wrong: privacy@islooloop.pk.