Privacy Policy
Your information
Privacy Policy
This policy explains what The Loop collects, why we use it, who can see it, and how to remove it.
Effective August 16, 2026
The short version
The Loop is a private beta for Bouldin Creek residents. We do not sell personal information. We do not run ads or use personal information for targeted advertising.
Your display name, profile photo, posts, replies, and public group activity are visible to signed-in members who can access the relevant space. A private message is visible only to you and the other participant. Your optional profile note is saved with your account. Your email address and home address are not shown to other members.
Information we collect
We collect only the information needed to operate and protect the neighborhood service.
•
Account information: email address, password credential in protected hashed form, authentication provider identifiers, and session records.
•
Profile information: display name, optional profile photo, and optional profile note.
•
Neighborhood information: the home address you enter and your statement that you live in Bouldin Creek.
•
Member content: posts, replies, group content, private messages, reports, appeals, and messages sent to support.
•
Controls and activity: feed settings, group membership, muted or blocked accounts, message and member searches, account export or deletion requests, and moderation actions.
•
Notification information: your notification choices, delivery status, delivery receipt identifiers, and an iPhone push token if you turn on push notifications.
•
Alpha testing information: the email address and testing preferences you submit when you volunteer, and the comments, page details, and optional screenshots you send through the web feedback form.
•
Security information: IP address, device and browser information, request time, and limited logs used to prevent abuse and diagnose failures.
Your home address
We ask for your address and your statement that you live in Bouldin Creek. The beta does not require documents or another hard verification step.
We encrypt the address separately from ordinary profile data. It is not public and is not shown to other members. The site administrator can unlock an exact address only for neighborhood administration and must provide a reason. The access is recorded in an audit log.
When you use address suggestions, the partial address you type is sent to the City of Austin Open Data portal so we can return matching Austin address points. The Loop does not separately keep those suggestion searches.
We send the resident-entered address to the U.S. Census Bureau geocoder to derive a coarse growth-map cell. The address is transferred in a protected request body, not in a URL. We discard the Census matched address and exact coordinates after deriving the coarse cell. We store only the encrypted address you entered and the coarse cell. A failed match does not block signup.
The ordinary growth view uses coarse groups and suppresses groups with fewer than 3 members. It does not show a member's exact point. This product uses the Census Bureau Data API but is not endorsed or certified by the Census Bureau.
Profile photos
A profile photo is optional. We process uploaded photos to remove embedded location metadata, resize them, and store the processed copy in private storage. Signed-in members can see the processed photo where your profile appears.
Private messages, search, and blocking
You can exchange private messages with another active member of your neighborhood. The Loop stores the message text, participants, delivery time, read state, and deletion state so both participants can open and search the conversation. Other members cannot access that conversation.
A people or message search sends the search terms to The Loop so it can return matching members or messages you are allowed to see. Request and security logs can include limited search request metadata.
Blocking is private. When either participant blocks the other, neither person can send a new private message to the other. Existing messages can remain in the participants' conversation history unless a message or account is deleted under the rules below.
Private message text is not sent to the post classifier or included in push notification text. A push alert says only that a neighbor sent a private message and opens the app after you unlock the device.
AI classification
The Loop uses an AI provider, such as OpenAI or Anthropic, to classify the topic of posts and replies and to identify possible politics, contention, threats, personal attacks, private information, or spam. These labels support member feed controls and the moderator review queue.
Before text is sent, an automated scrubber tries to remove common patterns such as email addresses, phone numbers, street addresses, coordinates, payment card numbers, and access tokens. Automated scrubbing can miss information. Do not put sensitive personal information in a post.
The classifier request does not include your account identity, profile, or private home address. Automated labels can be wrong. AI labels do not impose an account penalty. A human administrator makes moderation decisions.
We ask for separate permission before sending your post and reply text to an AI provider. Because classification is part of the beta's feed and safety system, withdrawing that permission means you must stop posting. You can withdraw permission by deleting your account or contacting us.
Read OpenAI's API data controls
Service providers
We share information with service providers only to operate, secure, and support The Loop.
•
Cloudflare provides application hosting, security, database storage, queues, and private image storage.
•
The City of Austin Open Data portal receives the partial address you type when you use address suggestions and returns matching public address points.
•
The U.S. Census Bureau geocoder receives the home address you enter to return a location match. The Loop discards the provider-normalized address and exact coordinates after deriving a coarse growth-map cell. This product uses the Census Bureau Data API but is not endorsed or certified by the Census Bureau.
•
An AI provider processes scrubbed post and reply text for classification. The current provider is OpenAI. We may use another provider, such as Anthropic, and will keep this notice current.
•
Google processes sign-in information if you choose Google Sign-In. Your use of Google Sign-In is also subject to Google's privacy policy.
•
Apple processes sign-in information if you choose Sign in with Apple. Your use of Sign in with Apple is also subject to Apple's privacy policy.
•
Cloudflare processes your email address and notification messages when email notifications are enabled. Reply notifications can include the reply text you are allowed to view and can include a private reply-by-email address. Notification email never includes your home address. It can show your display name and profile photo beside your posts and replies; the photo loads from a private link that stops working if you remove it.
•
Expo processes an iPhone push token, delivery receipt metadata, a short notification title, generic message, and internal app path when you turn on push notifications. Push messages do not include post, reply, or private message text, or your home address.
Cloudflare Privacy Policy
City of Austin Privacy Policy
U.S. Census Bureau privacy policy
OpenAI Privacy Policy
Google Privacy Policy
Apple Privacy Policy
Expo Privacy Policy
How long we keep information
We keep account and member information while your account is active and as needed to operate the beta. Posts, replies, and private messages remain until they are removed or you delete your account. We disable an iPhone push token when you turn push off, sign out, or the app detects that your session expired.
You can delete a private message you sent. The conversation then shows a deletion marker instead of its text. When you delete your account, private messages you sent are replaced with a deletion marker in active systems. Messages another participant sent remain part of that participant's records, subject to their own deletion choices.
When you request account deletion, we target deletion of active account data and account-associated content within 30 days. Limited encrypted backups and security logs may remain for up to 90 days. We may keep a narrower record longer when needed to investigate abuse, protect another person, or comply with law.
Resolved moderation records are normally kept for up to 12 months so decisions can be reviewed and repeated abuse can be identified. We keep exact-address access audit records for up to 12 months. We will shorten these periods when the record is no longer needed.
We keep alpha volunteer records and test feedback only while they are useful for running and improving the alpha. You can ask us to remove your signup or feedback by emailing the privacy contact below.
Your choices and requests
You can edit your profile, feed controls, blocks, and notification choices in the app. You can request an account export and start account deletion from Account data. The account export includes your profile, feed settings, posts, replies, mutes, reports, and the private-message conversation records you are authorized to view. Private home addresses are not included. You can replace an incorrect address through the address flow when that feature is available.
You can also ask to access, correct, export, or delete personal information by emailing hello@neighborhoodloop.org. If we deny a privacy request, you can appeal by replying to that decision. We will explain the result and available complaint options.
Security
We use access controls, encryption in transit, encrypted storage, and extra encryption for home addresses. No system is perfectly secure. Please report a suspected account or data problem to us promptly.
Adults only
The Loop is for people age 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a person under 18 has created an account.
Changes and contact
We may update this policy as the beta changes. We will show a new effective date and ask for fresh consent when a material change affects how we use sensitive information or AI. Questions and privacy requests can be sent to hello@neighborhoodloop.org.