Privacy policy
Draft structure for legal review. Placeholder text in brackets must be replaced before launch.
This policy explains what Loam (“we”) collects when you use the Loam website and apps, why, and the choices you have.
1. Who we are
Loam (“we”) makes the Loam website and apps and decides how the data described here is used. Write to us at privacy@loamnotes.app. [address]
2. What we collect
Waitlist
Your email address, if you join the waitlist. Our server asks you to confirm it by email, then adds it to the mailing list our email provider keeps for us. Apart from the visit counts described under Cookies, nothing else on this website collects information about you.
Account
[name, email, passkey public keys, password hash]
Notes
[what is stored, where, encryption at rest]
Payments
[handled by Apple, Google and RevenueCat; what we receive]
Devices and notifications
[push tokens, device names]
3. Why we use it
We use your waitlist address only to email you about Loam’s launch. You consent by submitting the form and confirming your address. [purposes and legal bases for the apps]
4. Who processes it for us
Resend (email and the waitlist), RevenueCat, Apple and Google (payments), Supabase (database, hosted in Frankfurt, Germany) and bunny.net (hosting and content delivery).
5. How long we keep it
Waitlist: until you unsubscribe or we launch and you choose not to continue. Our own servers don’t store your address. To stop people flooding an inbox with sign-ups, they keep a counter keyed by a one-way code made from your address or network address, deleted within 24 hours.
6. Your rights
You can unsubscribe with the link in any email. [access, correction, deletion, portability, objection; how to ask]
7. Cookies
The Loam website sets no cookies, runs no analytics and loads nothing from other companies.
8. Children
[minimum age]
9. Changes to this policy
We’ll post changes here and update the date above. For significant changes we’ll also email you.