Privacy Policy

Moritz Losert
Silcherstraße 16, 73770 Denkendorf, Germany
Email: moritz.losert@web.de

Waitlist signup (this website)

When you join the early-access waitlist, we store your email address, chosen language, and — if present — UTM campaign parameters and the referring page, so we can understand how signups happen. No cookies are set and no third-party tracking script is loaded.

Using the Loomo app

At sign-up: your email and password, or — if you sign in with Apple — the ID Apple provides (possibly an Apple-generated relay email if you hide your real address). While using the app: information about your brand (name, website link or questionnaire answers, detected brand color/logo), content you upload or generate (slideshows, avatar videos, illustrations), usage data (e.g. which content you approve or reject, your current usage balance), and — if you connect a social media account — the access tokens required for that (stored encrypted, or in the iOS Keychain).

To provide the service, we use the following external providers:

• Supabase (EU region) — database, login, file storage, server-side functions. Hosts essentially all data listed above.
• Anthropic (USA) — processes brand/content input to generate scripts, hooks and illustrations.
• AWS (Amazon Web Services) (USA) — renders slideshows and videos from the generated content.
• Pexels and Imgflip (USA) — supply stock photos and meme templates for content creation.
• RevenueCat — manages subscriptions/purchases together with the App Store.
• Apple — App Store payment processing, "Sign in with Apple".
• Meta (Instagram), and in the future TikTok and YouTube (Google) — only if you actively connect an account in the app, to publish on your behalf there.

Some of these providers (including Anthropic, AWS, Meta) are based outside the EU, in particular in the US. Transfers rely, where offered by the respective provider, on EU Standard Contractual Clauses or comparable safeguards under Art. 44 et seq. GDPR.

Processing happens to fulfil our contract with you (Art. 6(1)(b) GDPR) and, where needed, based on our legitimate interest in operating the service securely and reliably (Art. 6(1)(f) GDPR). Connecting a social media account happens based on your explicit action (consent, Art. 6(1)(a) GDPR).

We keep your data for as long as your account exists. You can permanently delete your account directly in the app (Settings → Delete account) — this removes your user account and all associated brands, content and uploaded files irreversibly. An active subscription is not automatically cancelled by this; you need to cancel it separately in your iOS settings.

This website does not set cookies and does not load any third-party tracking or analytics scripts. The language setting is derived automatically from your browser and not stored.

You have the right to access, rectify, delete and restrict the processing of your data, as well as to data portability and to object to processing. Contact us at the email address above. You also have the right to lodge a complaint with a data protection supervisory authority.

We will update this policy as our data processing changes (e.g. once platforms like TikTok or YouTube are actually connected). The version published here always applies.