BrandLoop — Privacy Policy
BrandLoop is built by Glippin Toys, LLC. The short version: BrandLoop doesn't ask for your name.
Summary
- No sign-up needed. Your account is an ID created automatically on first launch. Moving to a new phone can use a one-time transfer code — still no identity needed. If the app cannot connect, you can sign in or create an account with an email and password; we use that email only for sign-in.
- Platform credentials are encrypted at rest — and optional. For each channel you choose either Auto (your platform API keys are stored encrypted with AES-256-GCM on our backend, decrypted only inside a server cloud function, never displayed back to you) or Manual (no credentials stored — BrandLoop generates the post draft and surfaces it in the in-app queue for you to publish yourself). Switching a channel from Auto to Manual deletes its stored credentials immediately.
- We only publish to channels you set to Auto. You pick the channels; you can preview before anything goes live, and an optional approval hold reviews every post.
- No advertising. No cross-app tracking. We don't sell your data.
What we collect
| Data | Why | Retention |
|---|---|---|
| Account ID (random identifier from Firebase Auth, created automatically on first launch) | Keeps your brands together and enforces your plan limits | Until you delete your account |
| Brand profile (name, description, audience, voice preset or custom voice, content pillars, links, channel toggles) | Drives AI post generation in your voice for each brand | Until you edit or delete |
| Platform API keys (only for channels you set to Auto) — encrypted AES-256-GCM | Publish posts to the channels you've set to Auto, on your behalf | Until you switch the channel to Manual/Off, remove the brand, or delete your account — switching to Manual/Off deletes the keys immediately |
| Generated content (post drafts, AI images; publish history for Auto channels; pending queue for Manual channels) | Show you what was queued or posted; let you preview before going live | History: until you delete your account. Manual queue items: 7 days (TTL). Generated images: auto-deleted from storage after 90 days |
| Usage counters (runs, posts, images per month) | Plan metering | Until you delete your account |
| Subscription status (tier + active/expired, via RevenueCat) | Unlocking paid features | Until you delete your account |
| Hashed device identifier (free plan only) | Keeps the free tier's monthly allowance fair per device; stored as a hash, never linked to your account ID | Counter resets monthly. The hash is not linked to your account and is not deleted when you delete your account. |
| Push token | Notifications from BrandLoop | Until the token stops working or you delete your account |
| Usage analytics | Not collected. The analytics SDK was removed in BrandLoop 1.5.2 (iOS build 30, live) — the app no longer sends usage events. This row stays so the change is on record. | — |
What we never collect
- Names, phone numbers, mailing addresses
- Your X / Facebook / Instagram / TikTok passwords (you provide API keys or access tokens instead)
- Your card number — payments are handled entirely by Apple's App Store / Google Play
- Anything from advertising SDKs, or data used to track you across other companies' apps
AI processing
BrandLoop's content is AI-generated. Your brand profile and post content is processed by:
- Anthropic (Claude) — writes and safety-reviews each post draft (paid API; Anthropic does not train on customer API data)
- Google Gemini (gemini-2.5-flash-image) — generates the post images from a description of your brand and the day's post
Generated images are stored on Google Cloud Storage behind public links so social platforms can fetch them (that's how posting works), and are automatically deleted from our storage after 90 days.
Payments
Subscriptions are purchased through Apple's App Store or Google Play — we never see your payment details. We use RevenueCat to check subscription status; it receives your account ID and purchase state.
Where your data lives
BrandLoop runs on Google Firebase (Auth, Firestore, Cloud Functions, Secret Manager) and Google Cloud Storage in US-region Google Cloud. Encrypted platform credentials are stored alongside your brand record. Decryption happens only inside a server-side cloud function; the decrypted value is never logged or returned to the app.
Third parties
- Firebase (Google) — authentication, database, cloud functions, secret storage
- Firebase Cloud Messaging (Google) — push notifications.
- Anthropic (Claude) — post text generation and safety review
- Google Gemini — image generation (gemini-2.5-flash-image)
- RevenueCat — subscription status
- X (Twitter) — receives posts via the X API, using the developer keys you provided
- Meta (Facebook + Instagram) — receives posts via Graph API using tokens you provide
TikTok and Nextdoor are not third-party recipients of your data — they have no public posting API, so BrandLoop only generates the post and shows it to you in a manual queue to share yourself.
Your rights
- Delete your account: in the app — Plan & usage → Delete account & data (immediate, permanent: brands, posts, media, keys, and the account itself) — or email support@glippintoys.com. An active subscription is cancelled separately in your App Store / Google Play subscription settings.
- Disconnect a platform: per-brand, removes the encrypted credentials immediately
- Pause posting: set a channel to Off or On demand to stop its daily scheduled run without losing your profile
- Request your data: email support@glippintoys.com
Children
BrandLoop is intended for app builders, business owners, and creators; it is not designed for or marketed to children under 13, and we do not knowingly collect data from children.
Changes
We'll update this page and its date when the policy changes.
Contact
Glippin Toys, LLC — support@glippintoys.com