Privacy Policy

Loop is operated by Chris Goodall trading as Changing Physiques, Nansledan, Newquay, Cornwall TR8 4TH. He is the data controller for the personal data described in this policy.

Contact for privacy queries: coach@joinloop.co.uk

We only collect data you give us or that is generated as you use Loop:

• Account data: name, email address, hashed password, country.
• Body & health data you enter: gender, age, height, weight, activity level, goal, GLP-1 medication cohort (yes/no), before-photos you upload.
• Nutrition & workout logs: meals, macros, weekly check-ins, workouts, adherence.
• Wearable data (only if you connect): workouts, recovery, sleep, cycles, body measurements from Polar, Fitbit or Strava. We will update this policy before any new device connection goes live.
• Payment data: handled by Stripe. Loop never sees your card number — Stripe returns a token we store.
• Product analytics: pages visited, buttons tapped, coaching messages sent — used only to improve the product.
• Marketing attribution: if you arrive from a paid ad we receive limited event data (page view, sign-up, purchase) via the Meta Conversions API.

• To provide the service (contract): calculating your macros, storing your logs, sending your weekly report.
• To improve the product (legitimate interest): anonymised analytics.
• To send marketing (consent): newsletters and offers — you can opt out at any time from the email footer or by emailing us.
• To comply with the law (legal obligation): tax records, safeguarding.
• Special-category (health) data is processed only with your explicit consent, which you give when you complete onboarding.

We share the minimum data needed with a small set of processors, each contractually bound to protect your data:

• Stripe — payment processing (Ireland/US).
• Resend — transactional & coaching emails (US, EU sub-processors).
• MongoDB Atlas — database hosting (EU region).
• Emergent — application hosting.
• OpenAI & Google (Gemini) — AI meal/workout generation. Prompts may include your goal + macros; they do not include your name, email or photos.
• Polar, Fitbit, Strava — only if you connect them; we pull activity data.
• Meta Conversions API — event data for ads attribution, hashed before sending.

We do not sell your data. Ever.

Some processors (Stripe, OpenAI, Resend, Meta) are based in the US. Transfers are covered by the UK–US Data Bridge, the EU–US Data Privacy Framework, and/or Standard Contractual Clauses.

• Active accounts: for as long as you use Loop.
• Deleted accounts: we soft-delete first; permanent purge after 30 days.
• Financial records: 6 years, as required by HMRC.
• Marketing consent: withdrawn immediately on request.

You have the right to:

• Access the data we hold on you.
• Correct inaccurate data.
• Delete your data ("right to erasure").
• Restrict or object to processing.
• Data portability — take your data with you.
• Withdraw consent at any time.
• Lodge a complaint with the ICO (ico.org.uk).

Exercise any of these by emailing coach@joinloop.co.uk. We reply within 30 days.

Loop uses a small number of first-party cookies for login sessions and a Meta Pixel cookie for ads attribution. You can control these in your browser settings or refuse marketing cookies in the cookie banner on your first visit.

We count anonymous daily totals of how visitors respond to our cookie notice (shown, accepted, rejected). No personal data, IP address or identifier is stored.

Loop is not intended for anyone under 18. We do not knowingly collect data from minors.

If we materially change how we handle data we will notify you by email and update the "Effective" date at the top of this page.

Loop is operated by Chris Goodall trading as Changing Physiques, Nansledan, Newquay, Cornwall TR8 4TH.
Contact: coach@joinloop.co.uk