1. Introduction
TinyLoop ("we", "us", "our") operates the website tinyloop.in and related services. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform. By using TinyLoop, you consent to the practices described in this policy.
2. Information We Collect
Account Information: When you register, we collect your name, email address, and optionally your mobile number. If you sign in with Google, we receive your name, email, and profile photo from Google.
Profile Information: City, neighbourhood, bio, and profile photo that you choose to provide.
Listing Information: Photos, titles, descriptions, categories, and location details of items you post.
Children's Information: If you use the "My Kids" feature, you may provide your children's names, dates of birth, and gender. This is used solely to provide age-appropriate recommendations.
Identity Verification: If you choose to verify your identity, we collect a photo of your government-issued ID (Aadhaar, PAN, Voter ID, or Driving License). This is used only for verification purposes and is stored securely.
Usage Data: We automatically collect device information, browser type, IP address, and pages visited to improve our service.
Messages: Chat messages exchanged between users on the platform.
3. How We Use Your Information
We use your information to:
- Create and manage your account
- Display your listings to other users
- Enable messaging between buyers and sellers
- Send verification emails and OTPs
- Provide age-appropriate recommendations based on your children's ages
- Send notifications about events, messages, and listings relevant to you
- Moderate content using AI to ensure safety
- Improve our platform and user experience
- Prevent fraud and ensure platform safety
4. Information Sharing
We do
not sell your personal data to third parties. We share information only in these cases:
- Other Users: Your name, city, and listings are visible to other users. Your email, phone number, and exact address are never shared.
- Service Providers: We use Brevo (email), Cloudflare (hosting/storage), Google (AI validation, authentication), and Firebase (phone verification) to operate our platform. These providers only receive data necessary for their service.
- Legal Requirements: We may disclose information if required by law or to protect the safety of our users.
5. Data Storage & Security
Your data is stored on secure servers hosted by Railway (cloud infrastructure) and Cloudflare R2 (media storage). We use:
- Encrypted passwords (bcrypt hashing)
- HTTPS encryption for all data in transit
- JWT tokens for secure authentication
- Rate limiting to prevent abuse
- AI-powered content moderation
While we take reasonable measures to protect your data, no system is 100% secure. Please use a strong, unique password for your account.
6. Children's Privacy
TinyLoop is designed for parents and caregivers, not for direct use by children. Users must be at least 13 years old to create an account. Children's information stored in the "My Kids" feature is provided by parents and is used solely for personalized recommendations. We do not knowingly collect information directly from children under 13.
7. Cookies & Tracking
We use essential cookies for authentication (keeping you logged in) and language preferences. We do not use tracking cookies for advertising purposes. If we integrate third-party advertising in the future, we will update this policy accordingly.
8. Your Rights
You have the right to:
- Access: View all your personal data in your profile
- Edit: Update your name, phone, city, and other profile information
- Delete: Permanently delete your account and all associated data from your profile settings
- Export: Request a copy of your data by emailing us
- Opt-out: Unsubscribe from email notifications
9. Data Retention
We retain your data as long as your account is active. When you delete your account, we permanently remove your profile, listings, messages, and personal data within 30 days. Anonymized usage data may be retained for analytics.
10. Third-Party Services
Our platform integrates with:
- Google: OAuth sign-in, Gemini AI for content validation
- Firebase: Phone number verification
- Brevo: Transactional emails (verification, notifications)
- Cloudflare: CDN, R2 storage for photos
Each service has its own privacy policy. We recommend reviewing them.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of TinyLoop after changes constitutes acceptance.
Questions about your privacy?