Privacy Policy
Last updated: January 2026
This Privacy Policy explains how TwinLoop (“TwinLoop”, “we”, “us”) collects, uses, discloses, and protects information when you use our website and web app (the “Service”).
1) Scope
This Policy applies to information collected through the Service. It does not apply to third-party websites, apps, or services that may link to or integrate with TwinLoop.
2) Information we collect
A) Information you provide
- Account information: such as email address and basic profile fields if you create an account.
- Session inputs and outcomes: session timestamps, selected program/pattern parameters, and outcomes you provide.
- Optional BP entries (health-related): blood pressure values you choose to enter (e.g., before/after sessions) for tracking and personalization.
- Support communications: information you include when you contact us (e.g., messages, attachments, and troubleshooting details).
- Contact submissions and testimonials: messages you send through our Contact page, and (if you opt in) your testimonial consent and display name/role (or "Anonymous").
B) Information collected automatically
- Device and usage data: basic information about how you use the Service (pages/screens viewed, features used, clicks, time spent).
- Log and diagnostic data: IP address, device identifiers, browser type, approximate location derived from IP, timestamps, crash reports, and performance logs needed to operate and secure the Service.
- Cookies and similar technologies: described in Section 6.
C) Information from third parties
If you choose to use third-party services with TwinLoop (for example, a login provider, payment processor, or analytics provider), we may receive certain information from them as needed to provide the Service.
D) What we do NOT require
- No wearable sensors are required for core functionality.
- No camera or microphone is required for core functionality.
- No “always-on” biometric monitoring is required.
3) How we use your information
- Provide the Service: enable login, run sessions, show history, and display results.
- Personalization: if you provide optional inputs (like BP), we may use trends to improve future session guidance and recommendations.
- Support: respond to requests and troubleshoot issues.
- Improve the Service: understand usage, fix bugs, and enhance reliability, performance, and user experience.
- Security and fraud prevention: protect accounts, monitor suspicious activity, and enforce our policies.
- Communications: send service-related messages (e.g., confirmations, updates, security notices). Marketing messages, if any, will include an opt-out method.
- Legal and compliance: comply with law, respond to lawful requests, and protect rights and safety.
- Testimonials (optional): if you opt in, we may display your message publicly as a testimonial using the display name you provide or "Anonymous".
4) Data sharing and disclosure
We do not sell your personal information or consumer health data. We may disclose information in the following circumstances:
- Service providers: vendors who help us operate the Service (e.g., hosting, databases, customer support tools, analytics, error monitoring, security). They may process information only under our instructions and confidentiality/security obligations.
- Legal and safety: to comply with law, court orders, or lawful requests, or to protect the rights, safety, and integrity of TwinLoop, our users, or others.
- Business transfers: if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.
- With your direction or consent: when you ask us to share information, or you consent to a specific disclosure.
- Aggregated/de-identified information: we may share information that does not reasonably identify you (where permitted by law).
5) Data retention
We retain information for as long as necessary to provide the Service, for legitimate business purposes (such as maintaining records, improving the Service, and preventing fraud), and to comply with legal obligations. Retention periods vary based on the type of data, how it is used, and applicable legal requirements.
6) Cookies and tracking technologies
We may use cookies and similar technologies (such as local storage and pixels) to:
- Operate the Service (e.g., keep you signed in, remember settings).
- Understand usage and improve performance.
- Help prevent fraud and enhance security.
You can control cookies through your browser settings and, where available, in-product controls. If you disable cookies, some parts of the Service may not function properly.
7) Security
We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is 100% secure, but we work to protect your data against unauthorized access, loss, misuse, and alteration.
8) Your choices and rights
A) General choices
- You can use TwinLoop without entering optional BP values.
- You can stop using the Service at any time.
- You can contact us for help with account or data questions.
B) Access, correction, deletion
Depending on your location and applicable law, you may have the right to request access to, correction of, or deletion of certain personal information. We may need to verify your request before responding. You may request access, correction, or deletion by emailing support@twinloop.io.
C) U.S. state privacy rights (where applicable)
If you live in certain U.S. states, you may have rights to (as applicable) request access, deletion, correction, obtain a copy of your data, and/or opt out of certain processing (such as targeted advertising). To exercise these rights, contact us using the information in Section 12.
9) Consumer Health Data notice (Washington and similar laws)
Some jurisdictions treat health-related information (including information that may relate to blood pressure or wellness outcomes) as “consumer health data.” Where applicable, we provide disclosures and obtain consent as required by law, including Washington’s My Health My Data Act. We do not collect clinical records and do not sell consumer health data.
Categories of consumer health data we may collect: optional BP entries you provide; session history, outcomes, and wellness-related trends generated from your use of the Service.
Purposes: provide the Service, personalize session guidance, maintain and improve the Service, and protect security and integrity.
Sharing: we may share limited consumer health data with service providers strictly to operate the Service (for example, hosting and secure data storage) and as otherwise described in Section 4.
Consent and rights: where required, we obtain affirmative express consent before collecting or sharing consumer health data beyond what is necessary to provide the Service. You may also have rights to access or delete consumer health data. Contact us using Section 12 to exercise applicable rights.
10) Children’s privacy
TwinLoop is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal data, contact us and we will take appropriate steps. If local law requires a higher age threshold for consent, we comply with those requirements.
11) Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and provide notice where required.
12) Contact
Privacy questions or requests? Contact support@twinloop.io.
