1. Summary
- LOOP makes AI-generated videos and AI characters from the trend clips, videos and photos you choose.
- To do that, we send the media you pick and your character description to our AI provider, Higgsfield. We do this only after you agree in the app.
- Your creations are private to your account. We do not sell your data, show ads, or track you across other companies' apps or websites.
- Higgsfield's own terms allow it to use content submitted to it to improve its AI models, and to keep content for a period after deletion. Section 5 explains this.
- You can delete individual creations and characters, or your whole account, in the app.
2. What we collect
| Data | Where it comes from | Why we use it (purpose) | Legal basis (EU/UK) |
|---|---|---|---|
| Email address; name (if you share it through Sign in with Apple); account identifiers | you, via our sign-in provider Clerk and Apple | create and secure your account | contract |
| Photos of yourself ("Use myself") | you | create your saved character and generate videos you ask for | contract + explicit consent, recorded in the app |
| Videos you upload (including their sound) and the part you trim | you | the source of a creation | contract + consent |
| AI-character descriptions, chosen appearance options, character names | you | generate a fictional character | contract + consent |
| Generated videos and character images | produced for you by Higgsfield | your library, playback, saving and sharing | contract |
| Consent records (what you agreed to, the version of the text, time, app version, language) | the app | prove your choices and respect them | legal obligation / legitimate interests |
| Age confirmation (18+) | you | our service and our provider are for adults only | legal obligation / contract |
| Purchase records (signed App Store transactions; on the website, Stripe checkout and subscription records; product, credits granted or used) | Apple, Stripe and our credit ledger | deliver credits, handle refunds, accounting | contract + legal obligation |
| Push notification token and app version (only if you turn notifications on) | your device | tell you when a video is ready | consent |
| Reports you submit (what you reported, reason, optional note) | you | safety and moderation | legitimate interests |
| Device identifier for vendor, device model, OS version | sent by the Clerk sign-in component | sign-in security and session management | legitimate interests / contract |
| IP address, user agent; approximate location (city/country) derived from IP by Clerk for session security | your connection | security, abuse prevention, rate limiting | legitimate interests |
We do not collect:
- contacts, precise location, health data or browsing history
- advertising identifiers, or any data for advertising
- camera or microphone access (you pick media with the system picker)
We do not read your photo library. Saving a video asks for add-only access.
3. How we use AI and what we send to Higgsfield
- When: only after you accept the in-app notice "What we send to Higgsfield", and only for a creation or character you start.
- What:
- for a video: the trimmed clip you chose, with location metadata removed, and 1–8 images of the character you picked
- for an AI character: your description and chosen options, and an optional reference photo
- Not sent: your name, email, account IDs, contacts, device identifiers or location.
- How: from our servers only. Our provider credentials never reach your device. The media is delivered as links that Higgsfield downloads. Depending on configuration, these are links to Higgsfield's own upload storage or to time-limited links into our private storage.
- What comes back: the generated video or character image, which we copy into our private storage straight away.
- Moderation: text you write is checked against a list of prohibited terms, and Higgsfield may refuse unsafe content. Refused results are never shown, and the credits are returned.
- Provenance: Higgsfield may embed watermarks or content-provenance signals (its terms, §6.4). We do not remove them. Results in the app are labelled "AI-generated".
4. Who we share data with
| Recipient | Role | What |
|---|---|---|
| Higgsfield | AI generation provider. Under its terms it also acts on its own behalf when it uses content to improve its models (§5). | media and descriptions listed in §3 |
| Clerk, Inc. | sign-in and account provider (processor) | email, name, Apple sign-in identifier, session data, device identifier, IP-derived location |
| Amazon Web Services | hosting, storage, databases, logs (processor) | everything we store |
| Apple | Sign in with Apple, App Store purchases, push notifications | purchase transactions, sign-in tokens, notification payloads (generic text and a creation ID only) |
| Stripe | payments for purchases and subscriptions on the website (processor) | email address, account identifier, purchase and subscription details. Card details are entered with Stripe and do not reach us. |
| Authorities or others | where the law requires it, or to protect people from harm (for example, reports of intimate images shared without consent) | what is required |
We do not sell or rent personal data, and we do not "share" it for cross-context behavioural advertising (CCPA/CPRA).
5. Higgsfield's terms: what you should know
These points come from Higgsfield's Terms of Use (last updated July 26, 2026). They apply to content we send to Higgsfield on your behalf:
- Model training. Higgsfield's terms say content, inputs and outputs "may be used by Company to train, develop, enhance, evolve, and improve its" AI models. This applies unless an Enterprise Agreement says otherwise. We do not have an agreement that stops this. Content you submit through LOOP may be used by Higgsfield to improve its models.
- Retention at Higgsfield.
- Generated files are accessible for at least 7 days after creation (Higgsfield billing and retention documentation).
- Under Higgsfield's terms (§16.5), content is kept for 30 days after an account is deleted, then deleted from its active systems. This excludes data required by law, anonymised data, and content already used to improve its models.
- The account in that clause is our provider account.
- No deletion on request through us. Higgsfield does not offer a way for us to delete individual items it has received. When you delete something in LOOP, we delete our copies. We cannot delete Higgsfield's copies; they follow the periods above.
- Higgsfield's terms require users to be 18 or older.
6. How long we keep data
| Data | Kept |
|---|---|
| Your source videos, character photos, generated videos | until you delete them or your account |
| Unfinished uploads | deleted after 1 day |
| Account data (email, name, identifiers) | until account deletion. Our deletion job also deletes your Clerk account. |
| Consent records | for the life of the account |
| Push tokens | until you sign out, turn notifications off, or delete the account |
| Purchase and credit records | 7 years for tax and accounting, anonymised when you delete your account |
| Reports and moderation decisions | 2 years after resolution |
| A one-way hashed marker of your sign-in identifiers after deletion | 3 years, only to stop repeat abuse of the free first character |
| Server logs (no media, prompts, tokens or links) | 30 days. Load-balancer access logs (IP, user agent) 90 days. |
| Backups | deleted data disappears from backups within 35 days. Deleted file versions are removed within 3 days. |
| Copies at Higgsfield | see §5 |
7. Your choices and rights
- Delete: Profile → Delete account deletes your characters, photos, videos, uploads and account, and also your account at our sign-in provider.
- If you used Sign in with Apple, you can confirm with Apple so we revoke our access.
- The app shows progress and confirms when deletion is complete. It also lists what we must keep.
- You can also delete single creations and characters at any time.
- Withdraw consent to AI processing: Profile → Withdraw AI consent. This stops new processing. It does not undo processing already done (see §5).
- Notifications: off by default. Turn them on or off in the app or in iOS Settings.
- Access, correction, portability, objection, restriction: contact support@botsbloc.com. We answer within the time required by applicable law.
- Complaints: you may contact your data protection authority.
8. Children
- LOOP is for adults. You must be 18 or older, or the age of majority where you live if higher, to create anything.
- Browsing the trend catalog requires no account and collects no personal data beyond what the connection needs.
- We do not knowingly collect children's data. If you believe a child has used LOOP, contact us and we will delete the account.
- Our content rules forbid images of anyone under 18.
9. Security
- Media is stored privately, encrypted at rest. Access goes through short-lived links tied to your account.
- Connections use HTTPS.
- Staff access is limited and logged.
- We never log faces, full prompts, tokens or media links.
- No system is perfectly secure. We will notify you and regulators of a breach where the law requires it.
10. International transfers
Our providers listed in §4 may process your data in countries other than the one where you live.
11. Changes
We will post changes here and update the effective date. If a change affects what we send to our AI provider or how it may use it, the app asks for your consent again before new processing.
12. Contact
Gizmolab FZ LLC, support@botsbloc.com, support: https://loop.botsbloc.com/legal/support.