doodloop Privacy Notice for the EEA (GDPR)

Effective 2026-10-06 · doodloop Privacy Policy

This notice is for people in the European Economic Area. It adds what the EU General Data Protection Regulation (GDPR, Article 13) asks for to the doodloop Privacy Policy, which describes what leaves your device and what does not. Where the two differ, this notice applies to you.

Who is responsible

The controller is Yongsu Lim (YS Labs), Supungro 47, dongmoon APT 103-1402, Yongin-si, Gyeonggi-do 16820, Republic of Korea · phone +82 10-2994-1423 · email june.lim33@gmail.com.

What we process, why, and on what legal basis

WhatWhyLegal basis
The white-background picture of the drawing and a short fixed instruction, when you make a loopTo make the loop you asked forContract (Art. 6(1)(b))
The app's random install ID and the times of recent loop requests (the connection's IP address instead, if the app cannot keep an ID)To limit how many loops one device can request per hour, so the service keeps working for everyoneContract (Art. 6(1)(b))
A report you send about a loop: the loop's request ID and video link from xAI, the reason, the install ID, app version, platform and timeTo review reported loops and deal with misuseLegitimate interests (Art. 6(1)(f)) — keeping the service safe

Drawings, timelapses, settings and your credit balance stay on your device and are not processed by us.

Please keep names and faces out of drawings you turn into loops. The app asks this too.

Who receives it

Transfers outside the EEA

xAI and Netlify process data in the United States. Netlify is certified under the EU-U.S. Data Privacy Framework, with Standard Contractual Clauses as a back-up. xAI's transfers are covered by Standard Contractual Clauses. To get a copy of these safeguards, email us.

How long it is kept

Your rights

You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. You also have the right to complain to the data protection authority in the EEA country where you live.

doodloop has no accounts. The install ID is random and is not shown in the app, so we cannot tell which of the records we hold are yours (GDPR Article 11). Deleting the app deletes the install ID from your device, and what the relay server keeps is deleted on its own, as set out above. If you sent a report, tell us the date and the reason you picked and we will find it and delete it. To make a request, email us.

Do you have to provide it?

Sending the drawing is needed to make a loop — it is what the loop is made from. If you do not want it sent, do not make loops; drawing, saving and timelapses work without sending anything. There is no automated decision-making about you, including profiling.

Children and grown-ups

doodloop is made for children and grown-ups to use together. Two things sit behind a grown-up gate — a question a young child cannot answer: buying credits, and the first time a drawing is sent to make a loop. After the gate, a screen says what is sent and where, and a grown-up allows it.

Changes

If this notice changes we update this page and the date at the top.

2026-10-06 — first version.
© 2026 YS Labs · Privacy Policy · Support