Introduction

Digital Douglas ("we", "us", or "our"), based in the Cayman Islands, operates the LoomLetter mobile application (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Email Address

Each user is assigned a custom LoomLetter email address (e.g., example@read.loomletter.app). We securely store every newsletter sent to this email address, ensuring they are encrypted and accessible only through our app.

Access Credentials

To enable inbox synchronization, we securely store access credentials, including access tokens and email passwords, in our system. These credentials are encrypted to ensure their security and are used exclusively to sync your inbox with your LoomLetter account. We manage credentials entirely on the backend, and they are never exposed to the client.

Push Token

We store a push token that is used to send push notifications to your device. These notifications alert you when new newsletters are available for you to read.

Data Processing

Newsletters sent to your custom LoomLetter email address are securely stored and encrypted to protect your privacy. This ensures that your newsletters remain confidential and are only accessible through the app.

We generate an audio version of each newsletter for personal use only, which enhances your reading experience. This audio is stored temporarily within the app and cannot be downloaded for external use.

All newsletters can be accessed in various formats, including enhanced readability modes, which are intended solely for personal use.

User Control and Optional Inbox Synchronization

LoomLetter offers optional inbox synchronization for users who choose to enable it. This feature allows the app to retrieve newsletters directly from your email provider and make them accessible within LoomLetter. If you choose not to enable this feature, LoomLetter will not access or interact with your email inbox in any way.

For users who enable inbox synchronization, you have full control over your account and the email providers connected to LoomLetter. At any time, you may revoke access to your inbox provider, such as Google or Apple Mail, through the app settings.

• For Google accounts, revoking access will automatically invalidate tokens and remove access permissions granted to LoomLetter.
• For IMAP-based providers like Apple Mail, removing your credentials in LoomLetter settings will disconnect your inbox from our services and remove stored credentials from our system.

This ensures that LoomLetter no longer has access to your inbox, and any future syncing operations will cease.

Periodic Newsletter Checks

To ensure you stay updated, our Service checks your inbox every 15 minutes to retrieve new newsletters. During the initial setup, we perform a one-time search that goes back as far as six months to discover past newsletters from the senders you have selected.

Retention and Deletion of Data

We are committed to ensuring your data is only retained as long as necessary. If you choose to delete your LoomLetter account, all associated data is permanently deleted from our systems, including:

• Access credentials (such as access tokens, refresh tokens, or email passwords) used for inbox synchronization with supported email providers (e.g., Google, Apple Mail via IMAP). These credentials are securely removed and, where applicable, tokens are revoked.
• All newsletters stored in LoomLetter, including those imported from your connected email providers.
• Any settings or preferences associated with your account.

We support synchronization with multiple email providers, including Google services and other IMAP-based email systems such as Apple Mail. Each provider's credentials are handled securely and in compliance with their respective privacy and security guidelines.

Legal Use of Audio and Readability Formats

We provide text-to-speech (TTS) and enhanced readability formats to help users interact with their newsletters more easily. These features are for personal use only, and any redistribution, sharing, or external use of the generated audio or modified newsletter formats is not allowed. This ensures that we comply with copyright and content ownership laws, similar to services like Speechify.

Service Providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used. These services may include but are not limited to:

• Data processing and analysis
• Newsletter content summarization and enhancement
• Push notification services

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. For instance, we use OpenAI's ChatGPT to provide newsletter summaries and enhance content readability. All data processing is conducted under strict privacy and security protocols to ensure your data remains protected.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: loomletter@digidouglas.com
• By visiting this page on our website: www.digidouglas.com