Privacy policy

Effective date: 25 October 2026

This policy explains what information LoopHands (the Windows app) and this website (loophands.cloud) handle, and who receives it. LoopHands is in development and has no public download yet, so this policy describes the app and the site as they are today. If that changes, we will update this page.

Who we are

LoopHands is a Windows app, and this is its website. For privacy questions, write to privacy@loophands.cloud. Other ways to reach us are on the contact page.

The app keeps your data on your PC

LoopHands is local-first. Your chats, bot settings, memory, attached files and settings are stored on your own PC, not on a LoopHands server. LoopHands has no account system today, and no LoopHands server receives your chats, files or keys.

The app's database is encrypted. Your API keys and other secrets are kept in an encrypted vault, and the vault's master key is protected by Windows and kept in Windows Credential Manager. This protects data stored on disk. It does not protect against other software running on your PC under your Windows user.

The app also writes local log files on your PC to help diagnose problems. By design they record what happened (events, counts and error codes) and not the text of your chats, your files or your keys. They are not sent to us.

Your AI provider receives your prompts

LoopHands does not include model access. You bring your own AI provider account, such as an API key, or a command-line tool you have already signed in. When a bot answers, the text of the conversation, attached files (or their text) and tool results are sent to the provider you chose for that bot, so it can reply. That provider handles the information under its own terms and privacy policy. LoopHands does not receive it. If you pick a model that runs on your own PC, nothing goes off your PC for that call.

Read your provider's terms and privacy policy before you connect an account.

Tools, servers and websites you connect

A bot can use tools, MCP servers, publishing services such as Git hosts and web hosts, and web pages, but only the ones you set up or allow. Each of them receives what the bot sends it for that action, for example the arguments of a tool call, the files you approve to publish, or the request for a web page. They handle that information under their own terms and privacy policies. LoopHands does not receive it.

Telemetry and crash reports

The app does not send telemetry, analytics or crash reports today. If we add them in the future, they will be opt-in, they will not include the content of your chats or files, and we will update this policy before we do.

Updates

The app never downloads or installs an update unless you start it. No update service is published yet, so today the app does not contact LoopHands to look for updates. When we publish one, the app will contact our web host to check for new versions, and we will update this policy to say what that check sends.

This website

This website is a set of static pages. It has no analytics, sets no cookies, and loads no third-party scripts, fonts or other resources. Its pages have no forms.

The server that hosts the site may keep standard access logs. These can include your IP address, the time of the request, the page requested and your browser's user agent. We do not currently know how long the server keeps them.

The waitlist and emails you send us

To join the waitlist you send us an email from your own mail app. We then receive your email address and whatever you write. We use it only to contact you about LoopHands. The same applies to any other email you send us, for example a question or a security report. Your email provider handles the message on its way to us under its own terms.

Security reports

If you want to report a security problem, follow the security page or the address in security.txt. We use what you send only to investigate and fix the problem and to reply to you.

Children

LoopHands is not designed for children, and we do not knowingly collect information from them. If you think a child has sent us an email, write to us and we will delete it.

Your choices

• You can ask us what emails and messages from you we hold, and ask us to delete them. Use the privacy address above.
• Your app data is on your PC, so you control it. Delete a bot, a chat or its memory in the app, or remove the app's data from your PC.
• Information sent to your AI provider, or to a tool or service you connected, is held by them. Ask them about access and deletion.

Changes to this policy

We may change this policy as LoopHands and this website change. The effective date at the top shows when this version took effect.

Contact

Privacy questions: privacy@loophands.cloud. General questions: see the contact page.