Privacy
Sentloop holds information about people who are not its users — your friends and family. That deserves more care than a typical app privacy page, so this one is specific.
What Sentloop stores
- Your account — email, name, time zone, and a scrypt hash of your password. The password itself is never stored.
- Your contacts — the names, dates, relationships, notes, and messaging addresses you enter. Nothing is imported from your device address book, and nothing is looked up anywhere.
- Platform credentials — bot tokens and access tokens, encrypted with AES-256-GCM before they touch the database. They are decrypted server-side only, at the moment of an API call, and are never returned to your browser, never logged, and never included in a data export.
- Messages and history — the drafts Sentloop prepares and a record of what happened to each one. Addresses in the audit trail are stored redacted.
Data minimisation
Sentloop asks for the least it can work with. A birthday needs a month and a day; the year is optional and only used to show an age. A contact needs a first name. Notes are optional and never sent. Sentloop does not collect analytics, does not use tracking cookies, and sets exactly one cookie: your session.
What leaves the server
- Messages you send go to the platform you chose, through its official API, at the moment of sending. Nowhere else.
- Claude variation (optional, off by default) sends the recipient’s first name, their relationship label, the occasion name, and your template text to Anthropic, using your own API key. Turn it off, or use the built-in variation, and nothing leaves the server.
- Nothing else. No analytics provider, no advertising network, no data broker, no third-party embeds.
People who are not users
Your contacts never signed up for Sentloop. Two things follow. First, adding someone requires you to confirm explicitly that you know them and want to message them, and that confirmation is checked again before every automated send. Second, they can ask you to remove them at any time, and deleting a contact removes their record and everything prepared for them.
Messages sent through a platform live in that platform’s systems under its own policies, and Sentloop cannot recall them.
Your controls
All of these are in Settings, and take effect immediately:
- — Export everything Sentloop holds about you, as JSON.
- — Delete your message history and audit trail, keeping your contacts.
- — Delete every contact, keeping your account.
- — Disconnect every platform and erase the stored credentials.
- — Delete your account and everything in it, permanently.
- — Stop everything immediately with the Stop Everything button.
Retention
Sentloop keeps your data until you delete it. Deletions are immediate and permanent, not soft-deletes, and are not recoverable. Sessions expire after 30 days.
Legal basis and rights
Where the GDPR or similar laws apply, the basis for processing your account data is the contract to provide the service, and for contact data your legitimate interest in staying in touch with people you know. You have rights of access, rectification, erasure, and portability; the controls above implement all four directly in the app. Contact the operator of your instance to exercise them any other way.