Your relationship is not our content.

WHAT LOAM STORES

Account and garden information

• Your account identifier, display name and email from Sign in with Apple or, when enabled, Google sign-in. Loam stores the provider identifier used to access your account. You can explicitly link Google to an existing account; matching email addresses do not merge accounts. When available, Loam stores encrypted Apple authentication credentials so it can disconnect your Apple authorization when you delete your account. For earlier sign-ins without these credentials, the app explains how to disconnect Apple separately after deletion. Loam’s backend does not store Google access or refresh tokens. The app attempts to disconnect the matching Google account during deletion and explains how to remove Google access separately when needed.
• Your invited connections, private relationship choices, chosen tree avatar, reminder preferences and invite activity. Loam does not upload your address book.
• Your exact answers and predictions, question identifiers, response times, reveal history, shared reactions and private reflections. Some question choices concern personal values or beliefs, such as looking to faith or philosophy for meaning. Loam stores the selected choices and predictions as game content; it does not treat a choice as proof of a religious affiliation or a diagnosis.
• Your device’s app-specific push token and notification settings when you enable notifications.
• Question-feedback reasons and optional comments, and information you choose to send when asking for support. Question feedback goes to Loam’s private founder inbox; it is not shown to your partner.
• If you choose Report a concern, Loam stores the selected material shown in your preview and your optional explanation. This may include connection or invitation names, a selected shared note, or a saved report’s date and question count. The report is linked internally to your account and, when identifiable, the account associated with that material. It goes privately to Loam’s founder, not the other player.
• If you opt into product learning, content-free events such as completing a game, response delay, viewing a reveal or sending feedback. These events do not duplicate your answer choices.

WHY IT IS USED

To make the garden work—and learn responsibly

Loam uses necessary game data to synchronize two phones, lock choices until reveal, grow the companion trees, preserve shared history and insights, deliver reminders you request, prevent invite misuse, and handle privately submitted concerns. Optional product events help us understand which parts of the pilot are useful. Loam does not sell personal data, use it for targeted advertising, or calculate a compatibility score.

WHO CAN SEE IT

Only the people who belong there

Answers, guesses, shared reflections, and garden history are available to the invited members of that garden. If you intentionally preview and send a concern, the founder can also see the selected material and explanation you disclose. No whole game, answers or private Pond is attached automatically. A private reflection is visible only to its author. Exact-email discovery is off by default and returns a result only after the matching person opts in. Selecting a contact happens on the device; Loam does not upload an address book.

YOUR CONTROLS

Choose, export, or delete

Open You to export your data or delete your account. Deleting a connection removes it from your account and ends unfinished games. Deleting your account also removes your sign-in, private information, device registrations and saved reports. In either case, the other person can retain a read-only copy of completed reports that were already available at the time of deletion, including both answers, guesses and intentionally shared reactions. Unrevealed answers, private relationship choices, private Pond information and question-feedback comments are not copied. The saved report uses “Former connection” without your profile details; its content may still be recognizable. The deletion confirmation explains this before you proceed.

Saved reports belong to the remaining account until that person removes the copy or deletes their account. You cannot recall that copy from your deleted connection. Copies previously exported or shared outside Loam cannot be recalled. To hide a connection without ending it, use the private, reversible Quiet Grove.

Your export includes your unexpired submitted concerns. Removing a connection or saved report does not withdraw a concern already sent. Account deletion removes concerns submitted by that account or linked to it as an identifiable subject. A concern about a retained report contains generic metadata without a departed-account identity; Loam does not infer that identity from the explanation.

SERVICE PROVIDERS

How Loam operates

The iPhone app uses Sign in with Apple and, when enabled, Google sign-in. Loam never receives your Apple or Google password. Apple processes Apple sign-in and push delivery; Google processes Google sign-in through its iOS sign-in SDK. Google sign-in requests basic identity information, not access to your Gmail, contacts or Drive. Google receives authentication identifiers, network information such as your IP address, and SDK and device-environment information to operate and secure sign-in. Its iOS SDK also declares identifier and usage processing for analytics. This provider processing is separate from Loam’s optional product-learning events. Loam does not request phone-number access through Google sign-in. Cloudflare runs Loam’s independent API, and Supabase stores the application database. These providers process information needed to provide their services. The earlier ChatGPT Sites service is separate from this app’s current backend.

Our hosting providers retain operational diagnostics to help keep Loam available, secure and reliable. These can include request dates and addresses, device or browser information, approximate city, region or country derived from the network connection, response and processing times, and technical error details. Request addresses can include connection or game identifiers, so these records may be linked to your account. These service diagnostics are separate from optional product-learning events.

SECURITY & RETENTION

Private access to shared memories

Loam sends data over HTTPS, keeps gameplay behind authenticated membership checks, and stores native session tokens as one-way hashes. A retained report is accessible only to the account that owns the saved copy; it does not restore a connection or grant access to the former account. Choosing “Share in our report” adds only that selected observation response to the pair’s completed report. Your private Pond and question-feedback comments remain private. Closed concerns expire after 30 days, disappear from app access at expiry and are removed by the retention cleanup job. Closing again cannot extend that period. Operational backups and provider logs may temporarily retain information removed from the live app; a recovery must reconcile later deletions and expired concern evidence before access resumes.

QUESTIONS

We want the policy to be understandable.

Visit Loam Support for account, privacy, or deletion help. Material policy changes will be posted on this page before they take effect.