Privacy Policy

Last updated: September 14, 2026

Loam ("Loam," "we," "us," or "our") is a personal app platform operated by Strata Sense Labs. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website at loamapps.com, use the Loam web app at app.loamapps.com (including if you install it on your device), or use apps Loam generates for you.

Information we collect

Website waitlist (closed). Before Loam was generally available, loamapps.com offered a waitlist that collected your email address and the time you joined. The signup form has been removed, and we no longer collect addresses this way. Addresses collected while it was open are still held, are used only to contact you about Loam, and can be removed at your request.

Account information. When you create a Loam account, we collect your email address, a password (stored in hashed form by our authentication provider), and a first name you choose, which may be shown when you share apps. You can also sign in with Google, in which case Google provides us with the email address (and, if available, name) associated with that Google account. We do not receive your Google password.

Apps and content you create. Loam lets you build personal apps in the browser. We store the apps you create (including names, descriptions, icons, generated HTML, and related files), data those apps save while you use them, photos you add through an app, JSON datasets you attach, Ask chat history, and the build and revision history needed to operate the service. Generated apps run on a separate origin (*.loamusercontent.com) and save data back to Loam through a platform bridge — they cannot reach your Loam account directly.

Imports. If you import a link, we store the URL and related processing metadata (such as the site host and whether the import succeeded). We fetch the page to extract content; we do not store the page HTML. If you paste text to import, that text is sent to AI for extraction and is not stored. Content you choose to save into an app becomes part of that app's data.

Prompts and AI interactions. When you describe an app, attach a dataset, import content, ask questions, request changes, or use AI-powered features inside a generated app, we process the text and related context you provide so we can generate, update, or operate your apps. You can also send optional thumbs-up or thumbs-down feedback on Ask replies.

Sharing. If you share an app, we store a share link, a snapshot of the app used for the share, and limited preview information (such as app name, description, and icon) so others can open the link on app.loamapps.com and add a copy to their own Loam collection. Your first name may appear to recipients. If someone reports a shared app, we store the report (reason, optional details, and related snapshot) so we can review it.

Support messages. If you email us, we collect whatever you send — typically your message and email address — so we can reply and troubleshoot.

Product analytics. In built versions of the Loam web app (not when running Loam in local development), we collect usage information to understand how the product is used and to improve it. This may include pages and features you visit, clicks and other interactions, actions you take (such as creating apps, starting builds, installing Loam on your home screen, or sharing), app version, whether you are using Loam in a browser tab or as an installed app, a pseudonymous identifier linked to your account, and account traits used for analysis (such as your email address, first name, sign-in method, and plan). We use PostHog for this.

Session recordings. In a sample of sessions, we may record how you interact with the Loam interface — including screen interactions, in-app performance signals, and network requests made by the app — to diagnose usability and technical issues. Typed values in form fields are masked. Generated apps run in isolated frames and are not included in these recordings. Other on-screen content in the Loam interface (such as app names) may appear. Session recordings are not turned on when Loam is run in local development on your own computer.

Crash and error reporting. We collect information about crashes, errors, and performance problems through Sentry. This may include error messages, stack traces, browser and app version information, navigation context within Loam, and your account's pseudonymous user ID. When an error occurs, we may also record a short replay of the moments around it so we can see what went wrong. Typed input values, images, and generated apps are blocked from those error replays; other on-screen text in the Loam interface may appear. We configure these services not to send your email address with crash reports.

Subscriptions. If you purchase or manage a Loam Plus or Loam Pro subscription, we use Stripe to process payment. Stripe receives your email address, your Loam account's pseudonymous user ID, purchase and renewal history, subscription status, and related transaction metadata. We use this information to provide subscription features and entitlements. Payment card details are processed by Stripe, not by Loam.

Cookies and local storage. The Loam web app stores data in your browser so you can stay signed in, so the app can load faster if you install it, and so analytics and diagnostics can work. This may include session tokens, local copies of your apps list and related state, and analytics identifiers. Our website and hosting providers may also set cookies or similar technologies that are strictly needed to run the site. We do not use advertising cookies or sell this information.

Technical data. Our hosting providers may automatically collect standard log data such as IP address, browser type, pages requested, and timestamps when you use our website or services.

How we use information

We use the information we collect to:

  • Provide, maintain, and improve Loam
  • Create, revise, host, and store your apps and related data
  • Authenticate you and keep your account secure
  • Send product updates to addresses collected by the former waitlist
  • Enable app sharing with people you choose, and review reports of shared apps
  • Respond to support requests and troubleshoot problems
  • Understand product usage, diagnose crashes, and improve reliability and usability
  • Process and manage subscriptions and entitlements
  • Protect against abuse, fraud, and security incidents
  • Comply with legal obligations

AI processing

Loam uses third-party AI services (currently via OpenRouter, which may route your request to model providers) to help design, build, revise, import into, and answer questions about apps, and to power optional AI actions inside generated apps. When you use these features, your prompts, pasted text, page excerpts, dataset summaries, and relevant app context may be sent to those providers for processing. Do not submit sensitive information you do not want processed by AI.

How we share information

We do not sell your personal information, and we do not share it for cross-context advertising. We may share information with:

  • Service providers that help us run Loam, under contracts that limit how they may use your information. These currently include Cloudflare (hosting and content delivery), Supabase (authentication, database, and file storage), Google (sign-in, if you choose it), OpenRouter and the AI model providers behind it, PostHog (product analytics and session recording), Sentry (crash and error reporting), and Stripe (payment processing)
  • People you choose, when you share an app or display your first name as part of sharing. Recipients receive a copy of the shared app, not your live personal data in that app
  • Authorities or others, when required by law or to protect rights, safety, and security
  • Successors, in connection with a merger, acquisition, or sale of assets, subject to this policy

Data retention

We keep information for as long as needed to provide the service and for legitimate business purposes such as security, quotas, and legal compliance. Addresses collected by the former website waitlist are kept until you ask us to remove them or we no longer need them for those communications.

If you delete an individual app, we remove it from your home screen and delete the photos stored for that app. Other files and operational records associated with the app — for example generated HTML, datasets, share snapshots, and usage history used to enforce plan limits — may be retained until we purge them or you delete your account.

If you delete your account, we cancel any Stripe subscription on that account, delete the account and the apps and saved data tied to it, and remove related files from our storage. Analytics, crash-reporting, payment, and AI providers may retain limited records for a period under their own policies. We may also retain information in backups or when we are legally required to do so.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. That includes rights that may apply if you are a resident of California or another U.S. state with a privacy law, or of the European Economic Area, the United Kingdom, or Switzerland.

  • Former waitlist: email us to unsubscribe or remove your address from the list
  • Account and app data: delete individual apps from your home screen, or delete your entire account from Account → Delete account in Loam. Accounts that sign in only with Google cannot yet complete deletion in the app; those requests are handled by email (see below). You can also email us to request account deletion from any account
  • Analytics and diagnostics: contact us if you have questions about product analytics, session recordings, or crash reporting, or to exercise applicable rights regarding this processing

To exercise these rights, contact us at privacy@loamapps.com. We may need to verify your request before acting on it. If you cannot sign in, email us from the address on the account.

Security

We use industry-standard measures to protect information, including encryption in transit and access controls on user data. Generated apps are isolated from the Loam account interface. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

Loam is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

International users

Loam is operated from the United States. If you use Loam from another country, your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your home country.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date above. Continued use of Loam after changes become effective means you accept the updated policy.

Contact us

Questions about this Privacy Policy or our privacy practices? Email us at privacy@loamapps.com.