The Record, Not The Plan

Transparency Report

A plain-language account of what Looma collects, what it doesn't, who's asked us for data, and what changed. Everything here is true as of the date below, not a future plan.

Period: Founding Report Published: July 17, 2026 Report No: 1

Founding Disclosure

What We Collect, and What We Don't

Most transparency reports lead with what a company collects. We're leading with what we've built Looma to refuse to collect, because that's the more unusual claim and the one worth checking.

Every feature described below, including data practices tied to it, is subject to change or removal by user vote in the app.

Category	Our practice
Activity logs	Not kept. Looma does not log user activity for engagement analysis or ad targeting.
Location / GPS	Requested only at the moment of posting, to make tagging easier, and not stored afterward. Looma Community's proof of location runs on QR-based proximity, not device GPS.
Payment details	Processed by Stripe for card-based age validation. Looma does not store card numbers.

Government & Law Enforcement

Requests for Data

Requests received this period, and how we responded.

Requests received

Complied with

Data didn't exist

Because we don't retain activity logs, raw ID data, or location history, a meaningful share of any request we receive falls into the third category as a structural matter, not a policy choice. There is nothing to hand over even if compelled.

Safety Activity

Moderation and Safety

Looma includes a Report-as-Minor community flagging feature and a five-tier safety exchange matrix enforced server-side. Aggregate figures for this period:

Action	Count
Report-as-Minor flags received	0
Content removals	0
Account tier changes following review	0
Appeals received / upheld	0 / 0

This Period

What's New

Four-path age verification launched, replacing any single-method approach.

Non-personalized ad enforcement extended to close a gap that existed on both iOS and Android for minor safety tiers.

Looma Community entered development: real-world presence features using QR-based proof of location and Behavioral Continuity Scoring, with no GPS and no logs.

Content moderation vendors selected: Gemini for text, Cloud Vision for images and video. See third-party section below for scope.

Vendors

Third Parties With Access to Data

Vendor	What they see
Stripe	Card validation for age verification only. No card data retained by Looma.
Cloudinary	Media hosting.
Google Cloud Platform	Infrastructure hosting.
Google Gemini	Text-based content moderation.
Google Cloud Vision	Image and video content moderation.
Google AdMob	Ad serving. Non-personalized only for accounts in minor safety tiers.

Gemini and Cloud Vision are not intended to be permanent. Planned changes to this list are tracked separately on the Security Roadmap →, not in this report.

Note: Looma is self-funded. There are no venture investors, no growth targets to hit for anyone but our own users and the charities we share profit with, and no pressure to monetize attention. We think that's the most concrete transparency commitment we can make: there's no outside party with an interest in us collecting more than we say we do.

This report will be published on a semiannual basis going forward. Planned architecture changes are tracked separately on the Security Roadmap. Questions about this report can be sent to info@looma.social.