Loam Privacy Policy

Effective date: November 6, 2026
Last updated: November 6, 2026

Loam is made by David Allen Kile ("we", "us"). This policy explains what we collect when you use the Loam iPhone app, the website at loamforbrains.app, and the Loam connector for AI assistants (together, "the service"), what we do with it, and the choices you have.

The service is offered only to people in the United States.

The short version

• Your brain is locked with your password. Your memories, facts, decisions, goals, knowledge pages and daily briefs are encrypted with a key that comes from your password or your Recovery Kit. We store them, but we cannot read them when they are sitting on our servers.
• Your tasks and calendar are not locked that way. We encrypt them, but we hold the key, because the service has to work on them while you are away (reminders, your Next list, calendar sync). We do not look at them except as described below.
• We do not sell your data, show you ads, or use your data to train AI models. We do not run an AI model of our own.
• When you connect an AI assistant (such as Claude or ChatGPT), it reads and writes your data because you asked it to. What that company does with it is governed by its own privacy policy, not this one.
• You can export your data and delete your account at any time.

1. What we collect

Information you give us

Information from services you connect

• Google Calendar. If you link a Google account, we read and write your calendar events (including the extra fields Loam adds to events) so your calendar shows in the app and stays in sync. We store the Google access tokens and synced events encrypted with a key we hold. See section 5 for the commitments we make about Google data.
• AI assistants. When you connect an AI assistant, we record which assistant it is, when you connected it, and when it was last used, so you can see and revoke it.

Information collected automatically

• Device information: a device name, the platform (for example iPhone), and when each device was added and last seen, so you can see and revoke your devices.
• Security logs: sign-ins, failed sign-ins, password and 2FA changes, device and connection changes. Each entry records what happened and when. We do not store your IP address in these logs in readable form; we store a keyed one-way hash of it so we can spot repeated attacks from the same place. Logs never contain your content, password, codes or keys.
• Rate-limit records: short-lived counters, keyed by a hash of your email address and by IP address, that slow down password-guessing. They expire after about 15 minutes.
• Crash and diagnostic data: during the beta the app is distributed through Apple's TestFlight. If you allow it, Apple shares crash reports and feedback you submit through TestFlight with us. We do not add any crash-reporting or analytics tool of our own.

Location (only if you turn it on)

Location is off unless you allow it. If you do, the app uses it on your phone to show lists for the place you are at, send arrival reminders, and suggest that you may have done a task at a place you visited. Raw coordinates stay on your phone. Only place-level summaries (for example, "visited the grocery store this afternoon") are saved to your brain, where they are encrypted like the rest of your brain, and are visible to an AI assistant you have connected. You can turn location off at any time in iOS Settings; everything else keeps working.

Payments

The beta is free. When paid plans start, payments will be handled by Apple (in-app subscriptions) or Stripe (on the website). We will receive a record that you have an active subscription and its status. We will never see or store your full card number.

2. Your brain: what "we cannot read it" means

Your brain is sealed with a key that only someone who knows your password, or holds your Recovery Kit, can open. Our servers store the sealed data. On its own, a copy of our database cannot be used to read your brain, and an employee browsing the database cannot read it.

There are honest limits, and we want you to know them:

• When you connect an AI assistant, you approve that connection in your browser, and your browser hands our server the key for that connection. For as long as the connection is active, each request from that assistant opens the parts of your brain it needs, answers, and then discards the key and the readable data. That is how the assistant can read and write your brain without your phone being on. If you revoke the connection, this stops on the next request.
• Someone who takes over our running servers while you or your assistant are using them could see brain keys passing through. Our design protects against a stolen database and a curious operator, not against a live takeover of our systems.
• Someone who steals your password and a 2FA code can open your brain, like any password-protected account. Keep your password private and use a strong one.
• If you forget your password and lose your Recovery Kit and no longer have a phone that unlocks with Face ID, we cannot recover your brain. You can reset it (after a 24-hour waiting period you can cancel) and start a new, empty one. Your tasks and calendar are not affected.
• Some brain records are written by our servers, such as a basic daily brief when no AI assistant has written one. These are sealed so that only your devices can open them; our servers cannot read them back afterwards.
• Some facts about your brain are visible to us even though the content is not: how many items you have, what kind each is (for example "memory" or "goal"), when they were created or changed, and which of your projects an item is linked to.

3. How we use information

We use your information to:

• run the service: sign you in, sync your data between your devices, compute your Next list, send reminders and notifications, sync your calendar, and answer requests from AI assistants you have connected;
• keep it secure: check passwords against lists of known-breached passwords (see below), limit sign-in attempts, detect abuse, investigate security incidents;
• send account emails: email verification, password reset links, and alerts when a new device signs in or an AI assistant is connected. We do not send marketing email without asking you first;
• support you and improve the beta, using feedback you send us and crash reports Apple shares with your permission;
• meet legal obligations.

Breached-password check. When you choose a password, your device checks it against Have I Been Pwned's public list of passwords exposed in past breaches. Only the first few characters of a one-way hash of your password are sent, so neither we nor that service learn your password.

We do not:

• sell or rent your personal information, or "share" it for cross-context behavioral advertising;
• show ads;
• use your content to train AI models, ours or anyone else's;
• look at your tasks or calendar except when needed to keep the service running, fix a problem you report, respond to a security incident, or comply with the law.

4. Who we share information with

We share information only in these cases:

• Service providers that run parts of the service for us, under contracts that limit their use of it:
  • Cloudflare (hosting, storage and network for our servers, and sending account emails, so it also handles your email address and the content of those emails);
  • Apple (TestFlight distribution and crash reports; App Store and in-app purchases when paid plans start);
  • Stripe (website payments, when paid plans start).
• Services you connect, at your direction:
  • Google, when you link Google Calendar;
  • the AI assistant you connect, which receives whatever it asks for through the connector, including brain content. Its use of that data is governed by its provider's terms and privacy policy.
• Legal reasons: if required by law, subpoena or court order, or to protect the rights, safety or property of you, other people, or us. We can only hand over what we can read; we cannot hand over the readable contents of your brain, because we do not have the key.
• Business transfer: if David Allen Kile is merged, acquired or sells the service, your information may move to the new owner, who must keep honoring this policy or tell you before changing it.

5. Google user data

Loam's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access. When you link Google Calendar, we ask Google for two permissions:

• calendar.events ("View and edit events on all your calendars"): to show events from your calendars next to your tasks, to schedule work sessions for tasks as calendar events, and to let you edit, delete and RSVP to events from inside Loam. RSVP changes only your own response.
• calendar.calendarlist.readonly ("See the list of Google calendars you're subscribed to"): to let you choose which calendars appear in Loam and which one gets new events. We read each calendar's name, color, time zone and your access level. We never change the list.

We do not create or delete calendars, change who a calendar is shared with, or read or change your Calendar settings. We do not access your Gmail, contacts, files or Google profile.

How we use it. We use Google Calendar data only to provide those calendar features to you. We store the events we sync and your Google access tokens encrypted on our servers.

What we don't do with it. We do not use Google user data for advertising, do not sell it, do not use it to train AI models (ours or anyone else's), and do not transfer it to anyone except as needed to provide these features (our hosting provider, Cloudflare), for security, or to comply with the law. No person at David Allen Kile reads it unless you ask us to for support, it is needed for security or abuse investigation, or the law requires it.

AI assistants. If you connect an AI assistant, it can read and change calendar events through the connector, because you asked it to. That is a transfer you direct; the assistant's use is governed by its provider's policy.

Removing access. Choose Disconnect Google in Settings: we ask Google to revoke our access and delete the Google tokens and synced calendar data we hold. You can also remove access at any time at myaccount.google.com/permissions; Loam then stops syncing and asks you to link again, and choosing Disconnect Google or deleting your account removes the Google tokens we hold.

6. Security

We protect your data with: encryption in transit (HTTPS) everywhere; encryption at rest for all stored data; password-derived encryption for your brain; required two-step sign-in; limits on sign-in attempts; checks against breached passwords; a log of security events you can review; encrypted backups; and a written plan for responding to incidents.

No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and any regulators as required by the law of your state.

7. How long we keep information

• Your account and content: for as long as your account exists.
• Deleted brain items: kept in a recoverable state for 30 days, then permanently removed.
• Security logs: 12 months.
• Backups: encrypted backups roll off after 30 days. Deleted data may remain in backups until they roll off.
• After you delete your account: we delete your account and content from our live systems within 30 days, and from backups when they roll off. We may keep a minimal record (for example, that an email address was deleted on a date) where the law requires it.
• At the end of the beta: see the Beta Terms. We will tell you before any beta data is removed.

8. Your choices and rights

You can, at any time:

• see and change your account details and data in the app;
• export your data in a standard format (export opens your brain on your device, so it needs your password, Recovery Kit or Face ID);
• delete your account and data from Settings or the website;
• revoke any device or connected AI assistant;
• unlink Google Calendar;
• turn off location or notifications in iOS Settings.

Depending on the state you live in (for example California, Colorado, Connecticut, Virginia and others), you may have legal rights to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale or use for targeted advertising (we do neither). We offer these rights to every user, wherever in the US they live. To use them, email privacy@loamforbrains.app. We will verify your request through your account and will not treat you differently for using your rights.

9. Children

The service is not for children. You must be at least 18 to use the beta. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact privacy@loamforbrains.app and we will delete it.

10. Changes to this policy

We will post any change here and update the date at the top. If a change materially affects how we use information we already hold, we will tell you in the app or by email before it takes effect.

11. Contact

David Allen Kile privacy@loamforbrains.app