Privacy notice
Last updated October 25, 2026.
This notice covers apptloop.com and the public demo at demo.apptloop.com. Questions: contact@apptloop.com.
Who is responsible
The controller of your personal data is Valentin Ciocoiu, Romania. You can reach us at contact@apptloop.com.
This website
It sets no cookies and uses no analytics, tracking, outside scripts or outside fonts. Our server keeps no record of your visit: it writes no access log, and no visitor's network address in any log. The site and the demo run on a server of Hetzner Online GmbH in Nuremberg, Germany.
The demo
When you try the demo, we keep:
- your name, your email address and a hash of your password, so you can sign in. Your demo practice, your account and everything in them are deleted after 7 days;
- not your network (IP) address. To limit abuse, a keyed hash of it is kept with your demo practice and deleted with it after 7 days. The server's logs and its counters against abuse also hold only a keyed hash of your network: the logs are kept for 14 days, the counters for a few hours;
- for security, an audit record of what was viewed or changed in your demo practice, by internal identifiers and field names, without the values. These records are not deleted.
Do not enter real patient information, or personal information about real people, in the demo.
Messages to the assistant
What you write as a patient in the demo, and the invented details of your demo practice, are sent to Anthropic, which provides the language model (Claude) that writes the assistant's replies. Under Anthropic's policy as of October 25, 2026, it deletes these inputs and outputs within 30 days. It may keep them for up to 2 years, and its safety classification scores for up to 7 years, if its automated systems flag them as breaking its Usage Policy, and longer where the law requires. By default, it does not use them to train its models. See Anthropic's privacy pages for its current terms.
Messages to contact@apptloop.com reach us through Cloudflare's email forwarding, in a Gmail mailbox (Google LLC). We keep them as long as we need to answer you.
Why we use this information
- Your demo account and practice, and sending your messages to the language model: to provide the demo you asked for (Article 6(1)(b) of the GDPR).
- The keyed hashes, logs, counters and audit records: our legitimate interest in keeping the site and the demo secure and free of abuse (Article 6(1)(f)).
- Your emails: our legitimate interest in answering you (Article 6(1)(f)).
Who else handles it
We do not sell your information or share it with anyone except these providers, to run the site and the demo: Hetzner (hosting, Germany), Anthropic (the language model, United States), Cloudflare (domain names and email forwarding, United States) and Google (the mailbox, United States). Where information goes to a provider outside the European Union, it relies on the safeguards in that provider's terms, such as the EU's standard contractual clauses, or the EU-US Data Privacy Framework where the provider takes part in it.
Your rights
You can ask us for access to the information we hold about you, and to correct or delete it, to restrict or object to its use, or to receive it in a portable form; you can also ask us to delete your demo sooner. Write to contact@apptloop.com. You may also complain to a data protection authority: in Romania, ANSPDCP (dataprotection.ro), or the authority where you live or work.
Children
The site and the demo are not meant for anyone under 18.
Changes
If this notice changes, the date at the top changes with it.