Privacy.

01 — Scope of this policy

This page describes the data used by the Loomi account, customer portal and pre-release Roku app. It also covers the web player and Loomi Connect extension. Their permissions are detailed in their specific policy.

Loomi is a media player. It does not provide content, playlists, channels, movies or content subscriptions. You choose your providers; their services and those of your platform have their own privacy policies.

Loomi — Person responsible for the protection of personal information: support@loomiplayer.com.

02 — Your account and devices

Your email is used to create your account, verify your address and recover access. Your first name or nickname is optional. Firebase Authentication manages authentication and your account password.

The portal stores the playlists you add: their name, server address and credentials needed to connect, such as a username and password or a MAC address. This information lets your playlists be sent to devices you authorize. Playlist credentials are encrypted on the server, then decrypted for those devices; this is not end-to-end encryption.

Loomi records device pairings, their names, authorization status and latest activity with the account service. The device stores an access token. Pairing codes expire after ten minutes. A temporary fingerprint of the IP address is used to limit abusive pairing requests.

Messages required for your account are separate from optional Loomi news.

03 — Upcoming Roku app

Loomi stores the information needed to link your device to your account and select the active playlist on your device. Your preferences, favorites, pinned or hidden categories, viewing history, resume points and parental control settings are stored locally to preserve your experience.

In the Roku version described here, local favorites and history are not synchronized with your Loomi account. Synchronizing account playlists is a separate operation.

The app communicates with Loomi services for your account, with your providers for their catalogs and playback, and with the metadata and image services used by the player. Video streams are requested from your providers' servers; they do not pass through the Loomi account service.

In settings, clearing history applies to the active playlist and keeps favorites. When successful, “Disconnect this device” revokes the device's access and clears its local Loomi data, including favorites, resume points and settings. This does not delete your account or the playlists saved in it. Revocation from the portal must not be confused with local deletion on Roku.

Roku also processes data for its own devices and services under its privacy policy. Roku's settings and data processing are separate from Loomi's.

04 — Web player and Loomi Connect

Loomi Connect processes your playlist connection details and the requests needed for playback. Depending on your storage preference, this information stays in the extension's local storage or its session. The player also stores local data, including favorites, progress, recent channels and searches.

For playlists linked to your account, some library data may be synchronized with Loomi services on compatible devices. This does not mean that every platform synchronizes the same data. The extension's permissions, request recipients and deletion methods are described in the Loomi Connect policy.

05 — Services contacted

Google Firebase and Google Cloud host the account, its data and Loomi services. The portal database is hosted in the United States. These services may generate technical logs for their operation and security.

Your providers receive the information needed for authentication, catalogs and playback. Their servers may redirect requests to other media servers. A provider address using HTTP does not benefit from HTTPS encryption.

Metadata and images may come from the Loomi API, TMDB or addresses in your provider's catalog. The Loomi API queries TMDB for trending titles without sending your playlist credentials.

The servers contacted may receive technical information, including your IP address, the time and the request URL. They have their own retention policies. See the policies of Google, TMDB and your provider.

06 — Feedback and support

When you send feedback or report a bug, the form fields and your account email are sent to support@loomiplayer.com through Google Workspace to handle your request and reply. No technical logs, playlists or provider credentials are attached automatically. Do not include passwords or private links in your message.

The content is kept in the support inbox to follow up on your request. A submission counter and the date of the last attempt are stored per account in Firebase to limit abuse; the message text is not stored in that database.

Presence and latest activity

Starting with Android/Fire TV version 0.2.133, devices linked to your account send a presence signal when Loomi is in the foreground or playback is active. This signal contains the platform, Loomi version and active or inactive status. It allows the authorized administrator to view recent presence and latest activity to help with support.

This tracking does not transmit usage or playback duration, channel names, titles, stream URLs or playlist credentials. It is separate from the synchronization of favorites and resume points. Recent presence does not prove that playback is in progress; an unexpected shutdown or loss of network connection may delay the inactive status display.

The service retains the latest signal per device and temporary session identifiers to prevent duplicates, without a browsing or viewing log. After thirty days without a signal, this information is no longer displayed and is automatically deleted subject to Firebase's technical delay. To request access or deletion, email support@loomiplayer.com.

07 — Retention and deletion

Playlists remain saved in your account until you delete them. You can delete them in the portal. Removing a local copy or disconnecting a device does not delete the playlist from your account or your account with your provider.

Local Roku data remains on the device until cleared using the controls provided in Loomi. Technical pairing records may remain after their code expires; that code can no longer pair a device. Expired access does not mean the account has been deleted.

To request deletion of your account, associated data or a support conversation, contact support@loomiplayer.com. Hosting providers' logs and data held by your providers are not erased by local deletion in the player.

08 — Your requests and updates

You can write to us to request information about your data, access to it, its correction or its deletion. We may ask you to confirm that you own the account before processing a request. Applicable rights depend on where you live.

Changes to this policy will be published on this page with a new update date. For account-specific processing, you can also see the customer portal notice.