Privacy Policy

Effective Date: March 30, 2026

Coddy, Inc. ("Coddy," "Lootra," "we," "our," or "us") operates the Lootra platform, including the website at lootra.ai, the Lootra mobile application for iOS (available on Apple's App Store), the Lootra mobile application for Android (available on Google Play), and any related software, content, and services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information: When you create an account, we collect your email address, password, display name, and profile photo. If you sign in through a third-party provider (such as Google or Apple), we may receive your name, email address, and profile photo from that provider.

Payment Information: If you purchase a subscription or other paid feature, our payment processors (such as Stripe, Apple, or Google) collect your billing name, billing address, and payment method details. We do not store your full credit card number on our servers.

Usage Information: We collect information about how you use the Service, including courses accessed, lessons completed, features used, and interactions with content.

Device and Technical Information: We automatically collect your IP address, browser type, operating system, device type and model, unique device identifiers, language preferences, access timestamps, and referring URLs. On mobile devices, this may also include mobile advertising identifiers, app version, and mobile network information.

Push Notifications: If you enable push notifications on your mobile device, we collect your device token to send you notifications about course updates, reminders, and other Service-related messages. You can disable push notifications at any time through your device settings.

Communications: If you contact us (e.g., through support or feedback forms), we collect your name, email address, and the content of your message.

2. How We Use Your Information

We use the information we collect to:

provide, operate, and maintain the Service;
process transactions and manage subscriptions;
personalize your learning experience and recommend content;
communicate with you about your account, updates, and promotions;
analyze usage trends to improve and develop new features;
detect, prevent, and address fraud, abuse, and security issues;
comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: We share information with third-party vendors who help us operate the Service, including payment processors, cloud hosting providers, analytics services, and email delivery platforms.
Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, safety, or property, or those of others.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent: We may share information for other purposes with your explicit consent.

4. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to operate the Service, remember your preferences, authenticate your sessions, and analyze usage patterns.

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Service.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. The overall retention period is approximately 7 years.

6. Data Security

We implement commercially reasonable technical, administrative, and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to:

access and receive a copy of your personal information;
correct inaccurate or incomplete information;
request deletion of your personal information;
restrict or object to certain processing of your information;
data portability (receive your data in a structured, machine-readable format);
withdraw consent where processing is based on consent.

You can manage most account information and preferences through your account settings. To exercise other rights, please contact us at privacy@lootra.ai.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. We take appropriate safeguards to ensure your information is protected in accordance with this Privacy Policy.

9. Children's Privacy

The Service is intended for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a user under 18, we will take steps to delete that information and terminate the associated account promptly. If you believe someone under 18 has provided us with personal information, please contact us at privacy@lootra.ai.

10. European Economic Area, UK, and Swiss Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

Our legal bases for processing your information include: performance of a contract (providing the Service), legitimate interests (improving the Service, preventing fraud), compliance with legal obligations, and your consent (where applicable).

11. California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the Effective Date. Your continued use of the Service after the changes become effective means you accept the updated Privacy Policy.

14. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, please contact us at:

Coddy, Inc.
651 N Broad Street, Suite 201
Middletown, DE 19709
privacy@lootra.ai