Privacy Policy

Last updated: August 31, 2026

This Policy explains which personal data Mainloop IA processes, why it uses that data, which providers receive it, and how you can exercise your rights.

Operator and contact

Mainloop AI offers design and learning tools from Argentina. Use the following contact channel for questions and requests to exercise your rights.

For support, privacy questions, cancellations, and exercising your rights, contact soporte@mainloop.ai.

Data we may process

  • UID, name, email, photo, country, and account preferences.
  • Projects, GDDs, text, images, and files you create or upload.
  • AI usage, available quota, and personal or Studio subscription data.
  • During a conversation with Loopa: audio, transcript, responses, and the parts of the GDD needed to preserve context and prepare a proposal.
  • In Academy: learning goals, assessment responses, progress, practices, evidence, demonstrated knowledge, badges, credentials, and conversations with AI mentors.
  • Studio memberships, roles, invitations, activity, and shared content.
  • Minimum technical logs needed for security, abuse prevention, and service operation.

Data processed in Studios

To operate a Studio, we may process account identifiers, email, role, membership and invitation status, shared games and modules, synchronization revisions, AI usage, purchased capacity, billing-owner identity, transaction metadata, and minimum audit and security records.

Visibility within a Studio

Your name, email, role, activity, and content you share may be visible to authorized Studio members according to their functions. Billing data is limited to the billing owner, Mainloop, and the providers that need it for processing.

Data processed in Academy

To provide Academy, we may process your selected focus and goal, stated experience, availability, technologies, responses, progress, completed practices, reflections, evidence files, consulted sources, demonstrated knowledge, badges, credentials, AI usage, and subscription data. We use this data to create or adapt Loops, guide practices, record progress, enforce limits, and display a verifiable profile.

Shared profiles and credentials

Your Academy profile and credentials are private unless you choose to share or export them. Before enabling a public link, the service explains which data will be visible, and you may stop sharing it. We do not publish your email or private files as part of a credential without a clear and specific choice.

How we use data

We use this data to authenticate and manage accounts, store projects, provide AI features, manage quotas and subscriptions, process payments, provide support, maintain security, and comply with legal obligations.

Providers

  • Google Cloud and Firebase: authentication, database, file storage, and infrastructure.
  • OpenAI: processing prompts, Loopa and Academy audio and transcripts, and the minimum context needed to generate responses, proposals, or adaptations.
  • Mercado Pago and Paddle: payments, subscriptions, fraud prevention, and payment-related inquiries.

These providers may process data in other countries under their own policies and the safeguards applicable to their services.

Use of OpenAI

By default, OpenAI does not use data sent through its API to train its models unless the account owner explicitly opts in to share it. Content may be retained in security logs for up to 30 days unless a legal obligation requires longer retention or a different retention setting applies. You can review OpenAI's API data controls.

Conversations with Loopa

When you activate Loopa, audio is streamed to recognize and respond to your voice. The transcript, response, and relevant GDD context are processed to sustain the conversation and prepare proposals. Loopa does not apply changes to the GDD until you confirm them. Mainloop records usage, session state, and the minimum technical data needed to operate the feature; it does not retain the audio as a user file.

Academy mentors and voice

When you start a voice conversation in Academy, audio is transmitted to OpenAI to respond within the active practice context. Mentors are synthetic characters, not real people or human professionals. Mainloop limits session duration and usage and records the minimum technical data required; it does not retain audio as a user file.

Cookies and analytics

Essential cookies are used for necessary site functions. Google Analytics loads only if you accept analytics cookies. You can reject them or change your decision at any time through “Cookie settings” in the footer.

Storage and security

We apply reasonable technical measures to protect information, but no system is completely secure. Some files may generate URL access links; if you share a link, third parties may access the associated content.

Retention and deletion

We retain operational data while an account is active. When it is deleted, we delete or anonymize exclusively personal data within a reasonable period, except for tax, accounting, anti-fraud records, logs, or backups that must be retained temporarily for legal, security, or technical continuity reasons.

Deleted accounts and shared content

Deleting an account does not automatically delete a Studio or shared content needed by its remaining members. Where appropriate, we transfer responsibilities and delete or anonymize personal identifiers while preserving Studio history and content. We may retain limited records as needed for legal or accounting obligations, security, fraud prevention, or dispute resolution.

Your rights

You may request access, correction, update, or deletion of your data by writing to soporte@mainloop.ai. You may also withdraw consent where applicable. Requests are handled under Argentine Personal Data Protection Law 25.326 and other applicable rules.

Minors

The service is not directed to people under 18, and we do not intentionally collect their data.

Changes to this Policy

We may update this Policy to reflect changes in the service or applicable rules. The current version and its update date will be published on this page.