Privacy Policy

Last updated: 06/20/2025

This Privacy Policy describes how the LOOPI CLUB app collects, uses, stores, shares, and protects user information. Respect for our users’ privacy is a priority, and we are committed to protecting personal data in accordance with Federal Law No. 12,965 of April 23, 2014 (Brazilian Internet Civil Framework) and Federal Law No. 13,709 of August 14, 2018 (General Data Protection Law – LGPD).

The site undertakes to comply with the provisions of the LGPD and to respect the principles set forth in Article 6 of the law:

• Purpose: data processing for legitimate, specific, explicit, and informed purposes, with no further processing in a manner incompatible with those purposes;

• Adequacy: processing compatible with the purposes informed to the data subject, according to the context;

• Necessity: limitation of processing to the minimum necessary to achieve the purposes, collecting only relevant, proportional, and non-excessive data;

• Free access: assurance to data subjects of easy and free consultation regarding the form and duration of processing, as well as the completeness of their personal data;

• Data quality: assurance of accuracy, clarity, relevance, and currency of data according to necessity and the purpose of processing;

• Transparency: assurance of clear, precise, and accessible information to data subjects about processing and its agents, respecting trade and industrial secrets;

• Security: use of technical and administrative measures to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, communication, or dissemination;

• Prevention: adoption of measures to prevent damage due to the processing of personal data;

• Non-discrimination: prohibition of data processing for unlawful or abusive discriminatory purposes;

• Accountability: demonstration by the controller of effective measures to ensure compliance with personal data protection rules.

1. Information Collected

1.1 Personal Information

We collect the following personal data when you register or use the app:

• Full name

• Email

• CPF (when required for awarding prizes or identity verification)

• Date of birth

• Phone number

• Address (for delivery of physical prizes)

1.2 Usage Information

• Accumulated points and activities within the app

• Ranking and interaction history

• Navigation and click data within the app

• Device, operating system, and IP

1.3 Third-Party Data

We may collect data through integrations with partners (such as sponsor companies or internet providers), provided that you have given prior consent.

2. Use of Information

Collected data is used to:

• Manage user registration and account. Personal data is collected to allow full use of LOOPI CLUB’s features, such as access to benefits, coupons, participation in rankings, browsing partner stores, and personalized communication. We do not use data for purposes other than those communicated. All data collected is consistent with the services provided by the app. For example, name and location are used to show offers based on the user’s country; email is used for communication and password recovery.

• Execute prize mechanics, rankings, and loyalty programs. We operate custodial digital wallets to store user assets. We collect only essential data for service delivery. We do not require unnecessary data, and users are free to provide only what is necessary for basic use of the platform.

• Ensure transaction security and prevent fraud. We maintain compliance logs, conduct internal audits and training, and work with legal advisors to ensure our obligations are met. LOOPI CLUB is committed to transparency and data protection. We inform users clearly and accessibly about how data is used, with whom it may be shared (such as benefit partners), and the protection measures in place. This Privacy Policy is reviewed and published periodically.

• Comply with legal and regulatory obligations. We adopt technical and administrative measures to protect user data, such as encryption, secure authentication, and internal access control. We continuously work to prevent unauthorized access and data leaks, applying preventive practices such as security testing, team training, and legal compliance monitoring under the LGPD.

• Improve the user experience through analytics and behavioral data. User data is never used for discriminatory purposes. Information is used solely for functional and promotional purposes within the platform’s context.

3. Information Sharing

We may share your data with:

• Business partners for prize delivery or identity verification

• Technology service providers, such as hosting, analytics, and payment platforms

• Public authorities, when required by law

We never sell your personal information.

4. Cookies and Similar Technologies

We use cookies and similar tools to improve navigation, personalize the user experience, and perform statistical analyses.

5. Data Storage and Security

Data is stored on secure servers with restricted and controlled access. We use appropriate technical and organizational measures to protect your information against unauthorized access, destruction, or loss. Examples include encryption, firewalls, access controls, and secure authentication.

6. Your Rights

You have the right to:

• Access your personal data

• Correct inaccurate or outdated information

• Request data deletion (except where there is a legal obligation to retain it). For verification and security purposes, we may request technical information such as the IP address used.

• Revoke consents

Requests may be sent to: contato@loopiclub.com

7. Data Retention

7.1 Legal Bases

Your data is processed based on the following legal grounds:

• Consent (Art. 7, I);

• Contract execution (Art. 7, V);

• Legal obligation (Art. 7, II);

• Legitimate interest (Art. 7, IX);

7.2 Data Storage Period

Personal data collected through the app will be stored only for as long as necessary to fulfill its intended purposes, such as:

• User account management

• Point attribution, prizes, and ranking placement

• Service delivery and app functionality

• Compliance with legal obligations

• Protection of company and user rights

If the user remains inactive for 12 consecutive months, their data may be reviewed for deletion or anonymization, unless there is a legal basis for retention.

7.3 Types of Data and Retention Periods