Privacy Policy

Version 1 · Effective date: October 26, 2026

1. Introduction

This Privacy Policy explains how Tarnish Inc. ("Tarnish," "Aloop," "we," "us") collects, uses, shares, and protects information about you when you use the Aloop mobile app, the website at aloop.jewelry, and related services (the "Service"). It applies to buyers, sellers, and visitors. It is a notice of our practices: it is not a contract, and you are not asked to agree to it. Our Terms of Service are the agreement between you and Aloop.

Examples in this policy ("for example", "such as") illustrate a category; they are not a complete list, and they change as the app does.

2. Information we collect

We collect the following categories of information:

Information you provide

• Account information, such as your name or display name and the email address you sign in with. You sign in with a one-time code we email to you; we keep a record of your sign-in sessions and of the devices the app runs on (described below), not a password.
• Profile and listing content: photos, video and any audio in it, descriptions, prices, your storefront name and details, and any provenance documents you upload when selling.
• Transaction information: the items you buy or sell, order and shipping details, and shipping addresses.
• Seller payout, tax and verification information. To pay you, file the tax forms the law requires, and meet our payment processor's identity-verification ("know your customer") obligations, we ask sellers for their legal name, home or business address, date of birth, phone number, email address, and Social Security number or Employer Identification Number. Your Social Security number or EIN and your date of birth are entered in the Aloop app, or on a page our payment processor hosts, and go from your device directly to our payment processor. Aloop's servers never receive or store them. Your bank account details are given to the payment processor and not stored by Aloop. Aloop keeps your name, address, phone number and email address. Our payment processor, Stripe, asks you for what it requires, on pages it hosts that the app opens, when you set up payouts and whenever it needs more, and you update your details and bank account later in your own Stripe dashboard, which you open from the app. Stripe tells us which items it still needs and whether your details are verified, never the numbers themselves, and we keep that status with your seller account for as long as you sell and afterwards as described in “Data retention & deletion”. When you give personal data for your payout account, Stripe receives it and processes it as Stripe’s Privacy Policy describes.
• Communications: messages you send us, support requests, reviews you write, and the notices we send you about your orders and account.
• Reports and removal requests: if you report something to us — in the app, through our report form, by email or by phone — what you report, where it is, and what you tell us about it, and, if you are not signed in, the contact details you give (your name, email address, phone number, and any organisation, agency or case reference). A request to remove an intimate image (see Report an intimate image) or a copyright notice also carries the name you sign with and the statements the law asks for. You do not need an account to report. We use this to handle the report, to contact you about it, to keep a record of what we did, and to prevent fraud and abuse, and we confirm by email when a report you made outside the app arrives. We never tell the person you reported who you are, except that a copyright notice is passed to the person who posted the material, as our Copyright Policy explains, and except where the law requires us to disclose it, such as under a court order.
• Interests you choose, such as the kinds of jewelry, metals, stones and price ranges you pick when you set up the app. We use them as a starting point for personalization, described in “Cookies & analytics”. You can skip any of them.

Information collected automatically

• Device and usage information, such as device type, operating-system version, app version, interaction and diagnostic events, and crash logs.
• In-app activity, such as the listings you view, watch, save, share, follow, hide and report, the filters you apply, and the text of searches you run. This is the personalization data described in “Cookies & analytics”, and you can turn it off. Separately, and even if you turn it off, the listings you see or open are counted toward the view counts their sellers see, in a way that does not tell a seller who viewed them.
• Browsing without an account: you can browse some of Aloop, and open a listing or a link someone shares with you, without signing in. While you browse signed out, we record which listings were shown to you and which ones you opened, together with a random code for that browsing session, so sellers can see how many people viewed their listings. That code is not linked to you, your device or any account, and these records are deleted within 6 months. Nothing you look at while signed out is used to personalize the account you may later create.
• How the app performs and is used, such as how quickly videos start and whether they stall, the quality you were served and your connection type, how far you scroll, how far you get in checkout and any error you hit there, and counts such as how many results a search returned.
• Network and location information: your IP address, which we use to run and protect the Service and to limit abuse, and the addresses you give us, which we use for shipping and tax. The app does not collect your precise location.
• Device checks: when you sign in, the app proves to us, through Apple, that it is a genuine copy of the Aloop app running on an Apple device. We keep the key that proof uses with your account until the account is deleted, and we use it only to protect sign-in and prevent abuse.

What the app does not do today. The app has no advertising identifier, and Aloop builds no device fingerprint of its own. When you pay, our payment processor’s software in the app collects information about your device and how you use the payment form, to detect and prevent fraud; the processor uses it only for fraud prevention and security, under its own privacy policy. The app does not collect your precise location, your contacts or your calendar, and it reads your clipboard only when you tap Paste. It does not record your screen or replay your sessions, it does not put tracking pixels in our emails or push notifications, and it does not track you across other companies' apps or websites. It uses no third-party analytics provider: the activity, performance and usage information described above stays on our own infrastructure. The exception is crash reports: when the app or our servers hit an error, a report of it goes to our crash-reporting provider, Sentry, which processes it for us under contract so we can find and fix the problem. We remove the user details from every report before it is sent.

Information from third parties

• Our payment processor shares transaction, payout, fraud-risk and verification status with us.
• Shipping carriers and our shipping provider share tracking and delivery status, and whether an address can be delivered to.
• Apple tells us whether the app and device checks above succeed, and, where the law requires it, tells the app on your device whether you are 18 or older; that answer stays on your device (see “Children's privacy”).

Summary of what we collect

This table summarizes the sections above and below; where they say more, they govern.

Sensitive information. Some of what we collect is sensitive: a seller’s Social Security number or EIN and date of birth, and, if you complete an identity check, the information on your government ID. We collect it only to verify identity, pay sellers, prevent fraud, and meet tax and marketplace laws. A seller’s Social Security number or EIN and date of birth are entered in the app, or on a page our payment processor hosts, and sent directly to our payment processor, Stripe, to verify the seller’s identity, pay the seller and prepare the tax forms the law requires; Aloop’s servers never receive them, they are used only for those purposes, and Aloop keeps only Stripe’s identifier for your payout account and the verification status Stripe reports. The photos and details of a government ID also go directly to Stripe; Aloop keeps only the result described in section 5A. We do not sell sensitive information, use it to infer characteristics about you, or use it for any purpose but those in this paragraph.

3. How we use information

We use information to:

• run the marketplace, including creating and showing listings, processing orders, facilitating payments and payouts, and arranging shipping;
• provide Buyer Protection and resolve disputes, returns, refunds and chargebacks;
• sign you in and keep accounts secure;
• keep Aloop safe: prevent and investigate fraud, abuse, infringement and other harmful or unlawful activity, review listings, and enforce our Terms;
• provide support and respond to your requests;
• send service messages about your orders, listings, payouts and account;
• personalize what you see, unless you turn personalization off (see “Cookies & analytics”);
• understand and improve the Service: measure how it is used and how it performs, find and fix problems, run research and tests, and develop new features and products, including the models described in section 3A;
• market Aloop to you in the app and, where you allow it, in notifications and email (section 10), about Aloop and the pieces on it;
• promote Aloop and its listings to others, using published listing content as our Terms (section 12) allow;
• give sellers insights about how their listings and storefronts perform, in counts and aggregates that do not tell them who you are;
• create aggregated or de-identified information that cannot reasonably be linked to you (section 4);
• carry out a business transfer, such as a financing, merger, acquisition or sale of assets (section 4); and
• comply with law, including tax, marketplace and record-keeping obligations, and respond to lawful requests.

New purposes. If we want to use information for a purpose materially different from those described in this policy when we collected it, we will ask for your consent first.

3A. Models and AI

We build and improve models that power the Service, such as the ones that rank and personalize the feed, improve search, and detect fraud. We may use published listing content — photos, video and listing text — to train, test and improve models and features, including features that suggest a title, a description or a caption, or that cut a short clip from a listing video. We may also use the other information this policy describes, including your activity on Aloop, to build and improve models, including generative AI models, that power Aloop's own features; where it is practical, we use it in de-identified or aggregated form. Limits on this:

• We do not use photos, video or audio to create face prints or voice prints, to identify people, or to make a digital replica of anyone.
• If we use another company's AI service to process personal information, it acts for us under contract and may not use that information to train its own models, and, where the app stores' rules require it, we ask your permission first.
• We never use reports, support requests, identity documents or identity-check results, or information we collect only to meet a law that requires us to verify sellers (section 5A), to train general-purpose generative AI models or in advertising.
• Before we use personal information for a new purpose that is not compatible with the one we collected it for, we ask for any consent the law requires (see “New purposes” above). Our Terms' license to use listing content does not override this policy or your privacy rights.

4. How we share information

We do not sell personal data, share it for cross-context behavioral advertising, or use it for targeted advertising. We share information only as follows:

• Between buyers and sellers. To complete a transaction, a seller and buyer receive the information necessary to fulfill and receive an order (for example, a shipping name and address). Your public profile, storefront, reviews and listings are visible to everyone. A review you write shows the US state your order was shipped to, but not your name or any other part of your address. If you delete your account, your reviews stay, to keep the marketplace's feedback complete, without your name or any link to your account, and still show that state. Removing your name does not necessarily make a review anonymous — its text, or the seller's own record of the order it was about, may still identify you — so we keep treating a retained review as personal information where it is, and you can ask us to delete one as section 8 explains.
• Collections you choose to share. A collection of saved pieces is private until you share it. A shared collection's link shows its title and pieces, not who made it, and you can stop sharing at any time, which turns the link off. We ask search engines not to index shared collections, but we cannot control what someone does with a link you send them.
• Service providers, and providers with their own purposes. Most of the companies below process information only for us, under contract and only to do that work for us. Some also process certain information for their own purposes, under their own privacy policies, and we say so where it matters: our payment processor, Stripe, for its own fraud prevention, its legal and regulatory duties and the identity checks in section 5A; Apple, for what you type into its address search; and the carriers, for delivering a parcel. The companies are: our payment processor, Stripe (payments, payouts, identity verification and the identity checks in section 5A, tax reporting, fraud prevention, and payment disputes); our cloud hosting and database providers; our media hosting, storage and content-delivery providers (for photos and video); our shipping-label provider and the carriers; our email delivery provider, Amazon Web Services (which receives your email address and the messages we send you); our crash-reporting provider, Sentry (which receives the error reports described in section 2); Apple (push notifications, the device checks in section 2, and address suggestions); and customer-support tools.
• Advertising platforms and agencies. When we advertise Aloop or its listings on other platforms, we give those platforms and our agencies the ads themselves — showing jewelry from published listings, sometimes being worn, and the storefront's name. We do not give them your contact details, your activity, or any list of our users, and we do not use their tracking pixels or software in our app or website.
• Legal and safety. When we believe disclosure is reasonably necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Aloop, our users, or the public.
• Business transfers. In connection with a financing, merger, acquisition, reorganization, or sale of all or part of our business or assets, including during the negotiations and checks that come before one. A company that acquires our business may use the information as this policy describes.
• Aggregated or de-identified information. We may share or publish information that is aggregated or de-identified so that it cannot reasonably be linked to you. We keep such information in that form, we will not try to re-identify it, and we require anyone we give it to not to try either.
• With your direction. When you ask us to share something, or agree that we may.

Address suggestions and checks. When you type a street address or search for your storefront’s city in the app, what you type is sent to Apple’s address search so the app can suggest complete addresses. Apple handles it under its own privacy policy, and it is not sent to us until you save the address. Before you save an address to your saved addresses or as your return address, we send the street address — not your name — to our shipping provider to check that carriers can deliver to it.

5. Payments

Payments and payouts are processed by our third-party payment processor. When you make a purchase or connect a seller payout account, your payment-card and financial details are provided directly to and handled by the payment processor under its own terms and privacy policy. Aloop does not store your full payment-card number. We receive limited information such as confirmation of payment, the last digits and type of card, and payout status, which we use to operate the marketplace and prevent fraud. If a payment is disputed, we may give the payment processor the order’s delivery details — the recipient’s name and address, the carrier and the tracking number, and its shipping and delivery dates — to respond to the dispute.

Sellers’ proceeds and bank debits. A seller’s share of a sale is credited to the seller’s own Stripe balance when the buyer’s payment is captured, and Aloop tells Stripe when to pay it out to the seller’s bank. If a refund, return or chargeback takes that balance below zero, Stripe may debit the bank account linked to the seller’s payout account for the shortfall, as section 6.5A of the Seller Agreement authorizes. Stripe uses the bank details it holds to do that; Aloop does not receive the account number. We record the amount Stripe is recovering, the order it came from and why, so we can tell the seller.

5A. Information about high-volume sellers

A federal law, the INFORM Consumers Act (15 U.S.C. § 45f), and similar state laws require online marketplaces to collect and verify certain information from sellers who reach a set sales volume (200 or more sales of new or unused items and $5,000 or more in a 12-month period), and to show some of it to buyers once a seller's sales reach $20,000 in a year. If you reach that volume:

• What we collect and verify. Your name, your bank account (held by our payment processor), your tax identification number (held by our payment processor), and a working email address and phone number. We verify them: our payment processor checks your tax number with the IRS and tells us whether it matched; we confirm your phone number, for example by calling it; and we may ask you to complete an identity check with our payment processor's identity service, which checks a photo of a government ID and checks your details against official records. We do not ask for a selfie unless that check cannot confirm who you are, and then only with your consent — or you can choose a video call with us instead. We keep the result of the check, how it was done, the name it verified and when — not the ID document, the photos, or the numbers on them. Our payment processor also uses the information from the identity check for its own purposes, as an independent controller under its own privacy policy.
• What buyers see. Only once your sales reach $20,000 in a year, and only buyers who order from you, on their order confirmation and in their order history: your name, a business or return address (or only your state and country, if you tell us you have no business address other than your home), and a way to contact you.
• How we use it. We use information collected under this law only to comply with it — and your tax number for the tax forms the law requires. We never use it for advertising, personalization, ranking, analytics, or fraud scoring, and we never show buyers that a seller was "verified".
• How long we keep it. We keep your current information for as long as we need it to meet these laws while you sell. When you replace it, or close your account, we keep the earlier information for the period the law requires — generally at least two years from when you provided it or last certified it, as California law requires (Cal. Civ. Code § 1749.8.3) — and, once that period and any legal hold have ended, we delete or de-identify it.

6. Outside the United States

We offer the Service in the United States. If we offer it in another country or region, we will add a supplement for that place to this policy, and the supplement will apply to people there.

7. Data retention & deletion

We keep personal information for as long as your account is active and as needed to provide the Service, and afterward as required to comply with legal, tax, accounting, and dispute-resolution obligations or to prevent fraud. Analytics and personalization data that is linked to your account — the in-app activity, app-performance, checkout-step and usage information described in “Information we collect” and “Cookies & analytics” — is retained for up to 6 months and then deleted. The interests we keep for you — the ones you choose when you set up the app and the ones we derive from your activity — are deleted once 6 months pass without anything you do renewing them. The text of your searches is more sensitive than the rest, so it is held to a much shorter window: we delete the words you typed after 30 days. The record that a search happened, and whether it found anything, stays linked to your account like the rest of your in-app activity and is deleted on the same 6-month schedule. Identifier-free aggregate statistics — daily counts by listing, or by checkout step, that name nobody and cannot be traced back to you — may be kept longer.

Account deletion. You can request deletion of your account from within the app. When you do, your request enters a cancelable grace period (currently 14 days) during which you can restore your account; after the grace period, and provided there is no outstanding obligation (such as an open order, dispute, or pending payout), we permanently delete or de-identify your personal data, end your sign-in sessions, and instruct our media providers to remove associated data. Financial and transaction records held by our payment processor — and other records we are required or permitted by law to retain, such as tax and dispute records — are kept for the periods the law requires rather than deleted. Published listing content may remain in models already trained with it, and in aggregated or de-identified information, which does not identify you. Reviews you wrote stay without your name, as section 4 describes. You can also contact us at privacy@aloop.jewelry for help with a deletion request.

Fraud-prevention codes kept after deletion. Where an order was paid for, we may keep, with that order's record, one-way codes derived from the payment method used and from the delivery address (and, for a seller, from the address the order was shipped from), together with our payment processor's fraud-risk rating for that payment. No one outside Aloop can turn these codes back into card details or an address; Aloop can only check whether a payment method or address it already has matches one. We keep them for as long as we need them to detect fraud and abuse, and we use them only to detect fraud and abuse of our marketplace — including to recognise accounts connected to an account we have previously restricted — and never for marketing or personalization.

If we permanently ban an account. If we permanently ban an account for fraud or abuse, we ask Apple to record a single flag against the iPhone or iPad it signs in from, using Apple’s DeviceCheck service. Apple does not tell us which device the flag is on, and we keep no device identifier. If another account signs in on a flagged device within 12 months of Apple last updating the flag, a member of our team may review that account. A flag alone is never enough for us to act on. Only where at least one other fact also connects the account to the banned one — such as a shared shipping address — may we hold its orders for review before they ship, or hold its payouts if it sells. You can contact support to ask us to lift either hold, and a person will review it. A flag on its own never suspends or bans an account, and we do not build a device fingerprint. Because a phone or tablet can change hands, you can also ask support to reset the flag on your device; we clear it the next time you sign in on that device. We keep a record that an account signed in on a flagged device for at most 12 months after that account last signed in on it, then delete it, and we delete it sooner if the account is deleted.

High-volume seller information kept after deletion. If our records show you reached the high-volume threshold described in "Information about high-volume sellers", we keep the information you provided under that law, and the record of how we verified it, even if you delete your account, until two years after you provided it or last certified it, because California law requires it, and longer only while a legal hold requires. We then delete it. It is not shown to buyers after your account is deleted. Information that went only to our payment processor, such as your tax number and bank account, is never held by Aloop, and the processor keeps it as its own policy describes.

Reports and removal requests. We keep a report, including a request to remove an intimate image, for as long as we need it to show what we did and when, to handle related claims and to prevent abuse, and as the law requires. A report connected to a legal hold, such as a stolen-goods claim under investigation, is kept until the hold ends.

Delivery records kept after deletion. If you delete your account, we keep the name and address an order was delivered to, its carrier and its tracking number for 180 days after delivery, so we can answer a payment dispute (chargeback) about it. If a dispute is still open then, we keep them until it closes. We then erase them, and we use them for nothing else.

8. Your privacy rights

You can ask us for access to, or a copy of, the personal information we hold about you, and ask us to correct or delete it, by emailing privacy@aloop.jewelry; you can also delete your account yourself in the app's settings. We will respond as the law where you live requires, and we will not discriminate against you for making a request.

Your US state privacy rights

Depending on the state you live in, you may have the right to:

• access the personal data we hold about you and confirm whether we process it;
• correct inaccurate personal data;
• delete personal data, subject to the records we must keep (see “Data retention & deletion”);
• receive a copy of your personal data in a portable format; and
• opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data or use it for targeted advertising. Our fraud-prevention checks (described in “Data retention & deletion”) can hold an order or a payout for review; if one affects you, you can contact us and ask us to review it.

How to make a request. Email privacy@aloop.jewelry. You can also delete your account yourself in the app's settings. We verify a request by confirming it comes from the email address on your account, and we may ask for more information if we cannot match it to an account. Authorized agents: you may have someone make a request for you; we may ask the agent for proof that you authorized them and ask you to confirm your identity with us directly. We respond within the time the law of your state allows, generally 45 days, which some states let us extend once when reasonably necessary.

Appeals. If we deny your request, you may appeal by replying to our decision; if you remain dissatisfied, you may contact your state Attorney General.

Which law applies. We accept the requests described in this section from anyone in the United States, whether or not a state's privacy law applies to us or to you. Where a state's law does apply, we handle your request and any appeal under that law, including its deadlines, how it lets us verify you, and the remedies it gives you, and where it gives you more than this policy describes, it governs.

Nevada residents. We do not sell covered information as Nevada law defines it. You may still send a request about the sale of your information to privacy@aloop.jewelry, and we will confirm it.

No discrimination. We will not deny you the Service, charge you a different price, or give you a different level of service because you exercised these rights.

9. Cookies & analytics

This marketing website does not set advertising or tracking cookies. It uses Cloudflare Web Analytics, which sets no cookies, to understand how the site is found and used. It records aggregate visit data, such as page views, the referring site, country, device and browser type, and page-performance measurements, and we cannot use it to identify you. The app uses no third-party analytics provider, as “Information we collect” describes.

Tracking across other sites and “Do Not Track”. We do not collect information about your activity over time and across other companies' websites or apps, and we do not let other companies do so through our website or app — except that our payment processor's fraud-prevention software, described in section 2, collects device and payment-form information when you pay and uses it to detect fraud. Because we do not track you across other sites, we treat every visitor the same whether or not their browser sends a “Do Not Track” signal.

Personalization. To rank listings and tailor what you see, the app records your in-app activity linked to your account — for example, the listings you view, watch, save, share, hide, and report, the sellers whose storefronts you view and follow, the filters you apply, and the text of the searches you run. We also use the words of those searches, combined across many buyers so that no one is identified, to improve search results. This first-party personalization is on by default, and you can turn it off at any time in the app’s settings. Turning it off stops this identity-linked collection going forward and immediately deletes the interests we keep for you (the ones you chose and the ones we inferred) and the text of your past searches. From then on your past activity is not used to personalize anything; the rest of it — such as which listings you viewed or saved, and that you ran a search, without its words — stays linked to your account until it is deleted on the normal 6-month schedule.

What is not personalization. Some of what the app records — for example, how well video played, how far you got in checkout, how many results a search returned — is read back as daily totals across everyone, so it tells us where the product is broken rather than anything about you. Those totals are not used to decide what you are shown, and they are not affected by the personalization setting: turning personalization off does not stop us from seeing that a video is failing to play.

10. Notifications

Push notifications. With your permission, we send push notifications through Apple Push Notification service — for example, about your orders, listings, payouts and account, saved searches and price drops on pieces you saved, new pieces from sellers you follow, new followers and reviews, and, where you allow it, news about Aloop. You can turn notifications off at any time in your device settings, or by category in the app.

Service email. We send service emails to the email address you sign in with: for example, sign-in codes, order confirmations and receipts, shipping and delivery updates, return labels and deadlines, dispute notices, payouts, and account restrictions. These are messages about your own transactions and account, so they are part of using Aloop and cannot be turned off while your account is active. They state facts about your own transaction, and they do not contain your shipping address, your payment-card details, the other party’s contact information, or the reasoning behind a dispute or moderation decision; those stay in the app. Emails about an order may show the piece’s public listing photo, loaded from our image or video host when your email app displays it; the image link is the same for everyone and does not tell us which email was opened. Our emails contain no tracking pixels.

Calls and texts. We may call or text the phone number you give us about your account, orders, payouts, security and identity checks, including with automated technology, as section 20B of our Terms describes. These are not marketing, and you can tell us to stop at any time, for example by replying STOP to a text.

Marketing email. Today we send no marketing email. If we start, it will be about Aloop and the pieces on it, we will update this policy first, and every marketing email will let you unsubscribe with one click.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and delegation of card handling to a PCI-compliant payment processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your email account and devices secure and contacting us if you suspect a problem. You can sign out of all your devices from the app.

12. Children's privacy

The Service is not directed to, and is not intended for, children. You must be at least 18 years old, or the age of legal majority where you live, to use the Service, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact privacy@aloop.jewelry.

Age check on iOS. When you sign in on iOS, we ask Apple for your age range where Apple tells us the law requires it, solely to confirm you are 18 or older. The answer stays on your device: your age and age range are not saved or sent to our servers. Where the law requires you to share your age range, you need to share it to sign in.

13. International transfers

We are based in the United States and process and store information in the United States. Some of our service providers may also process it in other countries where they operate, under their contracts with us.

14. Changes to this policy

We may update this Privacy Policy as our practices change. Each version carries a version number and effective date. If we make a material change, we will tell you by email or in the app before it takes effect, and first give the notice the law requires to the app stores that distribute the Aloop app. A change that lets us use information in a materially different way applies only to information collected after it takes effect, unless you agree otherwise.

15. Contact us

If you have questions or requests about your privacy or this policy, contact:

Tarnish Inc., Privacy Team
Email: privacy@aloop.jewelry