Privacy Policy
1. Who we are
Loop CheckOut is operated by LoopTechLabs Limited, a company incorporated in Hong Kong. We provide a digital receipt platform that connects consumers and merchants at the point of sale. References to "Loop", "we", "us" or "our" in this policy refer to LoopTechLabs Limited.
If you have any questions about this policy, please contact us at privacy@loopcheckout.com.
2. Information we collect
From consumers:
- Email address and display name when you create an account
- Your unique Loop barcode identifier
- Receipt data: merchant name, date, time, itemised line items, amounts, and payment method as provided by the merchant
- Optional profile details you choose to provide: first and last name, date of birth, yearly income range, and home/work district. These fields are entirely optional and used only to personalise your own spending insights — you can leave them blank or clear them at any time
- An optional profile photo, if you choose to set one (selected from your device's photo library)
- App usage data: a defined list of in-app events (for example, sign-up completed or receipt viewed), together with your notification and marketing preferences. We do not record which screens you visit, and we do not record what you search for inside the app
- Friends and sharing, if you use them: your Loop Tag, the people you add as friends, and receipts you share or that are shared with you. Names you type when splitting a bill are stored in your own account only and are not used to look anyone up
- Device information: device type, OS version, app version, and push notification token. If you turn on Face ID, the check happens entirely on your device; we never receive any biometric data
- Payment details, if you pay a merchant through Loop CheckOut: the card brand, the last four digits of the card (or, for Apple Pay and Google Pay, of the device account number), the wallet or payment method used, the amount, and whether the payment was later refunded or disputed. We never receive your full card number, expiry date or security code (see section 6)
From merchants:
- Business name, business registration number, address, contact email and phone number
- For each member of staff with access: name, email address, phone number (if provided) and role (owner, manager or cashier)
- Receipt and transaction data entered in the merchant app or forwarded to us by email from the merchant's point-of-sale system
- Dashboard usage data
- If the merchant accepts card payments: the merchant's Stripe account identifier and whether card payments and payouts are enabled. Identity, ownership and bank account details are collected by Stripe, not by us (see section 6)
- For merchant staff using Tap to Pay: the location of the device while a card payment is being taken, which our payment provider requires (see section 6)
From people without an account (guests):
- If a merchant sends you a receipt by email, the email address the merchant enters. We use it only to send that receipt. We also keep a one-way hash of the address with the receipt, so that the receipt can be added to your account if you later sign up with the same address; the receipt link itself expires after 15 days
- If you open a receipt link or pay on our payment page, the technical information described in sections 6 and 10
What you must provide. An email address is required to create an account; without one we cannot provide the Service to you. Everything described above as optional can be left blank without affecting receipts. A guest does not have to give an email address — the merchant can show the receipt as a QR code instead.
3. How we use your information
We use the information we collect to:
- Deliver digital receipts to consumers in real time
- Let you pay merchants by card, Apple Pay, Google Pay or Alipay, and show the result on your receipt
- Operate and maintain the Loop CheckOut platform
- Send transaction notifications and product updates (you can opt out at any time)
- Generate spending summaries and insights displayed only to you
- Provide merchant analytics and transaction reporting
- Detect and prevent fraud, abuse, and security incidents
- Comply with our legal obligations under Hong Kong law
We do not sell your data to third parties. We do not use your receipt data for advertising purposes.
4. Direct marketing
This section is our notice under Part VIA of the Personal Data (Privacy) Ordinance (Cap. 486). It matches, word for word, the consent notice shown in the Loop CheckOut app, recorded as version v1-2026-07.
Loop CheckOut intends to use your personal data to send you direct marketing. This will not happen without your consent.
Both marketing settings are off by default. We treat silence as a refusal, not as consent. You turn them on yourself in the app under Profile, and we record which version of this notice you agreed to and when.
Data that will be used. This depends on which setting you turn on.
- Offers & promotions: Your Loop account (to deliver notifications to your device).
- Personalized offers: Your purchase history (merchants, items, amounts, visit dates) and, if you set it, your birthday.
What you may receive. Offers, promotions and rewards for retail, food & beverage and other goods and services from merchants on Loop — including merchants you have not shopped at yet.
Opting out. You can opt out at any time, free of charge, by turning this off — offers stop, receipts keep arriving. You control how many offers you get per week. You can also opt out by emailing privacy@loopcheckout.com, and we will action your request free of charge.
We do not pass your data to merchants for their own marketing. Merchants create offers on Loop and we deliver them. We do not provide, sell, or transfer your personal data to any merchant or other third party for that party’s own direct marketing, whether for gain or otherwise.
5. Data sharing
We share data only in the following circumstances:
- With merchants: When a consumer presents their barcode, the merchant links the transaction to that consumer's account. The merchant can then see the receipts it issued to that consumer, the consumer's display name (if they set one), their purchase history at that merchant, and, for card payments, the card brand and last four digits. Merchants cannot see a consumer's email address, phone number, or purchases at other merchants.
- Stripe: Card payments are processed by Stripe (see section 6).
- Other Loop CheckOut users you choose: People you add as friends see your display name, profile photo and Loop Tag. When you share a receipt or a bill split, the people you share it with see what you shared.
- Service providers: We use third-party providers for database hosting, authentication, email delivery, push notifications, website hosting, and product analytics. Our database is hosted in Singapore. Our email provider processes inbound and outbound email in Tokyo, Japan. Push notifications are delivered through Expo (United States) and Apple's push notification service. Our websites, including the receipt and payment pages, are served through Cloudflare's global network, which processes your IP address and request details to deliver the pages and protect them from attacks. Our analytics provider processes data in the United States (see section 10). Providers process data only as necessary to provide their services to us.
- Legal requirements: We may disclose information if required to do so by law, court order, or to protect the rights and safety of Loop, our users, or the public.
6. Payments
Card payments made through Loop CheckOut are processed by Stripe. When you pay, you are paying the merchant: the money goes from you to the merchant's own Stripe account, and Loop CheckOut never holds or receives it. This applies whether you pay on our payment page at pay.loopcheckout.com, inside the Loop CheckOut app, or by tapping your card at the counter.
What Stripe handles. Your card details are entered into Stripe's own payment fields, or read by Stripe's software when you tap, and go directly to Stripe. We never receive your full card number, expiry date or security code. If you pay with Apple Pay, Google Pay or Alipay, the payment is handled by that wallet and Stripe.
What we keep. From Stripe we receive and store the card brand, the last four digits (for Apple Pay and Google Pay, of the device account number rather than your physical card), the wallet or payment method used, the amount, and later refund or dispute status. We show these on your receipt, and the merchant you paid can see them too.
Payment requests in the app. If you hold a Loop CheckOut account and show your checkout code at a counter, the merchant may send a payment request to your app for that sale. A merchant can only do this by scanning the code you presented; it cannot send requests to you otherwise. You can decline any request.
Fraud prevention. Stripe collects information about your device and how you interact with the payment form (for example, browser and device characteristics and typing or mouse activity during the payment), and loads a security check (hCaptcha) on the payment page, to detect fraud. Stripe states that it uses this data only for fraud prevention and security, not for advertising.
Merchants. When a merchant sets up card payments, Stripe collects information about the business, its owners and its bank account directly, on Stripe's own pages. For Tap to Pay, the device's location must be available while a payment is taken; it is used by Stripe for fraud prevention and to meet card network rules, and Loop CheckOut does not store it.
Stripe's own use of your data. If you provide personal data to Stripe in connection with a payment or with setting up payments, Stripe receives it and processes it in accordance with the Stripe Privacy Policy. Stripe acts both on our and the merchant's behalf and, for purposes such as fraud prevention and meeting its legal obligations, on its own behalf. Stripe may transfer and process this data outside Hong Kong, including in the United States.
7. Data retention and account deletion
You can delete your account at any time from within the Loop CheckOut app, under Profile → Support → Delete account. Deletion takes effect immediately. There is no grace period and it cannot be undone, so the app shows you what you will lose and asks you to confirm before proceeding. Merchant staff delete their access under Tools → Settings → Support → Delete account. Full step-by-step instructions, and what to do if you can no longer open the app, are on our account deletion page.
What deletion does. We remove your email address and phone number from our systems, permanently disable your sign-in, end all active sessions, deactivate your Loop Tag and QR code so no further receipts can be added to your account, and stop all marketing messages. Your email address is freed, so you can create a new account with it later if you wish.
What we keep, and why. A receipt is a record of a transaction between you and a merchant, and the merchant is legally required to keep its own business records — in Hong Kong, for at least 7 years under section 51C of the Inland Revenue Ordinance (Cap. 112). We therefore do not delete receipts, payment records, loyalty records, points ledgers or security audit logs when you close your account. Instead we remove the personal identifiers that link them to you. The merchant keeps its sales record; it no longer identifies you as the customer.
Your display name on shared items. If you shared a receipt or split a bill with another Loop CheckOut user, the name you chose stays visible to that person afterwards, in the same way an email you sent does not disappear when you close your email account. This is so the people you shared with keep a usable record. If you would prefer your display name removed as well, email privacy@loopcheckout.com and we will do it.
Deletion feedback. If you tell us why you are leaving, we store your answer without any link to you or your account, and we do not record the time of day. We cannot connect it back to you afterwards, so please do not include personal details in the optional comment box.
Data access and export. You may request a copy of the personal data we hold about you at any time by emailing privacy@loopcheckout.com. We recommend requesting this before deleting your account, since deletion is immediate and afterwards we can no longer identify which records were yours.
While your account is open, we retain your data for as long as the account remains active.
8. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and role-based access controls. Our infrastructure is hosted in data centres located in Asia. We conduct periodic security reviews and notify affected users promptly in the event of a breach.
9. Your rights under Hong Kong PDPO
Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:
- Request access to personal data we hold about you
- Request correction of inaccurate personal data
- Request deletion of your personal data (subject to legal retention obligations)
- Opt out of direct marketing communications at any time
To exercise any of these rights, write to our Data Protection Officer, LoopTechLabs Limited, 88 Kwai Cheong Road, Kwai Chung, New Territories, Hong Kong, or email privacy@loopcheckout.com. We will respond within 40 days as required by the Ordinance.
10. Cookies and analytics
Our websites use PostHog, a product-analytics service, to understand how they are used (for example, which pages are viewed and which links are clicked). This covers this website, the Loop CheckOut web app at app.loopcheckout.com, and the shared-receipt pages at receipts.loopcheckout.com. PostHog sets a first-party cookie to distinguish repeat visits and may collect technical information such as your IP address, browser, device type, and pages viewed. This data is processed on PostHog's United States infrastructure and is used only to improve our website and product; we do not use it for advertising, and we do not sell it. See PostHog's Privacy Policy for details.
We configure PostHog to create user profiles only for identified users, so if you are not signed in, no profile is built for you. We do not enable session recording, and we do not enable automatic capture of clicks or form interactions — only a defined list of events is recorded. If you sign in, we identify you to PostHog by your account identifier only; we do not send your name or email address. Receipt contents, exact transaction amounts, and the access links used to open a shared receipt are never sent to our analytics provider.
Our websites are protected by Cloudflare, which may set a strictly necessary security cookie (such as __cf_bm) to tell people apart from automated bots. It expires within about 30 minutes, is not used for analytics or advertising, and cannot be turned off without leaving the sites unprotected.
PostHog and our cookie notice do not load on our payment page at pay.loopcheckout.com. That page loads only Stripe's payment software, which sets its own cookies and collects device information for fraud prevention as described in section 6 and in Stripe's Cookie Policy. The Loop CheckOut apps include Stripe's software to take payments, which collects device information for the same purpose.
A notice is shown on your first visit. You can opt out of analytics at any time by enabling "Do Not Track" in your browser or by contacting us using the details below. The Loop CheckOut mobile apps use analytics only to measure product usage on the same basis; they do not use advertising cookies, session recording, or autocapture, and exact transaction amounts are never sent to our analytics provider.
11. Children
Loop CheckOut accounts are intended for users aged 13 and over. We do not knowingly create accounts for, or knowingly collect personal data from, children under the age of 13. A younger child may physically present a Loop barcode at a shop to have a receipt delivered to a parent's or guardian's account, but the account itself must be held and managed by someone aged 13 or older. If you believe a child under 13 has created an account or provided us with personal data, please contact us at privacy@loopcheckout.com and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify registered users via the app or email. Continued use of Loop CheckOut after any update constitutes acceptance of the revised policy.
Contact
LoopTechLabs Limited
88 Kwai Cheong Road, Kwai Chung,
New Territories,
Hong Kong
privacy@loopcheckout.com