Privacy policy

Last updated: October 9, 2026

Loopline helps you plan days out in London on foot and by public transport. Loopline was previously called A Reason to Stop and, before that, Foot & Line. This policy explains, in plain words, what information the app uses, where it goes and what you can do about it. In short: you can use it without an account, it has no advertising and no tracking, it only adds up anonymous counts of which features are used (you can switch that off), your data is never sold, and you can delete your account inside the app whenever you like. The earlier Foot & Line version, if you still have it on your iPhone, differs in three ways: it measures which features are used with a third-party service (PostHog, and never for advertising), it asks Geoapify, Open-Meteo and MapTiler for walking routes, weather and map previews, and it deletes an account when you write to [email protected].

The short version

• The map, routes, Today and the curated places work without signing in.
• Your location is used only while the app is open or a journey is being guided. We don't keep a history of where you have been.
• There is no advertising and no tracking software, and nothing is sold or shared with advertisers.
• The app adds up anonymous counts of which features are used, such as "someone used Find It today". Nothing in them identifies you or your phone, and you can switch them off in Profile.
• If you sign in, your days and progress are saved to your account, stored in London, and you can delete the account from Profile at any time.

Who we are

Loopline is made and run by an independent developer, Ashik Sadiq ("we"). For anything in this policy, including questions about your data, write to [email protected].

What the app uses, and why

Your location. If you allow it ("While Using the App"), your location shows you on the map, finds places near you and gives a route its starting point. It is read only while the app is open, or while you are guiding a journey. While you are guiding a journey, if you allow it, your location continues to be read with the screen off, and it is still not stored as a history. We don't build a history of where you go. Your position is used in these ways: Apple Maps receives it to draw the map and find places; Transport for London (TfL) receives it when you ask for a route from "Current location"; and when you add a stop to Today, your position at that moment is kept as the start of the day's plan, on your phone and, if you are signed in, in your account. The app also compares your position with a stop on your own phone to notice that you have arrived.

Your account. Signing in uses Sign in with Apple or Sign in with Google. We receive your name and email address (Apple may give a private relay address instead of your real one) and, from Google, a link to your profile picture. We never see your password or anything else in that account.

Today's plan. The stops you add for the day are saved to your account when you are signed in: the place, its position, its order and the day's starting point. Places found through Apple Maps are never uploaded: they stay on your phone for the day, and only Apple's own identifier for the place is kept there, so the app can look it up again when it is online.

Plans you share. If you choose to share a plan as a link, which needs you to be signed in, we save the list of places, the planned times and an estimate of fares and impact under your account, with a random code. Only places from our own curated list are included: places found through Apple Maps are left out. Anyone who has the link can see the plan. It shows no name and no location. The page that shows it is served by Cloudflare, which sees the request and the internet address of whoever opens it. The link stops working after 30 days, or when you stop sharing it (Profile, then Shared plans), and it is deleted if you delete your account. We count how many people added a plan, not who. Opening or adding a friend's plan does not need an account.

Your impact. Money saved, CO2 avoided and approximate steps are recorded only for trips the app confirmed with your location: it notices you arriving at each stop and checks the trip was plausible in time and distance. They are kept as running totals in your account, as numbers with a reference to which leg they belong to, never as a route or a trail of positions. They are shown only to you: there are no leaderboards and no comparison with other people.

Apple Health (optional). If you tap Connect Apple Health, the app reads your step count, read-only, to show how far you have walked and an estimate of the CO2 that saved. It stays on your iPhone: it is never uploaded and never written back to Health. You can switch it off in Settings, under Health.

Places you suggest. When you suggest a place for the curated list we receive the place, the category, the reason you write, and, for a place that did not come from Apple Maps, its position, together with your account so that we know who sent it. We read every suggestion. If we add the place, only the place becomes part of the library, never your name.

Anonymous usage counts (optional). Loopline adds up how often its features are used, so we can see what is working and what is not. When you do something it counts, such as using Find It, opening a place, adding a place to Today, pressing Directions or finishing the introduction, your phone sends the name of that event from a fixed list, the app version and the major version of iOS, for example "find_it_used, 3.2.0, iOS 27". Our server adds the London date and adds 1 to the total for that date, event and versions. Each kind of event is sent at most once a day from your phone, and never while it is offline. Nothing in a count identifies you or your phone: there is no account, user or device identifier, no advertising identifier, no location, no place, no search words and nothing you wrote, and the totals have no row that belongs to a person, so we cannot tell which phone a count came from or look one up. As with any request over the internet, our hosting provider briefly logs the internet address it came from (see How long we keep things); we do not keep it with the counts. You can switch this off in Profile, under Privacy & permissions, then Share anonymous usage counts. When it is off nothing is sent.

Notifications (optional). If you allow them, the app can tell you when you reach a stop on a journey, mention a curated place worth a look while you are walking on a journey, and suggest an idea for your day every two or three days, your choice. They are made on your phone from our own list of places: nothing is sent to us to make them, and there is no notification service in between. The notes about places on a walk use your location only while a journey is underway. Once you allow notifications all three are on, and you can switch each one off, or change how often ideas come, in Profile under Notifications.

When the app asks. The first time you open the app there is a short introduction. Its last page offers sign-in, and you can choose Skip instead. When the introduction ends, whether you sign in or choose Skip, the app asks, in the system's own words, for notifications. The first time you reach the map it asks, in the same way, for your location. Each question is asked only if you have not already decided it. Neither is required: if you say no, the map, routes and Today still work, and you can change either later in Settings. Apple Health is never asked for here; that happens only if you tap Connect Apple Health.

Kept on your phone. Your settings (appearance, haptics, route preferences, which notifications you want), your recent places (the words you typed and curated places you opened, never Apple place data), how far through today's journey you are, a small counter that decides when to ask you for a rating, a note of which anonymous usage counts were already sent today so each is sent once a day, a short list of the curated places already mentioned in notifications so they are not repeated, and small summaries used by widgets, Siri and Shortcuts, such as the name of your next curated stop and your impact totals, held in a container shared between the app and its widgets. None of it leaves your phone except as described in this policy.

Age. The app does not ask your age. If you entered a birth month and year in the earlier version of the app, that stays on your phone and is used only to hide nightlife and club places if you are under 18. It is not uploaded.

Widgets, Siri and Shortcuts. They run on your phone using the summaries above. The TfL status widget asks TfL for the current state of the lines directly. Siri and Shortcuts are provided by Apple and follow Apple's privacy policy.

Who else receives information

Some features work by asking another service. Each one gets only what it needs to answer, and each has its own privacy policy.

• Apple. Apple Maps draws the map and provides search, walking directions, Look Around and each place's card with opening hours and ratings; it receives the map area and what you search for. Apple Weather receives only the centre of London, not your location. Sign in with Apple, Siri and Shortcuts are Apple services too. If you leave an optional tip, Apple takes the payment: we receive no card details, do not know who tipped, and store nothing about it in our database.
• Transport for London (TfL). To plan a public transport route the app sends TfL the start and end (the start may be your current location) and the time; it also asks for live line status and fares. TfL sees the request and your internet address, not your account. Contains TfL Open Data.
• Google. Only for Sign in with Google. If you choose Google Maps to open directions, the app hands the destination to Google Maps and you leave the app.
• Supabase. Hosts the database and sign-in for your account, and adds up the anonymous usage counts. Your data is stored in Supabase's London region.
• Cloudflare. Serves the list of curated places and their photos. It sees the request and your internet address, and nothing about your account.
• OpenStreetMap Foundation (Nominatim). If a search finds nothing in our curated places or in Apple Maps, the words you typed may be sent to OpenStreetMap's search service to find an address in London.
• MET Norway. Only if Apple Weather cannot answer, the app asks the Norwegian Meteorological Institute for the forecast for the centre of London, not your location. It sees the request and your internet address, nothing about your account.

What we don't do

• No advertising, and no data shared with advertisers.
• No third-party analytics, tracking or crash-reporting software inside the app. The only measuring is our own anonymous usage counts, described above, which you can switch off.
• No data sold to anyone.
• No profile built about you, and nothing that follows you across other apps or websites.
• No comparison of your progress with other people.

How long we keep things

• Your account and everything saved in it: until you delete your account.
• After you delete it: the account, Today's plans, impact history and suggestions are removed straight away. Copies in routine backups are overwritten on the hosting provider's normal schedule.
• What remains after deletion: a one-way, scrambled fingerprint of your email address and a count of how many times it has been deleted (see below). It is not your email address and cannot be turned back into it.
• Technical logs, such as the time and internet address of a request, are kept by our hosting providers for a short time for security and fixing faults.
• Anonymous usage counts: kept as day-by-day totals for as long as they are useful. They are not about you, so there is nothing in them to look up or delete.
• Emails to support: for as long as needed to help you.

Deleting your account

In the app, open Profile, tap your name, then Delete account. You will be asked to type DELETE to confirm. It removes your account and everything saved in it straight away, and for accounts made with Apple it also revokes the Sign in with Apple link. Your Apple or Google account itself is not touched. If you use the earlier Foot & Line app with the same sign-in, the account is deleted there too. You can also ask us to do it by writing to [email protected].

You can sign in with the same Apple or Google account again afterwards. To stop one email address being deleted and set up again without limit, an address can be deleted three times; after the third deletion a new account cannot be created with it. To count this without keeping your email address, we keep only the one-way fingerprint described above.

Your rights and choices

• Location: allow, change or stop it in Settings, under Privacy & Security, then Location Services, then this app. The map and Today still work without it.
• Apple Health: change it in Settings, under Health, then Data Access & Devices.
• Anonymous usage counts: switch them off in Profile, under Privacy & permissions, then Share anonymous usage counts.
• Signing out: the red Sign out button at the bottom of the Profile. Your saved data stays in your account until you delete it.
• Your data: you can ask us for a copy of what we hold about you, to correct it, or to delete it, by writing to [email protected]. If you are in the UK or the EU you also have the rights to restrict or object to how it is used and to receive it in a portable form. We reply within one month.

We use your information to give you the app you asked for (that is our basis for your account, your plans and your impact), because you agree to it (location and Apple Health, which you can withdraw at any time), to keep the service safe from abuse (the deletion count and technical logs), and, for the anonymous usage counts, because we have a legitimate interest in knowing which parts of the app are used so we can improve it; you can object at any time by switching them off. If you think we have handled your data wrongly, you can complain to your data protection authority; in the UK that is the Information Commissioner's Office.

Security and where data goes

Everything the app sends travels over encrypted connections. Sign-in is handled by Apple and Google, so we never hold a password. The database is set up so that an account can read only its own rows. No system is perfectly secure, and we cannot promise it. Your account data is stored in London; Apple, Google and Cloudflare may process the requests they receive in other countries under their own safeguards.

Children's privacy

The app is not directed at children under 13 and does not knowingly collect personal information from them. Nightlife and club listings are hidden for anyone who has told the app they are under 18.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and say so in the app.

Contact

Questions about this policy or your data: [email protected]