Privacy

Last updated 13 July 2026

loophole is built so that your health data has nowhere to leak. The short version: it stays on your phone, and there is nothing of ours in the middle.

Everything stays on your phone

loophole keeps all of your health data on your device. There is no server of ours that your data is sent to, and we cannot see it.

Where your data comes from

Your smart ring, read directly over Bluetooth. Optionally the ring maker's cloud API, which talks to their service using a personal token you paste in, and Apple Health if you connect it. Those connections are between you, the ring's maker, and Apple. Nothing routes through us.

No tracking, no analytics

We do not collect usage analytics, advertising identifiers, or any telemetry. There is nothing to opt out of, because there is nothing being gathered.

On-device intelligence

The optional plain-language interpretation of your trends runs entirely on your iPhone using Apple's built-in model. Your numbers are never sent anywhere to produce it. It is informational only and is not medical advice.

Apple Health

If you turn on Apple Health, loophole writes your ring metrics into Health and can read activity and body metrics back. That exchange is governed by Apple Health's own permissions, which you control in the Health app.

iCloud backup (optional)

If you turn on iCloud Backup, loophole stores an encrypted copy of your data in your own private iCloud, tied to your Apple ID. It goes to Apple, not to us, and is protected the same way as the rest of your iCloud data. No server of ours is ever in the path, and you can turn it off any time. Leave it off and nothing is uploaded at all.

Your control

You can export everything as a file, or delete all your data, at any time from Settings. Deleting removes the on-device database and, if you turned it on, your iCloud backup too. Anything you already wrote to Apple Health or exported to a file is yours to manage.

This website

This site is a set of static pages hosted on Firebase Hosting. It sets no tracking cookies and runs no analytics. As with any website, the hosting infrastructure may keep standard technical request logs. The site does not ask for, or collect, any personal information from you.

Children

loophole is not directed at children and does not knowingly collect data from anyone. Because nothing is collected by us at all, there is no data for us to hold, about anyone.

Changes

If this policy changes, the date above is updated. Because the app collects nothing, changes will be about clarity, not about new data use.

Contact

Questions about privacy? Email loophole@mediterraai.com.

Not affiliated with Oura

loophole is an independent app and is not affiliated with, endorsed by, or connected to Ōura Health Oy.