Effective: September 4, 2026
Last updated: September 5, 2026
1. Person responsible
Looupe is operated by Mouhammadou Alioune Diaw, who is also the person in charge of the protection of personal information. Contact: contact@looupe.ca.
2. Scope
This policy applies to Looupe's mobile application, website and services, including accounts, profiles, communities, posts, comments, votes, reposts, reports, notifications, search and moderation.
3. Information collected
Depending on your use, Looupe may collect your name, username, date of birth, email address, language, avatar, account type, academic information for student accounts, community information, posts, comments, media, votes, reposts, memberships, preferences, reports, support communications, IP address, device and operating-system information, application version, login times, security and error logs, usage information needed to operate the service, and a technical push token when push notifications are enabled.
Looupe does not currently request or upload proof-of-enrolment documents.
4. Student verification
Student-account status is reserved for current students of Université de Montréal, HEC Montréal and Polytechnique Montréal. Looupe verifies control of a recognized institutional email address from one of these institutions, and the user represents that they are a current student there.
Verification protects the integrity of university spaces, associates the account with the appropriate institution and determines access to features reserved for students. Control of an institutional address does not by itself guarantee a person's identity, status or reliability. Looupe may correct, remove or require renewal of student status when there are reasonable grounds to believe the conditions are no longer met.
5. Minimum age
Looupe is restricted to people aged 18 or older. By creating an account, you confirm that you are at least 18. Looupe may suspend or delete an account when it reasonably believes this condition is not met.
6. Purposes
Looupe uses information to create and secure accounts; verify student eligibility; provide communities and interactions; display, rank and recommend content; deliver requested or necessary email and notifications; apply language and appearance preferences; prevent abuse and moderate the service; respond to requests and fix errors; improve Looupe; comply with law; and protect users, Looupe and the public.
7. Personalization
The “For You” feed may rank posts using signals such as joined communities, views, votes, comments, reposts, preferences, language, freshness and popularity. This does not produce legal or similarly significant decisions about you.
8. Public information
Depending on context, your username, display name, avatar, posts, comments, visible votes, reposts, communities and community role may be visible to others. Private academic information and your email address are not displayed publicly unless a feature clearly says so and you choose to publish them.
9. Providers and locations
Looupe uses DigitalOcean for its API and primary PostgreSQL database in Toronto (TOR1); Vercel to host and deliver the Looupe website; Cloudflare R2 for media; Supabase for authentication; Resend for email; Expo/EAS for mobile builds, distribution, updates and push delivery when enabled; and Apple for iOS distribution and system services.
Each provider receives only the information required for its function. While the primary API and database are hosted in Canada, other providers, including Vercel for the website, may process technical information outside Quebec and Canada. Standard Cloudflare R2 configuration does not guarantee Canadian residency and media may be cached in multiple jurisdictions.
Before entrusting personal information to a provider outside Quebec, Looupe completes the required privacy impact assessment and enters into a written agreement where required by law. A transfer proceeds only where the information will receive adequate protection.
10. Permitted disclosures
Looupe may disclose information to its providers, professional advisers, authorities where legally required, or where reasonably necessary to prevent fraud, handle an incident, protect a person or defend legal rights. Community administrators receive only the information required for management and moderation.
11. Sale, advertising and research
Looupe does not currently sell personal information or use it for personalized advertising. Any future commercial, advertising or research disclosure requiring consent will require legal review, a policy update and a separate, clear and optional consent.
12. Retention
Information is retained only as long as necessary for the purposes above, account operation, security, reports and legal requirements. Security logs, backups and moderation records may be kept longer where needed to prevent abuse or document decisions. Information that is no longer needed is deleted or anonymized. Residual copies may remain temporarily in secured backups until normal rotation.
13. Account deletion
You may delete posts and comments individually before deleting your account. Account deletion removes profile access and anonymizes retained contributions as “[deleted]” or “[supprimé]” to preserve discussions. Looupe deletes the sign-in identity and information no longer required, subject to legal, security, fraud-prevention, report-handling and dispute needs.
14. Blocking and moderation
Blocking requires Looupe to process the identifiers needed to enforce the block. Reports and moderation records may contain the reported content, reason, people involved, measures and necessary logs. Reporters do not necessarily receive confidential decision details; a generic notice may be sent when Looupe itself takes action.
15. Security
Looupe uses proportionate administrative and technical safeguards, including restricted access, server-side secrets, encrypted connections where available, authentication controls and security logging. No system can guarantee absolute security.
16. Your rights
Subject to applicable law, you may request access, correction, withdrawal of consent, cessation of dissemination or de-indexing in eligible cases, portability of eligible information and account deletion. Contact contact@looupe.ca. Reasonable information may be requested to verify your identity.
17. Privacy incidents
Looupe assesses incidents, takes reasonable risk-reduction measures and maintains required records. Where an incident creates a risk of serious injury, affected people and authorities are notified as required by law.
18. Changes and contact
Looupe may update this policy when its practices, features, obligations or providers change. Material changes affecting information or rights will receive appropriate notice. The current version remains available in the application and on the website.
Person responsible: Mouhammadou Alioune Diaw
Email: contact@looupe.ca