Privacy Policy

Who operates Meaning Loop

Meaning Loop is provided by Xiaopeng Song. The current app does not require an account, sign-in, or profile.

Information processed when you request an analysis

Sentence content

When you tap the analysis action, the English sentence you entered leaves your device. Meaning Loop also sends a normalized version of the sentence, any context you chose to provide, and request information needed to complete the analysis.

This content is used to complete the analysis you actively requested. It is sent to the Meaning Loop Gateway, hosted on Railway, and then to the OpenAI API, which generates the analysis returned to the app. Meaning Loop does not use sentence input for advertising or cross-app tracking.

Meaning Loop does not use sentence input to train its own model. Meaning Loop’s OpenAI organization data controls have model-feedback sharing, evaluation and fine-tuning data sharing, and API input and output sharing turned off. Meaning Loop has not opted in to sharing API inputs or outputs with OpenAI for model training. Requests also set the OpenAI Responses API store option to false.

These settings do not mean that all processing or retention is eliminated. OpenAI may temporarily process or retain limited prompts, responses, and related service data for abuse monitoring, security, or legal compliance under its API policies.

Do not enter names, contact details, passwords, confidential information, health information, financial information, or other personal, confidential, or sensitive data.

Security and service data

Meaning Loop uses Firebase App Check with Apple App Attest to help verify that requests come from a legitimate copy of the app. Firebase and Apple process attestation material, tokens, and related device or security signals needed to perform this verification.

The Gateway uses a Redis service hosted within Railway for short-lived rate-limit, budget, and concurrency controls. It stores only hashed app identifiers, counters, and short leases. Redis does not store sentence text, analysis text, security tokens, or Meaning Loop account identities.

Railway, OpenAI, Firebase, Apple, and necessary network providers may process IP addresses, device or connection information, request metadata, security signals, and service data as needed to deliver, protect, troubleshoot, and comply with legal obligations for their services.

Operational logs

The Gateway application logs a random request identifier, route and method, HTTP status, timing, request and response sizes, and limited failure categories. The application is designed not to place sentence text, App Check tokens, authorization headers, or OpenAI response bodies in its logs. Railway captures application output for operational logs and may separately process network and security data.

Information stored on your device

Learning records and selected analysis results are stored locally in Meaning Loop’s app container on your device. This can include the sentence, normalized sentence, plain meaning, explanation, likely language gap, pattern information, whether the moment was kept or dismissed, dates, and completed Recall and Apply activity.

The current version does not provide an account or cloud sync. Deleting the app through iOS deletes the Meaning Loop data stored in that device’s app container.

No account linkage, advertising, or third-party analytics

Service providers and protection

Meaning Loop shares app data only with providers needed for the functions described above: Railway for Gateway and Redis infrastructure, OpenAI for requested language analysis, and Firebase and Apple for App Check and App Attest. This public website is hosted by Vercel as a static site.

These providers process data under their applicable service terms, privacy disclosures, and security commitments. Meaning Loop takes reasonable steps to use providers whose terms and safeguards support protections consistent with this policy. Providers use different systems and may apply different retention periods where needed for service delivery, security, abuse prevention, or legal compliance.

Retention

• On device: local learning records remain in the app container until iOS removes that container, including when you delete the app.
• OpenAI: the Gateway sets store to false, and Meaning Loop’s OpenAI data-sharing settings are disabled. OpenAI may still retain limited prompts, responses, and related metadata for up to 30 days for abuse monitoring, unless law requires longer retention or another applicable policy exception applies. Meaning Loop does not claim Zero Data Retention.
• Firebase App Check: Firebase states that App Check does not retain attestation material and that ordinary App Check tokens are not retained by Firebase services. The tokens are short-lived security tokens whose validity is controlled by the configured time to live.
• Railway logs: the production service uses Railway’s Hobby plan. Railway’s published application-log retention period for this plan is seven days. The Gateway application logs exclude sentence text, tokens, authorization headers, and model response text.
• Redis controls: Redis uses a persistent Railway volume, but no Redis volume backups are currently configured. Rate-limit keys expire near the end of the current minute, daily and budget keys near the end of the current day, and concurrency leases after about 36 seconds. Redis does not contain sentence text or analysis text.
• This website: the pages do not add analytics or client-side tracking. Vercel may process IP address, location derived from IP address, system configuration, and traffic or security data to deliver and protect the site. Retention for static edge and security data depends on Vercel’s applicable plan, settings, and legal requirements.

Privacy questions and deletion requests

Email northcurly@outlook.com with the subject “Meaning Loop Privacy.” Do not send the original sentence, a token, credentials, or other sensitive data in the request.

Meaning Loop has no account identifier tied to an analysis request. We can answer questions and act on information that can reasonably be located, but we may be unable to find or delete data associated with a particular anonymous request. Deleting the app removes Meaning Loop data stored in that device’s app container; it does not remove data that a service provider is required or permitted to retain under its applicable settings, terms, or law.

Website privacy

This public website does not include analytics, cookies, cross-site tracking, advertising, third-party fonts, forms, chat widgets, accounts, or client-side storage. It loads its page resources from the same site. Vercel and necessary network providers may still process technical request and security data to deliver and protect the site.

Changes to this policy

If Meaning Loop’s data practices or service providers change, this policy may be updated. The effective and last-updated dates at the top identify the current version.