Privacy policy

Last updated: September 8, 2026

Who processes your data

The data controller is Hydra. For anything concerning your data, including deleting your account, write to privacy@gettestloop.com.

This policy covers the gettestloop.com site, the web app at app.gettestloop.com, and the TestLoop Android app.

What we collect

Only what the product needs to work. We do not buy data and we do not build advertising profiles.

Account	Email address, password (stored only as a hash), and the name you give when signing up. If you sign in with Google we receive that account’s email and name, never your Google password.
Profile	Public handle, name, initials, tier (bronze/silver/gold), LP balance, completed tests, and day streak.
Apps you publish	Name, category, description, suggested tasks, Android package name, Google Play link, and version.
Testing activity	Which apps you enrol in, the status of each test, and its dates.
Evidence	Your review text, the bug report if you write one, and the screenshots you upload.
Economy	History of LP earned and spent, with the reason for each.
Site usage	Page views and key actions (sign-up, enrolment, evidence submission), along with the campaign you arrived from. Web only; the Android app carries no analytics.

What we use them for

To run the testing exchange: matching testers with apps, adding your email to the app’s Google Play tester list, crediting the LP you earn, and emailing you when someone approves your access or validates your evidence.

Also to understand where people abandon sign-up so we can fix it. That measurement is aggregate and we do not use it to make decisions about you individually.

What other people can see

This is the part worth reading closely, because TestLoop is a collaborative platform and some of your data is visible by design:

Your handle, name, tier, LP balance, and completed tests are visible to anyone registered on TestLoop.
When you enrol to test an app, your email address is shared with that app’s developer. This is unavoidable: Google Play requires the tester’s email to grant access to a closed test.
The screenshots and text of your evidence are seen by the developer of the app you are testing.

If you do not want a developer to have your email, do not enrol in their app.

Who else receives them

We use these providers to run the service. Each receives only what it needs:

Supabase	Database, authentication, and screenshot storage. Hosts nearly all of the data above.
Vercel	Hosting for the site and the web app.
Google Workspace	Your email is added as a member of the tester group for each app you test, so Google Play can grant you access. Group membership is not public.
Resend	Delivery of all our email, including authentication messages. Receives your address and the message contents.
Mixpanel	Website usage analytics. Receives an identifier, the events, and your approximate location derived from your IP.

We do not sell your data. We would hand it to an authority only under a valid legal order.

How long we keep them

For as long as you have an account. Deleting it cascades to your profile, your apps, your tests, your evidence, and its LP history. Database backups may retain records for up to 30 days longer before rotating, and email already sent stays in the recipient’s inbox.

How to delete your account

From the Android app, under Profile → Delete my account. Deletion is immediate and irreversible.

You can also request it by writing to privacy@gettestloop.com from the address you registered with. We process it within 30 days and confirm in writing once done.

You may also request a copy of your data, correction of anything wrong, or deletion of a specific piece of evidence without closing your account.

Minors

TestLoop is not directed at children under 14 and we do not knowingly collect their data. If we find an account belonging to a minor, we delete it.

Changes

If we change what we collect or who we share it with, we update this page and its date. When the change is significant, we email you before it takes effect.