What Information We Collect
ToyLoop collects only the information needed to operate your account and deliver your rentals. This includes:
- Your name
- Your email address
- Your sign-in credentials (passwords are securely hashed, not stored as readable passwords)
- Your delivery address
- Your rental history
- Optional notes you provide to help us recommend toys
Parents may create child profiles with a first name or nickname, exact birthday, play preferences, skill interests and category approvals. Birthdays help update age-matched recommendations as children grow; names distinguish each child’s picks. Full names, school information and medical details are not requested. Payment and billing details are handled by Stripe; we receive billing identifiers, status and transaction records, not full card or bank account numbers.
How We Use Your Information
We use your information solely to:
- Create and manage your ToyLoop account
- Process rental requests
- Deliver and pick up toys
- Improve your experience
- Communicate about your rentals
- Maintain safety and quality standards
We do not sell your information. Parent-created child profiles are used for toy picks, not health profiling or advertising. With your permission where required, we measure our own ads as described under Advertising Measurement.
How We Protect Your Information
ToyLoop uses industry-standard security practices to keep your information safe:
- Securely hashed passwords
- Encryption in transit and industry-standard security controls
- Access limited to authorized personnel
- Regular safety reviews
We never store payment information on our servers.
What We Don’t Collect
ToyLoop does not collect:
- Health data
- Biometric data
- Children’s full names, school information or identifiers beyond parent-provided first names/nicknames and birthdays
- Financial account numbers
- Government IDs
Any optional notes you provide (e.g., age or developmental stage) are used only to recommend appropriate toys.
Your Privacy Choices
You can:
- Update your account information
- Request a copy of your data
- Request deletion of your data
- Close your account at any time
Contact hello@trytoyloop.com to exercise these rights. We review requests promptly; legally required records, safety evidence and records subject to a legal hold may be retained as described below.
Do Not Sell or Share My Personal Information
ToyLoop does not sell your personal information. We do not share your name, email, phone, address or children’s details with advertisers.
Advertising Measurement (Meta Pixel)
To learn which Facebook and Instagram ads bring families to ToyLoop, we use the Meta Pixel and Meta Conversions API (Meta Platforms, Inc.). When allowed, Meta receives the pages you visit on our site, your browser and device details (IP address, user agent and Meta cookie IDs) and, when you start a paid membership, the purchase amount and currency. We use this for ad measurement and to help Meta show our ads to similar families. We do not send your name, email, phone or address to Meta.
Visitors in regions that require consent (such as the EU, EEA, UK and Switzerland) are asked first, and nothing is sent unless they choose Allow. Everyone can opt out at any time with “Ad cookie settings” at the bottom of any page; your choice is saved in your browser and applies right away.
Third-Party Services
ToyLoop may use trusted third-party tools for:
- Authentication (Lovable Cloud and Google if you choose Google sign-in)
- Hosting and secure records (Lovable Cloud)
- Email delivery (Lovable email services)
- Payments (Stripe)
- Advertising measurement (Meta), as described above
These providers process information needed to deliver their services. Stripe processes payment and billing information; hosting/authentication and email providers process necessary account and communication data. Meta receives only the advertising measurement data described above, subject to your choices. We do not share child profiles with advertisers.
Data Retention
We retain active-account information to provide service, then retain the records below for billing, safety, insurance, dispute resolution and legal obligations. A legal hold may require longer retention. Permanently preserved records are restricted operational evidence, not ongoing marketing permission.
- Closed customer accounts: 7 years after account closure
- Signed waivers & agreements: permanently if feasible; minimum 10 years
- Payment & billing records: 7 years
- Delivery records: 7 years
- Inspection records: 10 years
- Sanitization records: 10 years
- Recall review logs: permanently if feasible; minimum 10 years
- Photo documentation: 10 years
- Damage disputes: 10 years
- Incident reports: permanently if feasible; minimum 10 years
- Injury reports: permanently if feasible
- Arbitration & legal claims: permanently
- Insurance claim records: permanently
Retention starts when the record is created or the relevant case closes, except closed customer accounts, which are retained for seven years after closure. We review deletion and anonymization requests against these obligations rather than promising immediate removal of every record.
Children’s Privacy
ToyLoop services are intended for parents and guardians. Children do not create accounts; we do not knowingly collect personal information directly from children. Parents supply the child profile details described above and control Kid Mode approvals. Kid Mode uses guided taps, not freeform AI chat.
Updates to This Notice
We may update this Privacy Notice to reflect improvements or changes in our service. If we make significant updates, we’ll notify you directly.