1. Who we are
Loomavita (Pty) Ltd (“LoomaVita”, “we”, “us”) provides the LoomaVita mobile wellness application and related marketing website. We are based in the Republic of South Africa. For registered address details, contact us via Support; we do not invent street addresses in this policy.
This policy covers the consumer mobile app, marketing/support website, and closed-beta account infrastructure.
2. What this service is (and is not)
LoomaVita is a wellness companion for health, fitness, diet, family controls, and optional paid AI companion features (“Chikabi”). It is not a medical device and does not provide diagnosis or treatment. Always seek qualified healthcare professionals for medical decisions.
3. Personal information we collect
Depending on use, we may process:
- Account identity: username, email, phone (OTP), date of birth, session metadata
- Onboarding & profile: height, weight, goals, fitness level, dietary preferences, optional conditions and medications, units/theme/notify prefs, optional Flow pack
- In-app domain data: health, fitness, diet, grocery/recipes, progress, reminders, notifications
- Messages (if used) — not exposed to Chikabi
- Chikabi (paid): conversation text you send, proposals you confirm, continuity fields
- Billing/entitlements: store subscription signals and plan tier
- Support / closed beta: tickets, beta notes, legal acceptance records
- Technical logs: minimised operational logs (no secret or intentional health payload dumps)
4. How we use personal information
- Create and secure accounts (OTP, sessions, ban/delete)
- Provide wellness features you use
- Personalise based on preferences you set
- Operate paid Chikabi when entitled
- Support, closed-beta ops, legal compliance, security
5. POPIA-minded principles
We aim to apply POPIA principles in substance: accountability, purpose limitation, minimisation, security safeguards, and data subject participation (including self-service delete below). We do not sell personal information.
6. Processors and hosting
- Database: Neon (EU-region configuration for closed beta)
- API hosting: Fly.io
- Website: Vercel (or equivalent)
- SMS OTP: configured SMS provider
- LLM: configured model provider for paid Chikabi only
- App stores: Apple App Store / Google Play
7. Retention
Active account data is kept while needed for the service. Soft-deleted accounts hold username/email/phone uniqueness until an ops hard purge. Sessions are revoked on logout or account delete. Backups and redacted audit rows may lag live deletion.
8. Security
Controls include JWT sessions with revocation, server-side authorisation, rate limits, structured logging without secrets, and role-separated admin/partner access. Report issues via Support.
9. Children
Solo registration is for people 18+. Under-18 access requires a parent/guardian invite path when available.
10. How to delete your data
In the LoomaVita app (self-service):
- Open Home or Profile
- Go to Settings
- Open Personal data
- Open Edit preferences
- Tap Delete userdata
- Read the warning carefully
- Type exactly:
data delete(lowercase, case-sensitive) - Tap Delete
This erases personal domain data on a best-effort basis, soft-deletes your account, revokes all sessions, and signs you out. The app will not function correctly for that account afterward.
Identity hold: username, email, and phone remain reserved until an ops hard purge. Re-registering with the same phone or email may require Support.
If you cannot use the app, contact Support or support@loomavita.com.
This phase does not include a downloadable export package and does not instantly free phone/email/username.
11. Your rights
Subject to law and verification, you may request access, correction, deletion, or related POPIA participation rights via Support.
12. Google Play / closed beta
Features may change during closed beta and testing tracks. Feedback channels may collect free-text you choose to send.
13. Contact
- Support form: loomavita-web.vercel.app/support
- Email: support@loomavita.com
- Organisation: Loomavita (Pty) Ltd, Republic of South Africa