LoftSync Privacy Policy
Last revised: 12 October 2026
This policy explains how BRICON NV handles personal data in LoftSync, the Account Console and related support services. LoftSync is a consumer pigeon-management app offered internationally. Privacy rights that apply in your country remain unaffected.
1 Who is responsible
BRICON NV
Europark-Oost 15/C
9100 Sint-Niklaas
Belgium
Company registration number: 0437.974.004
Email: [email protected]
Telephone: +32 3 777 39 74
For privacy requests, email [email protected] and identify your message as a LoftSync privacy request. BRICON NV is the controller for the processing described here. Other BRICON services and payment providers may have their own privacy information.
2 Information we collect and its sources
Account and authentication: information you provide or generate when creating or using an account, such as your name, email, account identifier, language, account settings, sign-in records and security information. BRICON’s single sign-on service manages authentication. Required account fields are marked when collected; without information necessary for authentication, we cannot provide account access.
Loft content: pigeon, pedigree, breeding, loft, pigeon health and competition records, photographs and other content you enter or upload. Data about a pigeon can become personal data when linked to an identifiable breeder, owner or other person. Animal health records are not automatically human health data.
AI recognition: the image you choose to submit, the instructions needed to extract pedigree information and the recognition result. An image may include people’s names, addresses, handwriting, logos or image metadata.
Subscriptions and payments: plan, status, purchase channel, transaction identifiers, purchase and renewal events and, for direct billing, contact and invoicing information and the customer-country evidence needed to administer the purchase and calculate applicable taxes. Apple, Google or Stripe processes payment credentials. Full card details are supplied to the payment provider rather than stored by LoftSync.
Operations and support: app and device information, IP/network information, authentication events, synchronization errors, security logs and information you send in support requests. If you enable push notifications, we process the token needed to deliver them.
We receive information from you and your device, from purchase platforms and service providers, and from another user when their pedigree or loft content includes details about you. Contact us to ask about information concerning you.
3 Why we use information
We use account, synchronization, subscription and support information when necessary to provide and administer your contract with us, under Article 6(1)(b) GDPR. This basis concerns the contracting user’s data and does not automatically cover other people named in an uploaded record.
We use necessary operational and security information to protect accounts, prevent fraud, diagnose faults and maintain a reliable service, relying on our legitimate interests under Article 6(1)(f), after considering the impact on people’s rights. Limited processing of breeder or owner details supplied by users may rely on our legitimate interest in providing private pedigree-management functionality, only where necessary, proportionate and not overridden by the person’s interests or rights.
We process information required for accounting, tax and other legal obligations under Article 6(1)(c), and may retain limited information to establish, exercise or defend legal claims on an appropriate legal basis.
Optional AI sharing involving your personal data is based on your consent under Article 6(1)(a). We ask for explicit permission before submitting an image to Google Gemini. If an image includes another person’s personal data, your permission alone is not their consent.
You can decline AI sharing and use manual entry. You can withdraw consent for future AI sharing through the feature’s permission controls or by contacting us. Withdrawal does not make prior lawful processing unlawful. We send necessary account, security and subscription messages to administer the service. Acceptance of the Terms does not authorize unrelated marketing.
4 Google Gemini and intelligent OCR
The intelligent OCR function starts only when you invoke it in the app for an image you select. It uses Google Gemini to recognise text and extract pedigree information. Images are not automatically submitted for AI recognition. If you choose to proceed after the data-sharing information and permission request, the selected image and the extraction request are transmitted to Google Gemini. The result is returned to LoftSync for you to review and, if you choose, save. Recognition assists data entry and does not make decisions producing legal or similarly significant effects about people.
We use the paid Gemini API. Google identifies Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, as its contracting entity for customers billed in Belgium, unless separately agreed otherwise. Google processes submitted content under its processor terms: https://business.safety.google/processorterms/.
Google may process, temporarily store or cache submitted content in countries where Google or its agents maintain facilities, including outside the European Economic Area. Google’s processor terms provide for applicable adequacy arrangements, including the EU-US Data Privacy Framework for certified US entities, and standard contractual clauses where applicable. You can request information about these safeguards from [email protected].
Google’s published Gemini API abuse-monitoring policy specifies 55 days of retention for prompts, accompanying context and generated responses for service safety, policy enforcement and required legal disclosures. Submitted photographs form part of the context supplied for OCR. Authorized Google personnel may review flagged content. This safety retention is separate from BRICON’s account-deletion period. If an image is uploaded using Google’s Files API, that uploaded file is automatically deleted after 21 days and may be deleted sooner; this does not eliminate separate abuse-monitoring records. Sources: https://ai.google.dev/gemini-api/docs/usage-policies and https://ai.google.dev/gemini-api/docs/files.
Under the paid-service terms applicable to LoftSync’s Google Gemini integration, submitted images, prompts and recognition results are not used to train or improve Google’s general AI models. This does not mean that no temporary processing, caching or safety-related retention takes place. These arrangements apply to the Gemini API used by LoftSync. Do not assume that an image is processed only in Belgium or deleted immediately after recognition. You may ask us about a submitted image or request deletion where applicable.
Before submitting an image, remove unnecessary personal details where practical. You do not need to submit an image to use manual entry. Review extracted information for errors before saving it.
5 Local storage synchronization and permissions
LoftSync stores encrypted application data locally on your device so that the application can continue to function when connectivity is poor or unavailable. Relevant content is synchronized with cloud services when connected. Unsynchronized information can remain only on your device until a successful sync. Camera, photo-selection and notification permissions are requested when needed; you can manage them in your device settings.
Account deletion does not delete copies you previously exported or copies outside our control. The deletion screen explains how locally cached data is cleared and how to remove any remaining local copies. The app’s handling of local data, including its safeguards and backup behaviour, is described at LoftSync Local Data Information.
6 Recipients and service providers
We use providers for hosting and media storage, authentication, Google Gemini recognition, push delivery, diagnostics and support. Providers acting as processors may use personal data only under our instructions and applicable processing agreements. A provider may separately act as a controller for its own payment, fraud prevention, billing or other lawful purposes.
Apple, Google and Stripe receive information needed for the purchase channel you choose and process payments under their applicable privacy terms. BRICON receives the information necessary to activate and administer subscriptions. Apple or Google notification infrastructure handles notification delivery.
A description of our providers, the data categories they receive, their roles and processing locations is available at LoftSync Service Providers and International Transfers. We may disclose necessary information to authorities when required by law, or to advisers where necessary for legal claims.
We do not sell or rent your personal data. We do not use your private loft content to create advertising profiles. If you choose a sharing or export feature, the selected recipient receives the information you choose to share; check the content before sharing.
7 International processing
LoftSync’s application database and photographs are stored in Belgium. This storage location is separate from processing by external services such as Google Gemini, payment providers and notification infrastructure. Where these external services process information outside the European Economic Area, this may involve AI analysis, support access or safety logging. Your location does not determine where every processing operation occurs.
For transfers subject to GDPR, we use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses with supplementary measures where necessary. Where another applicable privacy law requires different safeguards, we apply those requirements too. The provider information identifies the actual destinations and transfer mechanism for each relevant service. You can request a copy of, or further information about, the applicable safeguards from [email protected].
8 Retention and account deletion
We retain account and loft content while your account is active and needed to provide the service. A subscription ending does not automatically mean your account or content is deleted. Access and inactive-account arrangements are explained at LoftSync Access After Trial or Subscription Ends.
When you delete your LoftSync account through the LoftSync Account Console, your account is deleted and your associated pigeon, pedigree, breeding and loft data is anonymised so that it is no longer linked to you or your deleted account.
If you contact us directly and request deletion of all your data, we delete your LoftSync account and associated user content, including photographs and pigeon, pedigree, breeding and loft records. We do not keep your private content merely because it concerns animals rather than people. We request applicable deletion from our processors as part of this process. Anonymised data relating to pigeons rings and lineage relationships between pigeons may be retained.
Limited information may be retained where necessary for legal, accounting or tax requirements, security, fraud prevention or legal claims. Such information is restricted to the relevant purpose, not kept indefinitely, and is not used to restore your account. Truly anonymous aggregate statistics may be retained only if they cannot reasonably identify you or reconstruct your private content.
Within 21 days of your confirmed deletion request, we delete LoftSync data from operational storage and remove or expire remaining copies in our protected backups, subject to the limited retention exceptions above. This 21-day period applies to storage and backups under BRICON’s control. Google’s separate retention described in section 4 is not shortened by deleting your LoftSync account. Backup copies are not used for ordinary service access. If restored for disaster recovery, deletion instructions are reapplied.
Records required for transactions reported under the EU VAT One Stop Shop are retained for 10 years from the end of the year of the transaction. This includes the necessary transaction details and evidence of the customer’s country. Other billing and tax records are retained for the period required by applicable accounting and tax law. Support records are normally retained only for as long as reasonably necessary to resolve the request and maintain an appropriate record of the support provided. Security and diagnostic logs are retained only for as long as reasonably necessary for security, fraud prevention, fault diagnosis and service operation, unless a longer period is required for investigation or by law. AI submissions and provider copies follow the specific retention information in section 4. We shorten retention when its purpose no longer applies, unless the law requires preservation.
You can start deletion in the app’s account settings or at LoftSync Account Console. Deletion applies only to LoftSync and its separate data. Your BRICON sign-in account and accounts and data for other BRICON services remain unaffected. Cancellation and refunds are explained separately at Cancellation and Withdrawal.
9 Your rights and how to exercise them
Depending on applicable law, you can request access to your personal data, correction, deletion, restriction, a portable copy where applicable, and information about recipients or transfers. You can object to processing based on legitimate interests and withdraw consent at any time. Mandatory additional rights under your local law remain available.
Email [email protected] with “LoftSync privacy request”, or use available account controls. No account is needed to contact us. We may request proportionate information to verify identity; do not send identity documents unless requested and necessary. We normally respond to GDPR rights requests within one month. If a lawful extension is needed, we explain why within the initial period. We comply with any shorter deadline required by applicable law.
Requests are normally free. Where a lawful exception or refusal applies, we explain it and the available complaint route. Deletion, portability and access may be subject to legal exceptions and protection of other people’s rights. We will not penalize you for exercising a protected privacy right.
You can complain to the Belgian Data Protection Authority at https://www.dataprotectionauthority.be/citizen/actions/lodge-a-complaint or another competent authority, including one in your country of residence where applicable. You do not have to contact us before complaining.
10 Security and policy changes
We use technical and organizational measures appropriate to the risks, including access controls and safeguards for transfers and storage. No system can guarantee absolute security. If a breach requires notice to you or an authority, we provide it as required by law.
LoftSync is available only to people aged 18 or older. Individuals under 18 are not permitted to use the app. If we learn that an under-18 user has created an account, we take appropriate steps to restrict access and delete the associated personal data, subject to applicable legal retention requirements. Contact [email protected] if you believe an under-18 user has provided personal data or to exercise applicable parental rights. Pedigree records submitted by an adult may contain information about other people, including minors; the privacy protections in this policy also apply to their personal data.
We update this policy to reflect processing or legal changes. Material changes are explained before they take effect where required, and new consent is obtained when necessary. The current policy is available in the app and at Privacy Policy. A policy update does not authorize incompatible new uses of previously collected information.