Lookit ("we", "us", or "our") operates a personal wardrobe and AI stylist app. We are committed to protecting your personal data in compliance with applicable privacy laws, including the Israeli Privacy Protection Law 5741-1981 (including Amendment 13), the EU General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act (CCPA).
• Profile details: full name, email address, gender, age (stored as a birth year) and country
• Style preferences: sizes, fit, favourite colours, occasions, climate, budget and favourite brands
• Photos of your clothes that you upload to your wardrobe, your saved looks, and which outfits and items you logged as worn (“What I wore”)
• Your conversations with the AI stylist, including photos you send in the chat
• Stylist notes: short notes the stylist keeps from your chats so it can remember you, such as an upcoming event, a trip or something you bought
• What you like, save, dislike or correct, and stylist replies you report
• Technical details: your phone's time zone (so the stylist knows your local time), how many messages and photos you used today (for the daily limits), and which days you opened the app (counted only in our own database, to see how many people come back; never shared, and deleted after 400 days)
• Your city, if you add it in Style Preferences (optional): used to get the weather forecast for the stylist
• Consent record: when you sign up, we save the date, the version of the policy you agreed to and the IP address the sign-up came from, as proof of your consent
• Notifications: if you allow them, your phone's notification token, platform (iOS/Android) and language, so we can send you a reminder such as "How was the wedding?" the day after an event. You can turn them off at any time in your phone's settings; the token is deleted when you log out or delete your account
• Sign in with Apple or Google: if you choose it, we receive from Apple or Google an account ID, your email address (with Apple this may be a private relay address that forwards to you) and, the first time, your name. We never see your Apple or Google password
We don't use GPS location. Please don't share health, religious, political or other sensitive details in the chat; the app doesn't need them.
We process your personal data based on your explicit consent (Article 6(1)(a) and Article 9(2)(a) GDPR). You provide this consent when you check the consent boxes during registration.
You may withdraw your consent at any time by deleting your account. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Lookit uses artificial intelligence to give you personal styling:
• Your clothing photos are sent to OpenAI to recognise the item, its colour and brand.
• Your chat messages, the photos you send in the chat, your profile, your wardrobe list, your style preferences, your city and its weather forecast, and the stylist's notes about you are sent to OpenAI so the stylist can answer you personally.
• After a chat, OpenAI is also used to update the stylist's notes and to learn your taste from what you like and dislike.
The AI stylist is software, not a person, and it can make mistakes. This analysis is used only to suggest outfits and products; it has no legal or similarly significant effect on you. You can object to it at any time by deleting your account.
We use your data only to:
• Sort your clothing items by category, colour and brand
• Answer you in the AI stylist chat and remember what matters to you between chats
• Suggest outfits and find products in stores that match your style and what your wardrobe is missing
• Improve the suggestions based on your feedback
• Keep the service fair and affordable (daily limits) and fix problems
We do NOT use your data for advertising, marketing to third parties, or any purpose beyond operating the service described above.
We share data only with the following service providers, and only to operate the app:
• OpenAI (USA) — the AI that analyses photos and powers the stylist chat. OpenAI does not use data sent through its API to train its models.
• Cloudinary (USA) — stores your clothing and chat photos.
• Render (USA) — runs our server.
• Neon (USA) — hosts our database.
• GitHub (USA) — stores an encrypted backup of our database made every night; each backup is kept for 30 days.
• Serper (Google search results) — receives product search terms such as "beige wide-leg trousers", without your name or email.
• Brevo (EU) — sends the emails with your email-verification and password-reset codes to your email address.
• Sentry (USA) — receives technical error reports so we can fix bugs.
• wttr.in — receives only a city name (the city in your Style Preferences, or your country's main city if you didn't add one), to get the weather forecast. It doesn't receive your name or email.
• Google Fonts (USA) — the app downloads its fonts from Google's servers, which see your device's IP address (as with any download). It receives no other data from the app.
• Google Firebase Cloud Messaging and Apple Push Notification service (USA) — deliver notifications to your phone; they receive the notification token and the notification text.
• Apple and Google sign-in (USA) — only if you choose to sign in with them: they confirm who you are and tell us your account ID and email. We don't send them your Lookit data.
We do not sell your personal data to any third party.
Do Not Sell My Personal Information (CCPA): We do not sell, rent, or trade your personal information to any third party for monetary or other valuable consideration.
Our servers and most of the services listed above are located outside Israel and the European Economic Area (EEA), mainly in the United States.
When your data is transferred abroad, we rely on our providers' data processing terms, which include Standard Contractual Clauses (SCCs) approved by the European Commission where they apply.
By using Lookit and giving your consent, you acknowledge that your data may be transferred to and processed in the United States.
Your data is kept while your account is active:
• Chat history and the stylist's notes are kept until you clear the chat (clearing the chat also deletes the notes) or delete your account.
• When you delete your account, your profile, wardrobe, chats, notes, preferences and reports are deleted from our database immediately, and your photos (wardrobe photos and photos you sent in the chat) are deleted from Cloudinary within 30 days.
• If you sign up with an email address and never confirm it, the account is deleted automatically after 7 days.
• Encrypted backups of the database are kept for 30 days, so deleted data disappears from them within 30 days.
• OpenAI may keep API data for up to 30 days to detect abuse, and then deletes it; it does not use it for training.
• We keep a record of the consent you gave at registration (name, email, what you agreed to and when; not your IP address, which is deleted with your account) even after deletion, as proof required by law.
We do not keep your data beyond what is needed to provide the service.
Depending on your location, you have the following rights:
🇪🇺 GDPR (EU/UK) rights:
• Right of access — view all your data (available in your profile)
• Right to rectification — correct inaccurate data (editable in your profile)
• Right to erasure — delete your account and all data (available in profile settings)
• Right to data portability — export all your data in a machine-readable format (contact us)
• Right to object to profiling — delete your account to stop all processing
• Right to withdraw consent — delete your account at any time
🇺🇸 CCPA (California) rights:
• Right to know what personal information is collected and how it is used
• Right to deletion (available in profile settings)
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination — we will not deny service for exercising privacy rights
🇮🇱 Israeli Privacy Law rights:
• Right to access and correct your information held in our database
• Right to request deletion
Under GDPR Article 20, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON). To request a full export of your data, contact us at: support@lookit-app.com
We will respond within 30 days.
Your password is stored as a one-way cryptographic hash (bcrypt). Authentication tokens are stored securely on your device using encrypted storage. All communication between the app and our servers uses HTTPS encryption.
Lookit is for adults aged 18 and over. We ask for your age at registration and do not allow younger users. If we learn that a user is under 18, we will delete the account.
In accordance with the Israeli Privacy Protection Law and its regulations, we operate a personal data database containing user profiles, clothing images, and style preferences. This database is used solely to provide the Lookit service.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app. Continued use after changes are posted constitutes acceptance of the revised policy.
For any privacy-related requests (access, correction, deletion, data export, or complaints):
Email: support@lookit-app.com
EU/UK users: if you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., your national Data Protection Authority).