Privacy policy

What we collect

• Account details: your name, email address and password. We never store the password itself, only a salted scrypt hash that can’t be turned back into it. If you sign in with Google, Google gives us your name, email address and a link to your profile picture.
• Your closet: the items you add (name, category, colour, size, brand, notes), the photos you upload, and when you take items out and return them.
• Photos: resized on your device before upload. Your device also removes embedded details such as location and camera model (EXIF) before a photo is sent to us.
• Sign-in sessions: when you sign in, we store a session together with your IP address and browser type, so you stay signed in and we can spot misuse.
• Technical logs: our hosting provider records requests (time, address requested, IP address, errors) for up to 7 days so we can fix problems.
• On your device: your language choice is saved in your browser. The app stores its own files for a faster start, but never your items or photos.

We don’t collect payment details, contacts or your precise location, and LookLab has no advertising or analytics trackers.

How we use it

• To run LookLab for you: keep your closet, show your photos only to you, and return items to your closet after 24 hours.
• To keep your account safe: sign-in, email confirmation, password resets and bot protection.
• To send service emails: confirming your email, resetting your password, or telling you that someone tried to sign up with your address. We don’t send marketing emails.
• To find and fix bugs and keep the service running.

We use your data because you asked us to provide LookLab and agreed to this policy when you created your account. We don’t sell or rent your data, and we don’t use your closet to show you ads.

Who we share it with

Only with the providers that run LookLab for us, and only what each of them needs:

• Cloudflare: hosting, database, photo storage and bot protection (Turnstile). Turnstile looks at signals such as your IP address and browser details to tell people from bots.
• Resend: delivering account emails. It receives your email address and the content of those emails.
• Google: only if you choose to sign in with Google. Google’s own privacy policy covers your Google account.

We may also disclose data when the law requires it. We will never give or sell your data to anyone else.

Where your data is stored

LookLab runs on Cloudflare’s global network. Your data may be stored and processed in countries other than the one you live in, including outside Vietnam. Our providers protect it under their own contracts and security programmes.

How long we keep it

• Your account and closet: for as long as your account exists.
• After you delete your account: your account, items and history are removed from our database straight away, and your photos are removed from storage within about 15 minutes. Our database provider keeps rolling backups for recovery, so copies can remain there for up to 30 days before they expire.
• Items and photos you delete are removed straight away, with the same backup window of up to 30 days.
• Request logs: up to 7 days. Email delivery records: kept by Resend for a limited time.

Your choices and rights

• See and download your data: Account → Download my data gives you a file with your account, items and usage history. Photos aren’t included yet; you can open and save each one in the app.
• Correct it: edit your items at any time. To change your name or email address, write to us.
• Delete it: delete single items or photos in the app, or your whole account under Account → Delete account.
• Withdraw consent or object: you can stop at any time by deleting your account, or write to us about a specific use.

For any request, write to support@looklab.space. We’ll answer as soon as we can and within the time the law requires. You can also complain to the personal data protection authority where you live; in Vietnam, that authority sits under the Ministry of Public Security.

Security

Everything travels over HTTPS. Passwords are hashed, every account can reach only its own data, and photos are served only to their owner. Email confirmation and bot protection make fake sign-ups harder. No system is perfectly secure: if a breach affects your data, we will tell you and the authorities as the law requires.

Children

LookLab isn’t meant for children under 16. If you are under 16, use it only with a parent’s or guardian’s permission. If you believe a child has given us data without that permission, write to us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data in a significant way, we will tell you by email or in the app before it applies.

Contact

Questions or requests about your data: support@looklab.space.