Privacy

Updated on October 18, 2026

Who holds your data

Lookie Lab operates Lookie Lab and answers for the data described here. For any request about it, write to contact@lookielab.com.

What the app stores

Your profile: name, email, sex (which you may leave blank) and date of birth (optional). The date exists to confirm your age; sex, so the Stylist can suggest looks that make sense and to guide the pose in virtual try-ons.

Your acceptances: the version of the Terms of Use and of this policy you accepted, the language they were shown in, and the date — the record of what was agreed. If you publish to the feed, also the version of the community rules you accepted.

Your garments: each piece's photo and the attributes the AI identified in it — type, color, fabric, formality, season.

Your usage: which outfits you built, which you tried on, and which days you wore each piece. It's what keeps suggestions varied instead of repeating the same combination.

Your body photos, if you upload them. They are the four from the body check-up — your face from the front, both profiles of your face and your full body. They're optional, used only for virtual try-on, and they're the most sensitive data here — how they're handled is in the next section.

Your side of the Inspiration feed: the looks you publish, your profile photo if you add one, who you follow, who follows you, who you blocked, and the likes, saves and try-ons you made from other people's looks. What of this is public is in the “Inspiration feed” section.

What crosses your screen in the feed: which looks appeared and which you opened. It is only used to order “For you” — what you already saw goes down, what fits your taste goes up — and nobody else sees it.

The body photos

They're only sent after you accept their specific terms, in your profile. Acceptance is versioned: if those terms change, the app asks you to accept again instead of assuming the old one still applies.

While you take them, the app follows your face to tell you whether the framing is right. That happens on your phone: no camera frame leaves the device, only the four photos you confirm.

The photos are used to draw your body plate and your try-ons. They are not used to recognize or identify you, and we don't keep measurements or facial features extracted from them.

To direct each try-on like a fashion shoot, an AI model looks at the body photo and reads your hair and the shape of your face (oval, round, square…) to choose the pose and a flattering hairstyle. That reading is used only for that try-on and discarded right after: it stays neither on your profile nor in the server logs.

No AI provider that receives your photos may keep them or train on them: every call requires that only providers that do not retain what they receive may answer it.

They're encrypted before they leave the process that received them, and stored encrypted. Storage is private: no image has a public URL, and every access goes through a short-lived signed URL, issued only after the server confirms the photo is yours.

You can delete them yourself, at any time, without deleting your account.

The Inspiration feed

Inspiration — seeing, liking, saving, following, trying on and publishing — is only for people 18 or older who gave their date of birth and accepted the community rules. Publishing is always your choice, one try-on at a time: nothing leaves private on its own.

What becomes public — to people using Inspiration — when you publish: that try-on's image (which shows your body wearing the look), the look's garments, the caption, your name and profile photo, the date, and how many people liked and saved it. When you follow someone, your name appears in followers and following lists.

One exception: people who have just created an account, of any age, pick their first look to try on from published looks. So your look's image and garments may appear in that choice, with your name; the caption, the likes and your profile do not appear there.

What stays private: the body photo, the body plate, every other try-on, your whole wardrobe beyond the published look's garments, which posts you liked and saved, and your date of birth.

Remix: people who see your look can try the same garments on themselves and publish their own version, shown with your name as the original. If you delete your post, its versions go with it.

Deleting a post is immediate: the try-on becomes private again. Blocking someone makes the two of you stop seeing each other in the feed.

A shared post link opens the app; outside it, the page shows neither the image nor anyone's name.

Moderation

Before going live, every published look — image and caption — and every profile photo is read by an AI model that checks the community rules. What it refuses is not published; what it is unsure about stays “under review” and only goes live after a person on the team looks at it.

A refusal leaves a record with the date, the account and the category (for example, “nudity”) — never the image or the caption.

If you think a refusal was a mistake, write to contact@lookielab.com: a person on the team reviews the decision.

Notifications

If you allow it, the app tells you when someone follows you, or likes, tries on or remixes one of your looks. For that we store the device's notification address and its language; the notice goes through a notification delivery service to Apple or Google, which deliver it. It carries the name of who acted and what happened — never an image.

The app also tells you about your account: credits or a plan the team gave you, this month's try-ons running out or coming back, the end of the free trial. And it sends reminders: a day after signing up with no pieces, pieces ready and no try-on yet, one or two weeks without opening the app — at most one a day and three a week. For that we store when you last used the app and the device's time zone (so nothing arrives at night). Reminders can be turned off in Profile › Preferences; the notices about your account cannot.

The team also writes, now and then, about what is new in the app. Offers and promotions only arrive if you turn on “Offers and promotions” in Profile › Preferences; we keep the date you turned it on, and turning it off there deletes that consent.

You can turn it off at any time in the device settings. Signing out on the device deletes its address.

What leaves here

To catalog a garment, suggest outfits, direct and generate the virtual try-on, and moderate what goes to the feed, the images and data needed are sent to AI models run by contracted providers, through a service that routes each call to the model's provider. They process what they receive only to answer that call, and every call requires that they keep nothing and do not train on it. Virtual try-on only happens when you tap to try something on. For the feed search, the text description of published looks (garments, colours, caption) goes to a model that turns it into numbers; no image goes with it.

To run the app we also use: a server provider, where the app and its database run; cloud storage, which holds the photos (body photos encrypted) and the database backups; an email delivery provider, for sign-up confirmation and password recovery; the notification service described above; and a subscription management service, which receives your account identifier and the purchases made in the store. Each one receives only what its part requires.

All of these providers, including the AI ones, are bound by contract to protect your data to the same standard as this policy and to use it only to provide their service to us — never for their own purposes.

Some of these providers are outside Brazil, so your data may be processed in other countries, always for the purposes described here.

Within the team, only the people who handle support, moderation and security see account data, through the internal dashboard and only for as long as the task needs — for example, to review a report or answer a request from you. The team also follows aggregated usage figures, such as how many try-ons were made in a day.

If you sign in with Google or Apple, we receive from them only your name, your email (with Apple, it may be a forwarding address Apple creates) and an identifier of your account there, which we keep to recognise you the next time. We never receive your password or anything else from your Google or Apple account. When an account created with Apple is deleted, we ask Apple to end the app's access to your Apple ID.

The app uses the Meta SDK (Facebook) to learn whether an install came from one of our ads on Instagram or Facebook. For accounts 18 or older that gave a date of birth, it sends Meta usage events — installing, opening the app, creating the account, adding the body photo, adding garments, generating a try-on, getting suggestions, publishing or sharing a look, opening the plans, buying — along with device identifiers and your account identifier. To recognize who saw the ad, it also sends your email, first name, sex and date of birth, scrambled (hashed) on the device before they leave it. On iPhone, the advertising identifier and this data are only sent if you allow it in the system's tracking prompt; on Android, you can reset or turn off the identifier in the device settings. Purchases and renewals also reach Meta through the subscription management service. Your photos, garments and outfits never go to Meta.

For anyone under 18, or who did not give a date of birth, the app sends Meta neither the events nor this data, and does not ask for tracking permission; purchases on those accounts do not reach Meta either. The install and app opens before signing in are still measured, without knowing whose they are.

Nothing is sold.

If you report an image

Virtual try-on is generated by a model, and models make mistakes. Every image has a “Report this image” option, and what it stores is: which image, the reason you chose, and the text you wrote, if you wrote one. A person reads it. In the feed the same goes for other people's looks and profiles — and a look reported by three people goes off the air until someone reviews it.

It's the only thing here meant to be read by another human, so it's worth being explicit: it only reaches us when you tap the button. And it leaves with the account, like everything else — including what you wrote.

Technical logs

The server logs security events and requests — date, route, outcome, origin address and account identifier. That's what makes it possible to detect an intrusion attempt and answer "what happened to my account?". They don't contain your photos.

The record of each sign-in (when, and from which device) is deleted about five weeks after it was last used; requests for confirmation and password-recovery links, 30 days after they expire.

A report leaves an event in this log: the date, the account, the image and the reason — never the text you wrote. It's what remains after the account is deleted, the same way the record that it was deleted remains.

Delete everything

In the app: Profile → Delete my account. We ask for your password (or, if you sign in with Google or Apple, to sign in there again), and the effect is immediate and final — profile, garments, outfits, history, garment photos and body photo, and in the feed your posts (with their versions), profile photo, who you follow and who follows you. There's no trash bin and no grace period, and the photos leave storage at once: for a full-body photo, keeping one "just in case" wouldn't be a courtesy.

One caveat: the database has daily backups, kept for up to 30 days, which exist only to recover the app from a serious failure. They hold the profiles and the app's records, not the photos. A deleted account leaves them on its own when the last backup made before the deletion expires, and nobody looks at them for anything else.

What survives is the record that an account was deleted on that date, without its data — it's the only trace that it ever existed, and the answer for anyone who asks later.

Your rights

You can ask for access to your data, correction, deletion, a copy to take to another service, who we share it with, a review of a decision made automatically (such as the moderation refusing a post), and withdraw consent for the body photo or for offers. Correcting your profile and deleting your account and photo are in the app itself, with no need to ask anyone. For anything else, write to contact@lookielab.com, and we answer within the time the law sets.

If you are not satisfied with the answer, you can complain to Brazil's data protection authority (ANPD) or to the data protection authority of the country where you live.