Privacy Policy

1. What we collect

When you create an account, we collect your email address and, if you sign in with Google, your Google profile name and profile photo. We store the photos (“looks”) you upload, any captions or descriptions you add, and the boxes you organise them into.

2. How we use your data

We use your data solely to provide the Lookbox service: storing your looks, enabling sharing with people you invite, and sending you transactional notifications (e.g. box invites). We do not sell your data to third parties or use it for advertising.

3. Storage & security

Your photos and account data are stored securely using Supabase (PostgreSQL database and object storage). All data is transmitted over HTTPS. Access to your photos is controlled by signed URLs that expire automatically.

4. Sharing

Photos you add to a shared box are visible to the members of that box. You control who is invited. We do not make your content publicly searchable.

5. Third-party services

We use the following third-party services to operate Lookbox:

• Supabase — database, authentication, and file storage
• Google OAuth — optional sign-in method
• Brevo — transactional email delivery
• Vercel — web hosting
• Apple Push Notification service (APNs) — push notifications on iOS

Each of these providers has their own privacy policy governing their handling of data.

6. Data retention & deletion

Your data is retained for as long as your account is active. You can delete your account and all associated data at any time by contacting us at info@lookbox.app . We will process deletion requests within 30 days.

7. Children

Lookbox is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via the email address on your account.

9. Contact

For any privacy-related questions, contact us at info@lookbox.app .