Privacy Policy

Who we are

LOOKD operates the LOOKD app and lookd.app. We are the controller of the personal data described here, and we are based in Canada.

You can reach us about anything in this document at support@lookd.app. For anything urgent about safety, safety@lookd.app.

What we collect, and why

Your account. An email address or phone number, used to sign you in; a handle; and your date of birth, which we ask for once and store so that we can keep the service age-appropriate. Your date of birth cannot be changed afterwards — if it is wrong, write to us.

Your profile. Whatever you choose to put on it: a display name, a short biography, a city, pronouns, links, and a profile picture. All of this is public.

What you post. Photographs and video you take or upload, any voiceover you record, captions, the pieces you tag, and the collections you file them into. A Look you publish is public; a private Look is visible only to you and to anybody you share it with.

Where you are. When you post a Look and allow it, your phone or browser gives us an approximate position. We name the city it is in, file the Look under that city, and keep only the city, never the position. That city is shown on the Look and decides which city's Most Liked it counts in. You can post without a place, and take a Look's place off later. Separately, we note the country and city your internet connection appears to come from, to show advertising meant for your country; that is private to you and never shown.

What you do here. Which Looks you view, save and like, whose closets you visit, who you follow, what you search for, and which links you tap through to a shop. We use this to decide what to show you and to measure whether the product works.

Buying and selling. If you sell, we collect what is needed to pay you and to meet tax obligations. If you buy, we collect a delivery address and order history. We never see or store your full card details — those go directly to Stripe.

Messages. The direct messages you send and receive, including the pictures in them.

Your device. A push notification token if you allow notifications, and basic technical information about the app and device needed to deliver and debug the service.

Your messages are private from other people, not from us

Direct messages on LOOKD are not end-to-end encrypted. We can read them, and in narrow circumstances we do: when somebody reports a message, a moderator reads what was reported so there is something to decide.

We say this plainly because the alternative — implying a privacy we do not provide — is the more harmful choice. If you need a conversation nobody but the recipient can read, LOOKD is not where to have it.

We do not read messages to target advertising, and we do not sell them.

Advertising

LOOKD shows advertising. What you are shown is chosen from what you do here — the kinds of clothing you look at, save and search for.

Advertisers never receive your identity. They choose broad interests and places; we decide which people match, and they are told how their campaign performed, never who saw it.

We do not build or offer targeting on anything sensitive — not health, not sexuality, not religion, not political opinion, not ethnicity. Advertisers cannot ask for those categories because they do not exist in the system.

Readers under 18 are excluded from age-restricted advertising, and that decision is made on our servers from the date of birth on your account rather than from anything the app reports about itself.

Who else sees your data

We do not sell your personal data. We share it only with the companies that run parts of the service for us, and only what each one needs:

Supabase — our database, file storage and sign-in, hosted in the cloud. Effectively everything described above is stored there.

Vercel — hosts lookd.app, and measures how the website is used: which pages are visited and which features are used, where visitors arrive from, and how fast pages load. It sets no cookies, and the visitor count it keeps is anonymous and resets every day, so it cannot follow you from one day, or one site, to the next.

Stripe — payments, seller payouts and sales tax. If you buy or sell, Stripe receives what a payment needs, including your card details, which come from you to them without passing through us.

Easyship and Envia — shipping. If you buy or sell a physical item, the delivery and return addresses are sent to the carrier that will actually carry the parcel.

Resend — transactional email.

Apple and Google — push notification delivery, if you turn notifications on.

We also disclose data where the law requires it, and we report child sexual abuse material to the authorities described below. That obligation is not one we can waive.

Child safety

LOOKD is for people aged 13 and over.

Where we become aware of material that sexually exploits a child, we report it to the National Center for Missing & Exploited Children in the United States and to Cybertip.ca in Canada, and we preserve the material and the account records for at least one year, as those laws require. We do this whether or not the account holder has asked us to delete anything.

Our child-safety point of contact is safety@lookd.app.

How long we keep things

Your account and what is on it: until you delete it.

Raw behavioural events used for recommendations: 90 days, after which they are deleted automatically.

Orders and payment records: kept after an account is deleted, because tax and accounting law requires it. The personal details in them are reduced to what the law needs — the name and address are removed and only the country is kept.

Moderation records: kept after the content is gone. A record of a decision that disappears with the thing it was about is not a record.

Child-safety material: preserved for at least one year from the report, as described above.

What you can do

Get a copy of everything. Settings → Download my data gives you a single file containing everything your account owns.

Delete your account. Settings → Delete account removes your account and your content. Some things survive, and we would rather tell you than surprise you: order records kept for tax, moderation records, and anything under a legal preservation order. We will refuse to delete an account with money still in flight — a sale that has not been paid out or a refund that has not been made — and tell you why, so nobody loses money to a deletion.

Correct your profile at any time, from your profile.

Object, restrict or complain. Write to us at support@lookd.app. If you are in the EU or UK you also have the right to complain to your data protection authority.

None of these rights depends on where you live. We give them to everybody because running two standards is how the worse one becomes the real one.

Security

Access to your data is enforced by the database itself rather than by the app asking politely, so a modified client cannot read what it is not entitled to.

No system is perfect. If we discover a breach affecting your personal data we will tell you and the relevant authority as the law requires.

Changes

This policy was last updated on 2026-10-13. If we change it materially we will tell you in the app before the change takes effect.