Privacy Policy

How The Look collects, uses, and protects your information.

Last updated: May 2026

The Look (“the App,” “we,” “us”) is a couture makeup and hair try-on application available for iPhone and iPad. We take your privacy seriously and have designed the App to collect only the minimum data necessary to provide the service. This policy explains what we collect, why, and what control you have.

1. What we collect

Photos and face analysis data

When you take or import a photo to use the try-on or colour-analysis features, the photo is processed locally on your device and also sent to Google's API. Photos are not retained by us after processing. Local on-device caches may persist for performance but can be cleared by uninstalling the App.

Anonymous device identifier

The App generates a random UUID stored only in your device's Keychain on first launch. This identifier is used to track your subscription entitlements and weekly generation count on our backend. It is not linked to your name, email, or any personal information.

Subscription receipt

When you purchase a subscription via Apple's StoreKit, the App receives a cryptographically-signed receipt (JWS) from Apple. We send this receipt to our backend to verify your subscription tier and apply the correct usage allowance.

Usage metadata

We log generation counts (per user-UUID, per week) and aggregate metrics (e.g. paywall view counts) to operate the service and understand usage patterns. We do not log the content of your generations or any prompts.

Standard device data

Apple may collect crash reports and analytics data subject to your iOS settings (Settings → Privacy & Security → Analytics & Improvements). We do not collect IP addresses, device serial numbers, or advertising identifiers.

2. How we use the data

• To generate your try-on images. Photos are sent to image-processing partner for rendering, then discarded.
• To enforce your subscription tier. The anonymous UUID let our backend confirm you're entitled to a generation before each request.
• To improve the service. Aggregate, non-identifying metrics help us prioritise improvements.

3. Third parties we share data with

Image-processing partner

Photos are sent to Google's API for image processing. Google's privacy policy governs its handling of API requests:

• Google Privacy Policy

Apple

Subscription purchases are handled by Apple. Apple's privacy practices govern that flow — see the Apple Privacy Policy. We never see your Apple ID, billing details, or payment method.

Cloudflare

Our backend infrastructure runs on Cloudflare Workers and Cloudflare KV. Cloudflare may process request data as a service provider. See the Cloudflare Privacy Policy.

No advertisers, no data brokers

We do not share, sell, or rent your data to advertisers, data brokers, or any other commercial third party.

4. Data retention

• Photos: not retained after processing.
• Banned-account records: retained for one year (so banned accounts cannot evade the suspension by waiting).
• Aggregate metrics: retained indefinitely in non-identifying form (e.g. “total generations this month”).

5. Your rights

Access and deletion

Because we do not collect your name, email, or any personal identifier, we cannot identify your data based on personal information. To delete all data associated with your installation: uninstall the App. The anonymous UUID + usage record will expire automatically within 14 days. To request immediate deletion, email us at support@thelookstudio.app with the device-identifier shown in Settings → About.

GDPR (European Economic Area, UK)

If you're in the EEA or UK, you have rights under GDPR including the right to access, rectify, or erase data we hold about you, and to object to or restrict processing. To exercise these rights, contact support@thelookstudio.app. Our legal basis for processing is performance of the subscription contract you've entered into and our legitimate interest in operating and securing the service.

CCPA (California)

California residents have the right to know what personal information is collected, request deletion, and opt out of any “sale” of personal information. We do not sell personal information. To exercise your other rights, contact support@thelookstudio.app.

6. Children's privacy

The Look is not directed at children under 13 (or under 16 in relevant jurisdictions). We do not knowingly collect data from children. If we learn that a child has used the App, we will delete the associated record. Parents who believe their child has used the App may contact us at support@thelookstudio.app.

7. Security

All data transmitted between the App and our backend is encrypted in transit (TLS). We do not store passwords or any payment information.

8. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, the law, or our service. Material changes will be indicated by an updated “Last updated” date and, where appropriate, by an in-app notice. Continued use of the App after such changes constitutes acceptance.

9. Contact

Questions, requests, or concerns? Reach us at support@thelookstudio.app.