Privacy Policy

1. Who we are

The controller of your personal data is Arijus Tamšauskas, trading as lookperfectly.com ("we", "us"), registered in Lithuania as an individual activity (individuali veikla) under certificate no. 1492363, at Apkasų g. 10C, Vilnius, Lithuania. This policy explains how we collect and use your information when you use our website and services. For any privacy question or request, including any request under the rights listed below, contact support@lookperfectly.com.

2. What we collect

• Assessment answers — your responses to the quiz (appearance, habits, lifestyle, and confidence questions).
• Photos — if you complete the face scan, two photos (front-facing and side profile). Photos are retained after analysis so we can generate, re-generate, and display your report.
• Generated images — if you use the hair and beard try-on, we create pictures of you wearing a style you picked, and a “best version” comparison. Each one is drawn from the front-facing scan photo you already gave us. They are new images of your face rather than photographs of you, and we keep them so the try-on screen has something to show you.
• Email address — collected before your results and used for your account, sign-in links, and service emails.
• Payment data — payments are processed by Stripe. We never receive or store your full card number; we keep subscription status and billing references only.
• Usage data — analytics events (pages viewed, funnel steps completed) and technical data such as browser type, collected to improve the product. By default these are recorded anonymously: we set no analytics cookie and store nothing extra on your device, and events are labelled only with the random assessment id your browser already holds. See section 4a.

3. How we use your information

• To generate your personalized report and improvement plan.
• To analyze your photos and answers using artificial intelligence: your photos and answers are processed by Google's Gemini AI service to produce your report.
• To generate try-on images, when you ask for one: your scan photo and the style you chose are sent to the same Google Gemini service, which returns a new picture of you wearing it. We only do this on a generation you start yourself.
• To manage your account, subscription, and payments.
• To send service emails (sign-in links, purchase confirmations, and messages about your report).
• To measure and improve how the service works.

We do not sell your personal information, and we do not share your photos or report for advertising purposes.

3a. Legal bases

Under the GDPR we rely on the following bases:

• Performance of a contract (Art. 6(1)(b)) — your assessment answers, photos, report, improvement plan, account and payments. This is the core of what you bought; without it we cannot provide the service.
• Consent (Art. 6(1)(a)) — analytics beyond the anonymous default, and, separately and explicitly under Art. 9(2)(a), the ancestry estimate. You can withdraw either at any time, which does not affect processing already carried out.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure and preventing abuse, and sending a single reminder if you leave part-way through the assessment after giving us your email. You can object to either; see section 7.
• Legal obligation (Art. 6(1)(c)) — retaining payment and tax records for the period the law requires.

3b. Automated analysis and profiling

Your report is produced automatically. An AI model examines your photos and answers and returns scores and written observations about your appearance, and we derive style and personality descriptions from your answers using fixed rules rather than a model. This is profiling as the GDPR uses the term, and we would rather say so than let it look like human review.

The output is informational and has no legal or similarly significant effect on you: it does not determine pricing, eligibility for anything, or any decision beyond what appears in your own report. You can ask us to explain how a result was produced, disagree with it, or delete it entirely.

4. Service providers

We rely on a small set of processors to run the service: Stripe (payments), Supabase (database, authentication, and photo and image storage, hosted in the EU), Google (AI analysis and image generation), Resend (email delivery), PostHog (analytics), and our hosting provider. Each receives only what it needs to perform its function.

Transfers outside the EEA. Your account, answers, report and photos are stored in the European Union, and so are the try-on images. The AI work, however, is performed by Google: your photos and answers are sent to Google's API to produce your report, and your scan photo is sent again each time you ask for a try-on image, which may involve processing outside the EEA, including in the United States. That transfer relies on the safeguards in Google's data processing terms, which incorporate the European Commission's Standard Contractual Clauses, together with Google's certification under the EU–US Data Privacy Framework. You can ask us for details of these safeguards at the address in section 1. Our other processors store and process your data within the EEA.

4a. Analytics and cookies

We use PostHog, hosted in the EU, to understand how people move through the site. Until you accept analytics it runs in a cookieless, anonymous mode: no analytics cookie is written and we store nothing extra on your device for analytics. Events are labelled with the random assessment id your browser already holds to keep your progress, so the steps of one assessment can be read as one journey rather than as strangers; that id identifies an assessment, not a person, and is not connected to your name or address. If you accept, we additionally store a first-party analytics identifier so repeat visits can be recognised, and we attach your email address to your analytics profile once you have entered it. Declining keeps the anonymous mode. Your email address is never sent to analytics unless you accept.

You can change your choice at any time by clearing this site's data in your browser, which removes the stored preference and shows the banner again. The cookies we set to keep you signed in are strictly necessary for the service and are not covered by this choice.

5. Storage and retention

Photos are kept in a private storage bucket that is not publicly accessible and is never served without a short-lived, signed link. How long we keep things, and what decides it:

• Photos, reports, answers and account data — for as long as your account exists. We do not delete these automatically when a subscription ends, because most people come back and we would rather not make you redo the assessment. They go when you delete your account, which you can do yourself at any time.
• Assessments that never became an account — kept in case you come back to finish or pay for one, and removed whenever you ask.
• Payment and tax records — retained for the period tax law requires, currently 10 years, and used for nothing else.
• Generated try-on images — kept in their own private bucket, separate from your scan photos, until you delete them from the try-on screen or delete your account. Deleting one removes the image itself. We keep a small record that the generation happened — which style, and when — because the daily limit is counted from those records, and a delete that gave the slot back would make the limit meaningless. That record does not contain the picture.
• Ancestry estimates — until you delete them, which you can do at any time from the Ancestry screen.

Because we do not expire this data on a timer, the control is yours and it is deliberately easy to reach: delete everything at once, whenever you like, from Settings → Delete my account in the app. That erases your reports, photos, try-on images, routine, coach history and account, and cancels your subscription immediately. You can also email us and we will do it for you within one month. Some quiz progress is kept in your own browser's local storage; you can clear that anytime through your browser settings.

6. Ancestry estimate (special category data)

The ancestry estimate is an optional, separately purchased feature. Estimating someone's likely geographic ancestry is treated as a special category of personal data under Article 9 of the GDPR, so it is handled differently from everything else described above.

• Legal basis — your explicit consent under Article 9(2)(a). We record the exact wording you agreed to and the date you agreed to it. Nothing is analysed before you give that consent, and buying the feature is not consent on its own — you are asked separately afterwards.
• What is analysed — only the front-facing scan photo you have already provided. No new data is collected for this feature.
• What you get — an estimate expressed as broad geographic regions and percentages. It is generated from facial appearance by Google Gemini. It is not a genetic test, is substantially less accurate than one, and should be treated as informational rather than factual. We never infer or record nationality, ethnic group, religion, or any related characteristic.
• Withdrawing consent — you can delete the estimate at any time from the Ancestry screen in your account, without affecting the rest of your account. Deleting it erases the result and the associated consent record. Withdrawal does not affect the lawfulness of processing carried out before it.
• Refunds — because the estimate is generated and delivered immediately, the fee is not refundable once it has been produced, and you are asked to confirm you understand this before payment. If it was never generated, contact us and we will refund it in full.
• Not used for anything else — the estimate is never used for advertising, profiling, pricing, or any automated decision about you, and is never shared with third parties beyond the AI provider that generates it.

7. Your rights

You have the right to access your data, to have it corrected, to have it deleted, to restrict how we process it, to object to processing we carry out on the basis of legitimate interests, and to portability — a copy of the data you gave us in a structured, machine-readable format. Where we rely on your consent you can withdraw it at any time, which does not affect processing already carried out.

The fastest route for deletion is Settings → Delete my account. For anything else, email support@lookperfectly.com from the address you signed up with. If you are in the EU/EEA or UK, you also have the rights provided by the GDPR, including the right to lodge a complaint with your supervisory authority.

8. Age requirement

The service is for adults aged 18 and over. The assessment asks for your age before it asks for anything else; if you tell us you are under 18 it stops there, and the answers held in your browser are cleared rather than sent to us. If you believe a younger person has nonetheless provided us personal data, contact us and we will delete it.

9. Changes

We may update this policy from time to time. The date above shows the latest revision; material changes will be highlighted on this page.