Privacy Policy

1) Scope

This Policy explains how Brother AI (“we”, “us”) collects, uses, discloses, and protects information in connection with Lookbook AI’s application and website (the “Service”). By using the Service, you agree to this Policy and our Terms of Service.

2) Data We Collect

2.1 Account & Identity

• Email address; display name (if provided)
• Login method and identifiers from Google, Apple, or Facebook (OAuth)
• App Store/Google Play subscription status metadata (no card numbers are stored by us)

2.2 Usage & Device

• IP address, device type, OS version, app version, language, time zone
• Event logs (sign-in/out, feature usage, rate-limit counters), crash diagnostics, performance metrics

2.3 Images & Content

• Photos you upload, selections/prompts you make, and images generated by the Service for you
• Optional social integrations (e.g., Facebook Pages you explicitly connect for posting)

2.4 Communications

• Support emails, in-app messages, troubleshooting attachments

3) Sources of Data

• You (when creating an account, uploading images, or contacting support)
• Automated collection (through our apps, SDKs, and logs)
• Third parties (e.g., Google, Apple, Facebook for authentication and subscription status as permitted by you/their APIs)

4) How We Use Data (Purposes & Legal Bases)

• Provide the Service (operate core features, generate images, account management) — Contract
• Security & abuse prevention (detect spam, enforce fair-use limits, investigate misuse) — Legitimate Interests
• Improve and maintain (diagnostics, performance, UX research) — Legitimate Interests
• Communications (service updates, support responses) — Legitimate Interests/Consent where required
• Compliance (legal obligations, requests from authorities where lawful) — Legal Obligation

We do not sell personal information. We do not use your uploaded photos or generated images to train models.

5) How We Share Data

We share data only as needed to operate the Service:

• Processors: cloud hosting, storage, authentication, crash/diagnostics, and email services (e.g., Google/Apple/Facebook for sign-in; platform billing).
• Social integrations: if you link Facebook Pages, we may use your granted token to post at your direction.
• Compliance & safety: to lawful authorities or third parties when required by law or to protect users, our platform, or others.
• Business transfers: in a merger, acquisition, or asset sale, subject to appropriate safeguards.

We do not share data for cross-context behavioral advertising.

6) AI Processing & Images

• Your uploads and selections are processed by AI systems to produce try-on results for you.
• Outputs may contain errors or bias and are not medical, legal, or financial advice.
• Model training: We do not use your uploads or generated images to train any models.
• Avoid uploading sensitive data (e.g., biometric identifiers beyond the photos you choose to upload, government IDs).

7) Data Retention & Deletion

• Account & content: retained while your account is active; you may delete uploads and generated images at any time; account deletion removes or anonymizes associated personal data from production systems within a reasonable period.
• Security & operational logs: retained for a limited period (e.g., ~90 days) to detect abuse and ensure reliability.
• Backups: encrypted backups may persist for a short cycle (e.g., up to ~30 days) before purging.
• Legal: we may retain certain records as required by law or to resolve disputes.

To request deletion or export, use in-app controls (if available) or email [email protected].

8) Security

We implement reasonable technical and organizational measures (encryption in transit, access controls, least-privilege) to protect data. No system is 100% secure; you are responsible for maintaining the confidentiality of your credentials.

9) International Data Transfers

We may process and store data on servers located outside your country. Where required (e.g., EEA/UK), we rely on appropriate safeguards such as Standard Contractual Clauses for transfers.

10) Your Rights & Controls

10.1 Access & Control

• Access, correction, deletion, and export of your data
• Objection or restriction to certain processing
• Withdrawal of consent where processing is based on consent

Use in-app settings (where available) or email [email protected]. We may verify your identity before fulfilling requests.

10.2 Region-Specific Notices

• EEA/UK (GDPR): you may lodge a complaint with your local supervisory authority.
• California (CCPA/CPRA): we do not “sell” personal information or “share” it for cross-context behavioral advertising as defined by law. You may exercise right to know, delete, correct, or limit certain uses of sensitive data where applicable.

11) Cookies & Similar Technologies

We use essential cookies/local storage for authentication and session continuity. We may use analytics to understand feature usage and improve stability; you can manage certain preferences via your device or browser settings. Disabling essential cookies may break core functionality.

12) Children’s Privacy

The Service is not intended for children who cannot lawfully consent to data processing in their country without parental authorization. If you are under the age where consent is required, a parent/guardian must consent. If we learn we collected data from a child without the necessary consent, we will take reasonable steps to delete it.

13) Changes to this Policy

We may update this Policy from time to time. If changes materially affect your rights, we will provide reasonable prior notice. Updates are effective upon posting unless stated otherwise.

14) Contact

For questions, requests, or complaints, contact: [email protected]. Governing law and venue are described in our Terms of Service.