Privacy policy

01Who we are

Lookback is operated by GAD Systems Inc, the owner of Lookback AI and the controller of the personal data described here. Contact: hello@lookbackai.app.

02What we collect

• Account. Your email address, your name if your sign-in method provides one, and the sign-in method you used. Sign-in is handled by our authentication provider; we never see a password.
• What you make. The places, years and times of day you choose, the pictures and films generated for you, the questions you ask and the answers, and your credit ledger (grants, purchases, spends and refunds).
• Payments. Our payment processor handles the transaction. We keep the payment reference, the amount and currency, and the pack you bought. Card details never reach our servers.
• Technical. IP address, browser and device information, timestamps and request logs, used for security, rate limiting and troubleshooting.

03How we use it

To sign you in and keep your library; to generate the pictures, notes, films and answers you ask for; to account for credits and payments; to answer support requests; to keep the service secure and prevent abuse; and to meet legal obligations such as tax records. We do not use your data for advertising and we do not sell it.

04Who processes it

We use a small number of service providers, each for one job, each under a written contract that limits them to acting on our instructions:

• Hosting, storage and databases. Run the application and hold your account, looks, films, questions and ledger, with generated pictures and films in private storage.
• Authentication. Signs you in and issues the session cookie that keeps you signed in.
• Payments. Processes card and wallet payments and receives your email address for receipts.
• AI generation. Receives the place name and coordinates, the year, the time of day, the generated picture and your questions, in order to produce pictures, notes, films and answers.
• Maps and place search. Receives the text you type into place search and the coordinates of a pin you drop. When the full map is open, your browser requests map tiles directly from the map provider, which reveals your IP address to it.
• Published reference works. Receive the place name and year when a note is read, so the note can cite real sources.

Some of these providers process data outside your country. Where required, transfers rely on standard contractual safeguards. We will name any provider on request.

05How long we keep it

Your account and library stay for as long as you have an account. Looks and films you delete are removed from storage promptly, and their thumbnails and questions with them. Ledger and payment records are kept as long as accounting and tax rules require. Request logs are kept for a short period for security and are then discarded.

06Your choices and rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to a supervisory authority. To export or delete your data, or to close your account, write to hello@lookbackai.app; the buttons for this in the account sheet are on their way. You can delete individual looks and films from their pages at any time.

07Cookies and local storage

Lookback uses a session cookie from our authentication provider to keep you signed in, and stores your draft place, year and time of day in your browser so they survive a sign-in or a reload. There are no advertising or cross-site tracking cookies. Our payment processor sets its own cookies on the payment form to prevent fraud.

08Security

Data is encrypted in transit, the pictures and films you make are held in private storage that only your account can read, and access to our systems is restricted and logged. No service is perfectly secure. If you believe you have found a vulnerability, write to security@lookbackai.app. We will acknowledge your report, and we will not pursue researchers who act in good faith and give us reasonable time to fix the issue.

09Children

Lookback is not directed at children and is not for anyone under 18, or under the age of majority where they live. If you believe a child has created an account, contact us and we will remove it.

10Changes

When this policy changes, the date at the top changes with it, and material changes are announced in the product before they take effect.

11Contact

Privacy questions and requests: hello@lookbackai.app. Security reports: security@lookbackai.app.