Privacy policy

01Who we are

Lookback is operated by GAD Systems Inc, the owner of Lookback AI and the controller of the personal data described here. Contact: hello@lookbackai.app.

02What we collect

• Account. Your email address, your name if your sign-in method provides one, and the sign-in method you used. Sign-in is handled by our authentication provider; we never see a password.
• What you make. The places, years and times of day you choose, the pictures and films generated for you, the questions you ask and the answers, and your credit ledger (grants, purchases, spends and refunds).
• Payments. On the website, our payment processor handles the transaction; in the iPhone and iPad app, Apple does, through the App Store. We keep the payment or transaction reference, the amount and currency where we receive them, and the pack you bought. Card details never reach our servers.
• Technical. IP address, browser and device information, timestamps and request logs, used for security, rate limiting and troubleshooting.
• The iPhone and iPad app. When you turn on journey reminders, the push notification token for your device, a random identifier for the installation, and your device’s time zone, used only to send reminders at a sensible hour and to tell you when a film is ready. Turning reminders off stops them, and deleting your account removes these records. The app does not read your contacts or photo library; it only saves pictures and films you choose. If you choose Around you, the app asks for location access and uses your device’s geocoder to name a nearby place. Trip arrivals while the app is closed require a separate background-location choice. Personal trip settings, hometown, a recent approximate place, and discovery-reminder history are stored on your device. The recent place is used for up to six hours; reminder history is kept for up to eight days to avoid repeats. These settings are cleared when you sign out. Turning off a trip stops its invitations and background updates. Choosing Look back sends the selected place and year through the normal generation flow.
• Usage. Which pages are opened, the page a visit arrived from, and the country, browser and device it came from, counted so we can see how the service is used. It is measured without cookies, is not tied to your account, and cannot follow you to other sites.
• Session recordings. How the interface is used during a visit: the pages opened, what was clicked, tapped and scrolled, the requests the app made and any errors, kept so a visit can be replayed when something went wrong or got in the way. Anything typed is masked before it leaves your browser, card details are never on our pages to begin with, and a recording made while you are signed in is filed under your account.

03How we use it

To sign you in and keep your library; to generate the pictures, notes, films and answers you ask for; to account for credits and payments; to answer support requests; to keep the service secure and prevent abuse; and to meet legal obligations such as tax records. We do not use your data for advertising and we do not sell it.

04Who processes it

We use a small number of service providers, each for one job, each under a written contract that limits them to acting on our instructions:

• Hosting, storage and databases. Run the application and hold your account, looks, films, questions and ledger, with generated pictures and films in private storage.
• Authentication. Signs you in and issues the session cookie that keeps you signed in.
• Payments. Processes card and wallet payments and receives your email address for receipts.
• AI generation. Receives the place name and coordinates, the year, the time of day, the generated picture and your questions, in order to produce pictures, notes, films and answers.
• Maps and place search. Receives the text you type into place search and the coordinates of a pin you drop. When the full map is open, your browser requests map tiles directly from the map provider, which reveals your IP address to it.
• Published reference works. Receive the place name and year when a note is read, so the note can cite real sources.
• Traffic measurement. Receives the page opened, the page it was opened from, and the browser, device and country it was opened on, in order to count visits and page views. It sets no cookies, receives nothing about your account, and builds no profile of you.
• Session recording. Receives the recordings described above and, while you are signed in, your account id, email address and name, so that a visit you write to us about can be found. It sets its own first-party cookies to recognise the same visit across tabs and reloads, and keeps recordings for a short period.

Some of these providers process data outside your country. Where required, transfers rely on standard contractual safeguards. We will name any provider on request.

05How long we keep it

Your account and library stay for as long as you have an account. An unsigned first journey is available for seven days, after which its browser-specific journey records are scheduled for deletion. Curated first journeys use shared, pre-generated media, which remains available to other visitors. Signing in to save transfers it to your account. A small record of the free journey remains to prevent repeated claims. Looks and films you generate and then delete are removed from storage promptly, and their thumbnails and questions with them. Deleting a saved curated journey removes it from your library without deleting the shared media. Ledger and payment records are kept as long as accounting and tax rules require. Request logs are kept for a short period for security and are then discarded. Session recordings are kept for a short period, then discarded.

06Your choices and rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to a supervisory authority. You can download everything or delete your account yourself: on the website from your account, and in the app under You, then Privacy & data. Or write to hello@lookbackai.app and we will do it for you. You can delete individual looks and films from their pages at any time.

07Cookies and local storage

Lookback uses a session cookie from our authentication provider to keep you signed in, an essential first-party cookie to keep your free journey available in the same browser and recognise whether it has been used, and stores your draft place, year and time of day in your browser so they survive a sign-in or a reload. The free-journey cookie lasts up to one year; our database stores a hash of its random identifier. Your unfinished question and selected detail are kept in the current browser tab through sign-in. There are no advertising or cross-site tracking cookies, and the traffic measurement described above sets no cookie at all. The session-recording service sets first-party cookies that tie the tabs of one visit together; they identify the visit, not you across other sites. Our payment processor sets its own cookies on the payment form to prevent fraud.

08Security

Data is encrypted in transit, the pictures and films you make are held in private storage accessible through your account or, for an unsaved first journey, its browser cookie, and access to our systems is restricted and logged. No service is perfectly secure. If you believe you have found a vulnerability, write to security@lookbackai.app. We will acknowledge your report, and we will not pursue researchers who act in good faith and give us reasonable time to fix the issue.

09Children

Lookback is not directed at children and is not for anyone under 18, or under the age of majority where they live. If you believe a child has created an account, contact us and we will remove it.

10Changes

When this policy changes, the date at the top changes with it, and material changes are announced in the product before they take effect.

11Contact

Privacy questions and requests: hello@lookbackai.app. Security reports: security@lookbackai.app.