Privacy Policy | Lookplan

Effective date: August 29, 2026

Who We Are and Scope

Lookplan is the service operator, contracting party, and controller or responsible organization for the personal data described in this Privacy Policy. Lookplan is based in Singapore and operates lookplan.net.

This Policy applies when you use our website, on-device free scan, paid photo processing, AI-generated previews and reports, account, purchases, subscriptions, support, and security features. It explains what we handle, why we handle it, whom we disclose it to, how long we keep it, and the choices and rights available to you.

Adults and Photo Authorization

Lookplan is only for adults who are at least 18 years old and able to enter into a contract. Do not upload a photo of a minor.

You may upload your own photo or a photo of another adult only when you have that person's lawful and explicit authorization. Before uploading another adult's photo, you must give them access to this Policy and obtain their authorization for the cloud photo processing described here. We ask you to confirm this separately rather than treating it as part of a general terms acceptance.

If an authorized uploader provides your photo, the uploader is the source from which we received it. You may contact us directly to exercise any applicable access or deletion right concerning that photo. If a photo appears to show a minor, we may refuse it without returning an analysis conclusion.

Information We Handle

Depending on how you use Lookplan, we may handle:

Account and contact information, such as your name and email address.
For paid processing, the necessary normalized photo, AI-generated image, report, recommendations, and delivery or processing status.
Consent and acceptance facts, such as the applicable Privacy and Terms versions, processing scope, adult confirmation, photo-authorization confirmation, and time of acceptance.
Product, credit, order, subscription, refund, chargeback, and limited payment-reference facts needed to fulfill and administer a purchase.
Technical and support information reasonably needed for security, fraud prevention, rate limiting, reliability, troubleshooting, and service operation, such as IP address, browser type, request status, and errors.
First-party campaign cookies (lookplan_ft / lookplan_lt) that may store source, medium, and campaign, the landing path, the referring site's hostname, and an optional Google click id (gclid). We use this for marketing attribution so we can tell which links led to later visits and purchases. These values may later be associated with a guest session or a paid order. We do not sell this information. It is not used for ad-network user profiling, and this batch does not include a Google Ads conversion pixel. These cookies do not store face photos and are not used as authorization.
Affiliate referral identifiers. If you use an affiliate link, Affonso (affonso.io) may set affonso_referral and we may send that same id on a Stripe Checkout Session so commissions can be calculated. If you create an account and the Affonso script is available, we may also send your email address as a signup lead. We do not send your user id or photos to Affonso. We do not sell this information. See the Cookie Policy.

Free Scan on Your Device

The free scan processes your selected photo and its derived analysis in your browser. The photo, landmarks, mesh, topology, grid, face-shape result, ratios, angles, symmetry values, measurements, and other local recognition or analysis results do not leave your device during that free step.

The current local session is designed to expire after about 24 hours. You, your browser, or your device may clear it sooner. This local period is not a promise about cloud retention. If local processing cannot run, we may ask you to use another browser, device, crop, or photo; we do not silently upload the free photo as a fallback.

Paid Cloud Photo Processing

Only after you choose paid processing and give the requested affirmative consent do we upload the necessary normalized photo. We do not upload the landmarks, mesh, topology, grid, ratios, angles, measurements, or other local recognition or analysis results listed above.

The necessary photo and generated assets are processed by AI service-provider categories to create the image preview and report you requested. We do not use the photo to identify who you are, create an identity template, track you across contexts, or conduct surveillance.

Why We Handle Information

We use personal data for the following purposes and, where applicable, legal bases:

To create accounts, fulfill orders, manage credits and subscriptions, and deliver reports: performance of our contract or steps you request before a contract.
To upload and process a paid photo: your explicit affirmative consent and, where applicable, performance of the service you request.
To secure the service, prevent fraud, apply limits, and maintain reliability: our legitimate interests in protecting users, Lookplan, and payment flows.
To reconcile transactions and handle refunds, chargebacks, taxes, and regulatory records: legal obligations and legitimate interests.
To respond to support, privacy, and deletion requests: our contract, your consent, or legal obligations, depending on the request.

You may withdraw consent for future photo processing by contacting us. Withdrawal does not affect processing lawfully completed before withdrawal, but it may prevent us from completing a later image or report.

Service Providers and Other Disclosures

We use limited categories of service providers for:

AI image generation and report processing;
payment processing;
cloud hosting and private object storage;
email and operational communications; and
security, fraud prevention, and service reliability.

These providers may process information needed to perform the service we ask them to perform. We do not authorize them to use your photo, generated image, or report to train AI models for themselves, Lookplan, or anyone else.

We may also disclose information when required or permitted by law and reasonably necessary: to courts, regulators, or law-enforcement authorities; to professional advisers bound by confidentiality; or in connection with a financing, merger, reorganization, sale, or transfer of all or part of the business. These circumstances do not authorize the sale of your photos, model training, or unrelated independent commercial use.

International Processing

Personal data may be processed in Singapore and other jurisdictions where our service providers operate. Privacy laws may differ between jurisdictions. Where applicable and supported by our actual arrangements, we use contractual, organizational, technical, or other measures intended to protect transferred data. Contact us to ask about safeguards that apply to you and to request available information where the law requires it.

Payments

A payment processor handles complete payment-card details directly. Lookplan receives limited transaction information needed for fulfillment, subscription administration, refunds, chargebacks, and reconciliation, such as payment status, amount, currency, and order or subscription references. We do not store your complete card number.

Retention

We retain information only while reasonably needed for the purpose for which it is handled, considering the following categories:

Photos, generated assets, and reports: for delivery, available history, and verified deletion handling.
Account information: while needed for the account and support relationship.
Transaction, consent, and security records: while needed for refunds, chargebacks, reconciliation, fraud prevention, and legal obligations.
Support records: while needed to resolve the request and related disputes.

We stop retaining data when it is no longer needed, subject to legal or operational requirements. We do not promise one automatic deletion period for all data. If a copy remains in a provider or Lookplan cache or backup, it is handled according to the applicable normal lifecycle and controls actually available; we do not promise that every copy disappears immediately or at the same time.

Your Rights

Depending on where you live and the law that applies, you may have rights to be informed; access or obtain a copy; correct; delete; restrict or object to processing; receive portable data; withdraw consent; complain to a supervisory authority; and, where applicable, not receive discriminatory treatment for exercising a privacy right.

Send a request to our Data Protection Contact at support@lookplan.net. We may use verification proportionate to the risk and will respond within the period required by applicable law. An adult whose photo was uploaded by someone else may contact us directly. These rights are not excluded by the governing-law or liability provisions in our Terms.

Deletion Requests

You may ask us to delete your account, photos, generated assets, reports, and associated content. Current full deletion requests are handled manually. For an account, we normally verify through a Magic Link to the account email and a valid signed-in session. For a guest purchase, we may verify through the purchase email. Our response does not reveal whether an email address is registered.

We normally do not ask for a government identity document or a new face photo. If verification is insufficient, we pause rather than risk deleting another person's data. We may retain minimum transaction, refund, chargeback, security, reconciliation, or legal records when necessary, but that does not justify keeping the photo, report body, or a complete payment-event record.

Deletion can permanently remove access to reports and assets and can prevent recovery, regeneration, replacement, or historical access. We do not promise self-service deletion, immediate deletion, or completion within a fixed number of days.

AI, Training, and Non-Medical Use

We do not use input photos, generated images, or reports to train AI models unless we later offer a separate, explicit opt-in and you choose it. An AI-generated preview is an illustrative appearance or styling simulation. It may be inaccurate or non-unique and does not guarantee a real-world result. Lookplan does not provide medical diagnoses, health assessments, surgical advice, or a substitute for advice from a qualified professional.

Security

We use access controls, private storage, and reasonable technical and organizational measures intended to protect cloud photos and reports. No system is absolutely secure, so protect your email account and sign-in links.

Changes to This Policy

We may update this Policy as the service, our practices, or applicable law changes. We will publish the revised Policy and effective date on this page and use any additional notice required by applicable law. A paid-photo consent record is associated with the Policy version displayed when consent is given.

Contact Us

For privacy questions, rights, or deletion requests, contact our Data Protection Contact at Lookplan support@lookplan.net. You may also use our contact page.