This Privacy Policy describes how Snaplook ("we," "us," or "our") collects, uses, and shares information when you use our mobile application, website, and related services (collectively, the "Service"). By using Snaplook, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Snaplook is based in Norway. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@snaplook.app.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address and basic profile information (name, username)
• Sign-in method (Apple Sign-In, Google Sign-In, or email one-time code)
• Third-party identifiers provided by Apple or Google when you use their authentication services

2.2 Photos and Visual Content

We collect and process:

• Photos and screenshots you upload or share with the app for visual analysis
• Image URLs from links you share with Snaplook
• Metadata associated with images (such as file type and size, but not EXIF location data)

2.3 Activity and Usage Data

• Search history and visual search queries
• Favorites and saved items within the app
• Product interactions (items viewed, clicked, or saved)
• Feature usage patterns and app navigation
• Feedback and support messages you send to us

2.4 Device and Technical Information

• Device information: Device model, operating system version, unique device identifiers
• App information: App version, language preference
• Network information: IP address, mobile carrier
• Location data: Approximate location inferred from IP address (not precise GPS coordinates)
• Log and diagnostic data: Crash reports, performance metrics, error logs

2.5 Subscription and Billing Information

• Subscription status: Plan type, trial status, renewal dates received from Apple App Store or Google Play Store
• Transaction identifiers: Purchase receipts and transaction IDs
• Payment information: We do not directly collect or store credit card details. All payment processing is handled by Apple and Google.

2.6 Website and Cookies

When you visit our website, we may use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Measure website performance and analyze traffic

You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality.

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Operate the Service

• Process visual searches and return matching fashion items
• Maintain your account and preferences
• Display your search history and saved collections
• Enable sharing from other apps to Snaplook
• Manage subscriptions and verify entitlements

3.2 Improve and Personalize

• Train and improve our AI visual recognition models
• Personalize search results and recommendations
• Analyze usage patterns to enhance features
• Test new features and conduct research

3.3 Communicate With You

• Respond to support requests and inquiries
• Send service updates, security alerts, and administrative messages
• Notify you about changes to our terms or policies
• Send marketing communications (with your consent where required)

3.4 Safety and Security

• Detect, prevent, and address fraud, abuse, and security incidents
• Monitor and enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations and protect legal rights

4. AI Processing and Automated Decision-Making

Snaplook uses artificial intelligence and computer vision technology to analyze the photos you upload and identify clothing items, colors, patterns, and styles. This automated processing returns product matches from our database and partner retailers.

What this means: AI algorithms, not human reviewers, analyze your images. The visual analysis is purely technical and does not involve facial recognition or identification of individuals. We use images to train and improve our AI models so we can provide better results over time.

Your control: You can choose which photos to upload. You may delete your search history and account data at any time.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

5.1 Service Providers

We work with third-party companies that help us operate Snaplook, including:

• Supabase: Database hosting, authentication, and storage infrastructure
• RevenueCat: Subscription management and billing integration
• Apple and Google: App Store distribution, in-app purchases, and authentication services
• Cloud service providers: Hosting, storage, and content delivery
• Analytics providers: App performance monitoring and crash reporting

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Prevent fraud, security incidents, or technical issues
• Protect the safety of users or the public

5.3 Business Transfers

If Snaplook is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice in the app before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share information for other purposes with your explicit consent.

6. International Data Transfers

Snaplook is based in Norway, but we use service providers located in the United States and other countries. When we transfer your information internationally, we implement appropriate safeguards including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions where applicable
• Service providers with certified privacy frameworks

By using Snaplook, you consent to the transfer of your information to countries outside your residence, which may have different data protection laws.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specific retention periods include:

• Account data: Retained while your account is active and for up to 90 days after deletion
• Images and search history: Retained while your account is active, or until you delete them
• Transaction records: Retained for 7 years for accounting and tax compliance
• Support communications: Retained for 3 years
• Aggregated analytics: May be retained indefinitely in anonymized form

After the retention period expires, we securely delete or anonymize your information unless we are required to retain it for legal, regulatory, or safety purposes.

8. Your Privacy Rights and Choices

8.1 General Rights (All Users)

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your profile settings or by contacting support
• Deletion: Request deletion of your account and associated data
• Opt-out of marketing: Unsubscribe from promotional emails or disable push notifications in device settings
• Data portability: Receive your data in a structured, machine-readable format

8.2 European Economic Area (EEA), UK, and Swiss Users (GDPR Rights)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to object: Object to processing based on legitimate interests
• Right to restrict processing: Request that we limit how we use your data
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint: Contact your local data protection authority

Legal basis for processing: We process your data based on (1) performance of our contract with you, (2) your consent, (3) compliance with legal obligations, and (4) legitimate interests in operating and improving our service.

8.3 California Residents (CCPA/CPRA Rights)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

• Know: Request disclosure of categories and specific pieces of personal information collected, sold, or disclosed
• Delete: Request deletion of personal information
• Correct: Request correction of inaccurate personal information
• Opt-out: Opt-out of the "sale" or "sharing" of personal information (Note: We do not sell or share personal information as defined by CCPA)
• Limit use of sensitive data: We do not use sensitive personal information for purposes requiring opt-out
• Non-discrimination: You will not receive discriminatory treatment for exercising your privacy rights

To exercise these rights, email us at support@snaplook.app. We will verify your identity before processing requests and respond within 45 days.

8.4 Virginia Residents (VCDPA Rights)

Under the Virginia Consumer Data Protection Act, Virginia residents may:

• Access personal data we hold about you
• Correct inaccuracies in your personal data
• Delete personal data
• Obtain a copy of your data (portability)
• Opt-out of targeted advertising (Note: We do not engage in targeted advertising)

You may appeal our decision regarding a rights request by contacting support@snaplook.app.

8.5 How to Exercise Your Rights

To exercise any of these rights:

• In-app: Tap the Profile icon on the tab bar, then scroll to the bottom and tap "Delete Account"
• Email: Contact support@snaplook.app with your request

We may ask you to verify your identity before fulfilling your request to protect your privacy and security.

9. Security

We implement commercially reasonable technical, administrative, and physical safeguards to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Secure development practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be provided via email or through a prominent notice in the app within 72 hours of becoming aware of the breach.

11. Children's Privacy

Snaplook is not intended for children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@snaplook.app and we will delete it promptly.

12. Do Not Track Signals

Some browsers support "Do Not Track" signals. Currently, Snaplook does not respond to Do Not Track signals because there is no industry standard for how to interpret them. We will update this policy if we implement Do Not Track functionality in the future.

13. Marketing and Advertising

We may send you promotional emails about new features, special offers, or other information we think you might find interesting. You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at support@snaplook.app
• Adjusting notification settings in your device

Please note that opting out of marketing does not affect service-related communications (such as account notifications or security alerts).

14. Third-Party Links and Services

Snaplook may contain links to third-party websites, apps, or services (such as retailer websites for shopping). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email or through a prominent notice in the app
• Provide at least 30 days' notice before material changes take effect

Your continued use of Snaplook after changes become effective constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@snaplook.app
• Subject line: "Privacy Policy Inquiry"

We will respond to your inquiry within 30 days.