Privacy Policy

To provide StarLook's photo transformation features, we collect:

• Photos you upload. Used solely to generate the AI transformation ("Look") you requested.
• Device identifier. A persistent identifier for your device, used to recognize it across sessions — this is what lets your past creations remain accessible if you reinstall the app on the same device, without requiring you to create an account.
• Generated photos. The AI-transformed photos StarLook creates for you are stored so you can view, download, or share them later. Photos you receive in the app carry a small "StarLook" watermark. We also keep a private, unwatermarked copy of each generated photo on our servers; it is not shown or shared with anyone.
• Subscription and purchase information. When you subscribe, Google Play gives us a purchase token and your subscription status (the plan, when it renews or ends, and whether it has been cancelled). We store these, with the number of credits you have, so we can give you the credits you paid for. Your payment details are handled entirely by Google; we never receive or store them.
• App usage and analytics. Which screens and Looks you view, whether you start a transformation, when you see the subscription screen and the steps of a purchase, the app version you are using, and technical details such as your device type, operating system and language. See Section 5 for details.
• Notification address. If you allow notifications, we store a push address for your phone (a token that identifies your device to the notification service), together with when you last opened the app and whether you want marketing messages. We use it to tell you when your photo is ready and, if you have not turned them off, to tell you about new Looks. You can turn marketing messages off at any time in Settings, or switch notifications off in your phone's settings.
• Advertising measurement. When you open StarLook, the Meta SDK sends Meta your Android advertising ID, basic device details (such as device type, operating system and app version) and simple app events (such as opening the app or starting a subscription, with its price). We use this to measure which of our ads led to an install and to improve those ads. We do not send your photos, name, phone number or email address. See Section 4.
• Technical and log data. Basic technical data such as request timestamps and error logs, used to keep the app stable.

StarLook does not currently require account registration (name, phone number, or email address) to use the app.

Photos you upload are sent to third-party AI image-generation providers (including OpenAI and OpenRouter) solely to produce the transformation you requested. These providers process your photo under their own respective privacy policies. We do not use your photos for any purpose beyond generating the Look you selected, and we do not sell your photos to third parties.

StarLook includes an optional Share feature. If you choose to share a generated photo, that specific photo becomes accessible via a public link, which you can then send anywhere you like (for example, via WhatsApp or other messaging apps). Nothing is ever made public unless you explicitly choose to share it.

Sharing is currently permanent — there is no option to un-share a photo once published, so only share photos you're comfortable being publicly viewable indefinitely. Photos and transformations you don't choose to share remain private to your device.

StarLook integrates the following third-party services:

• Google Play Services and Google Play Billing. For app distribution, updates, and subscription payments. Payment details are handled entirely by Google — we never receive or store them.
• OpenAI / OpenRouter. For AI-based image generation, as described in Section 2.
• Supabase. Our cloud storage provider, used to securely store uploaded and generated photos.
• Render. Our server hosting provider, which runs the StarLook service that handles your requests.
• PostHog. A product analytics service, described in Section 5.
• Meta (Facebook) SDK. Used only to measure our advertising, not for Facebook Login. It sends Meta your Android advertising ID, basic device details and simple app events as described in Section 1, which Meta processes under its own privacy policy and may use to show you ads. You can reset or delete your advertising ID, or opt out of ads personalization, in your phone's Settings under Google > Ads.
• Expo and Google Firebase Cloud Messaging. Deliver notifications to your phone. They receive your notification address and the text of the message (for example, the name of the Look that is ready). They process it under their own privacy policies.

These third parties may process data under their own respective privacy policies.

We use PostHog, a product analytics service, to understand how StarLook is used and where it can be improved — for example, how many people try a Look, reach the subscription screen, or complete a purchase. The events we send to PostHog are simple records of actions in the app (such as "viewed a Look" or "started a purchase"), together with the app version, your device type, operating system and language, and the same anonymous device identifier described in Section 1.

We do not send your photos or generated photos to PostHog, we do not record your screen, and we do not send your name, phone number or email address (we do not collect them). PostHog processes this data on servers in the United States under its own privacy policy. We keep analytics data for as long as it is useful for improving the app. If you would like analytics data linked to your device deleted, contact us at the address below.

We retain your uploaded and generated photos (including the private unwatermarked copies), your device identifier, and your subscription records for as long as you use StarLook, and subscription records for as long as we need them for accounting and legal purposes. We do not currently offer a fully automated, self-serve "delete my data" option inside the app. If you would like your data deleted, contact us at the email address below and we will process your request manually.

StarLook is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with information, please contact us so we can take appropriate action.

We use reasonable technical and administrative safeguards to protect the information StarLook processes, including restricting access to your photos to your own device's identity. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. Continued use of StarLook after changes are posted means you accept the revised policy.

Questions or requests about this Privacy Policy, including data deletion requests, can be sent to: team@starlookapp.com.