Privacy policy

Data and purposes

We process your username, hashed password, language, optional profile and sessions to maintain your account. Photos, landmarks, measurements, simulations and your selected population reference may be sensitive data and require specific permission for the requested analysis. Ethnicity is not inferred from images; selecting a reference does not declare your ancestry. Billing uses identifiers, amount, status and access period for a payment or subscription. Card details go to Stripe; Pix may require the payer's CPF/CNPJ tax identifier directly in Stripe Checkout. We do not add this identifier to Looksmath registration or store it in Pix orders. Support stores your message and response. Public content appears through a publication action. Requests also expose IP addresses and technical information to infrastructure for delivery and security.

Processing grounds in Brazil

Ordinary data needed for the account and purchase is processed to perform the contract or requested steps. Security may rely on legitimate interests with necessity and safeguards; legal duties and the exercise of rights may justify specific records. Sensitive analysis data requires specific, prominent consent, including any optional population reference. Refusal prevents that analysis but still permits documents, examples and support. Consent is not a blanket permission for unrelated purposes.

Processing location and recipients

In the hosted version, uploads pass through the service server; processing is not confined to your computer. Hosting, network and backup providers operate the infrastructure listed below. Stripe processes payments and does not receive photos. We do not sell data, share it for behavioral advertising or train models on your content. Optional visual assessment uses an operator-controlled server. The optional text assistant may send selected text and measurements to OpenAI after a separate preview and confirmation, without photos. These providers and countries must be listed below. A new provider or purpose requires updated notices and permission where necessary. Legal disclosures occur only as allowed or required by law.

Retention and deletion

Uploaded photos are processed to detect landmarks and calculate measurements. While signed in, photos and important study data are automatically saved privately on Looksmath servers and linked to your account. This includes landmarks and corrections, measurements, ratings, plans and simulation adjustments; no additional save option is required. Stored photos are standardized and EXIF metadata is removed. Without an account, results remain in the browser session. Saved photos are kept for up to 30 days and geometric studies for up to 365 days in active storage, with hourly cleanup. Isolated backups expire within 14 additional days. You may delete a photo or study earlier through account controls.

Your controls and rights

Account and privacy lets you correct your profile, export data and delete your account. The support form accepts requests for access, confirmation, correction, deletion, portability, disclosure information, automated-result review, objection, restriction, consent withdrawal and appeals, as applicable. A private receipt key lets you read the response without an account. We may proportionately verify your relationship to the data; registration does not ask for ID. In Brazil, simplified access is answered immediately where possible, complete access statements follow the legal deadline of up to 15 days, and consumer inquiries receive a response within 5 days. For US state rights, including California where applicable, we adopt a response within 45 days and explain any permitted extension. Exercising rights does not result in discrimination. Appeals use the same form; complaints may also go to ANPD or the appropriate state authority.

Cookies, preferences and security

We use a session cookie lasting up to 7 days, a facial-permission cookie lasting up to 24 hours, and browser storage for language, theme and the current study. These support requested functions; this version has no advertising pixels or audience-analytics cookies. There is no generic tracking-consent banner. Global Privacy Control does not cause a sale or sharing: those practices are disabled. Sessions use HttpOnly cookies, origin controls and ownership checks; no security is absolute. Do not send passwords or photos through support.

Transfers and changes

Providers and processing countries must be listed in the service information below before public use. International transfers require a valid LGPD mechanism and appropriate contracts; an acceptance click does not replace these safeguards. Material changes will be announced, and expanded sensitive purposes require new permission first. The service is for adults aged 18 or older. Report minors’ data to support so the relevant processing can be stopped and deleted.

Service information

Service

Looksmath

Country of operator

Brasil

Contact and privacy requests

Private support form and receipt

Your controls

Account, export and deletion