Legal

Privacy policy

Last updated: 28 August 2026

1. Who is the controller and what this covers

Lookam, based in Barcelona (Spain), is the controller of personal data collected through My Lookam (my.lookam.io) and the shopper account you use in the virtual try-on widget in stores. Contact: hello@lookam.io.

This policy covers the personal album, sign-up, sign-in, photos you upload, and generated images or videos tied to your account. The merchant dashboard (lookam.io) has its own policy, written for stores. If those texts conflict about your photos as a shopper, this My Lookam policy prevails.

2. Data we process

We process: account data (email, hashed password, language, sign-up and login dates, account status); photos you upload to the fitting room (body and, if you provide it, face); virtual try-on results (images and, where available, video); album metadata (store, garments, sizes, feedback, dates); and minimal technical data (IP address, access and error logs) for security and maintenance.

We do not process payment-card data. My Lookam is free for you. We do not collect special-category data for biometric identification (we do not build templates to recognise you elsewhere, and the service is not an identity-verification system).

3. Purpose and legal basis

We provide the album and virtual try-on (basis: performance of the contract when you create an account and use the service). We keep the service secure, prevent abuse, and meet legal duties (legitimate interests or legal obligation, as applicable). If you ask for the result by email, we send it because you requested it.

We do not use your photos or likeness for advertising, catalogues, social media, or to sell datasets. We do not train our own public models on your photos. Processing of your appearance is limited to generating and showing you the try-on, storing it in your album if you keep it, and operating the service (backups, support, abuse prevention).

4. Photos, video and generated images

Photos you upload and generated results are personal data because they depict you or can identify you. By uploading a photo and running a try-on, you authorise us to send it to AI and cloud-storage providers strictly to produce the result, host it privately, and show it to you.

The result is a synthetic visualisation: it is not a photograph of you wearing the real garment, nor an identity document. We keep it in your private album until you delete it or delete the account. You can delete saved photos and looks from My Lookam. After deletion we stop using them in production; residual copies may remain in backups for a limited, reasonable security window.

You represent that the photos are of you or that you have express permission from the person depicted, and that you do not upload photos of minors. If you upload a third party’s image without permission, you are responsible to that person and to Lookam.

5. Recipients

Data is accessed, as needed, by: processors (hosting, file storage, AI models that generate the try-on, transactional email); Lookam staff for support, security, abuse prevention and legal compliance; and the store where you ran that try-on, for the operational data of that session in their Lookam dashboard (this is not a public profile of you).

Your My Lookam album is not indexed by search engines and is not an open profile. We do not sell your contact list or your photos.

6. International transfers

Some processors (in particular cloud infrastructure and AI models) may be outside the European Economic Area. In that case we apply GDPR-adequate safeguards, in particular the European Commission’s standard contractual clauses, and we limit the transfer to what is needed to generate and host your try-on.

7. Retention

We keep your account while it is active. Album photos and looks are kept until you delete them or delete the account. After a definitive account deletion we erase personal album and photo data; aggregated or anonymised store metrics that no longer identify you may remain. Technical logs are kept for a reasonable period for security and incident debugging.

8. Your rights

You may exercise access, rectification, erasure, objection, portability and restriction by writing to hello@lookam.io. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

From the account itself you can change your password, delete saved photos and remove looks from the album. Permanently deleting the account removes the profile and associated personal content, as described in the product.

9. Minors

My Lookam is intended for people aged 18 or over. It is not directed at children. If we detect an account or photos of a minor, we will block or delete them. If you are a parent or guardian and believe a minor has uploaded photos, write to hello@lookam.io.

10. Cookies

We use strictly necessary cookies or local storage: authenticated session, language preference and visual theme. We do not inject third-party advertising cookies or remarketing networks. By using the service you accept these technical cookies, which are required for the site to work.

11. Changes

We may update this policy. If a change is material, we will note it on this page and, where reasonable, email the registered account. The current version will always be at my.lookam.io/en/legal/privacy.