Legal
Privacy policy
Last updated: 6 October 2026
1. Who is the controller and what this covers
Lookam S.L., based in Barcelona (Spain), is the controller of personal data collected through My Lookam (my.lookam.io) and the shopper account you use in the virtual try-on widget in stores. Creating the account in the widget or on my.lookam.io is the same processing. Contact: hello@lookam.io.
This policy covers the personal album, sign-up, sign-in, photos you upload (fitting-room photos and, if you use one, a profile photo), generated images or videos tied to your account, the gallery of outfits you choose to publish and, if you fill it in, the optional personal card. It also covers a try-on made without an account in the widget: the photo and the result, which do not enter the album. The merchant dashboard (lookam.io) has its own policy, written for stores. If those texts conflict about your photos or personal card as a shopper, this My Lookam policy prevails.
2. Data we process
We process: account data (email, hashed password, language, sign-up and login dates, account status); photos you upload to the fitting room (body and, if you provide it, face); an optional profile photo, distinct from fitting-room photos; virtual try-on results (images and, where available, video); album metadata (store, garments, sizes, feedback, dates); if you publish an outfit, the title, description, publication consent, other people’s comments and gallery favourites; and minimal technical data (IP address, access and error logs) for security and maintenance.
If you choose to save a personal card, we may also process, all optional and erasable: given name, family name, sex, age, height, weight, complexion and girths (chest, waist, hips). None of this is required to create an account or run a try-on. We use it as tailoring data (fit and size hints), not as health data and not for biometric identification. The name on the card, if you fill it in, may appear as your byline in the gallery; your email is never shown there. We do not build facial templates or use the service as identity verification.
We do not process payment-card data. My Lookam is free for you.
If you try on without an account, we process the photo and the result and, if you ask us to send it, the email for that message. We do not create a card or an album.
3. Purpose and legal basis
A try-on without an account is based on the consent you tick in the fitting room before generating it. With an account, we provide the album and the virtual try-on as performance of the contract, when you create the account and use the service. We keep the service secure, prevent abuse, and meet legal duties (legitimate interests or legal obligation, as applicable). If you ask for the result by email, we send it because you requested it. If you fill in the personal card, we process it to improve fit and size hints (same contractual basis, when you save those fields). The profile photo is processed to identify you on My Lookam (same basis, when you upload it).
If you publish an outfit to the gallery, the basis is your specific, informed consent at that moment: you agree that the image and, if any, the video of that try-on, the title, the description and your byline (card name or a generic alias) may be shown to other My Lookam account holders. That consent is withdrawable: you can unpublish or delete the outfit. Gallery comments and favourites are processed to run that community feature (contract, when you use them).
Inside My Lookam we may show you garments and offers related to your use of the service. That is part of the service and does not use your photo or your measurements card. Emails with discounts and promotions on the pieces you like, from Lookam or from a store on the platform, are sent only if you tick the optional box when you create the account. Lookam sends them. You can withdraw them at hello@lookam.io. That consent is withdrawable and does not use your measurements or photos. We do not use your photos, likeness or personal card for advertising, catalogues, social media, or to sell datasets. We do not train our own public models on your photos. Processing of your appearance is limited to generating and showing you the try-on, storing it in your album if you keep it, showing it in the gallery only if you publish, and operating the service (backups, support, abuse prevention).
4. Photos, video and generated images
Photos you upload and generated results are personal data because they depict you or can identify you. By uploading a photo and running a try-on, you authorise us to send it to AI and cloud-storage providers strictly to produce the result, host it privately, and show it to you.
The profile photo is independent from body and face fitting-room photos. A try-on is never used as an avatar. It is stored as an authenticated cloud asset (Cloudinary) in a folder tied to your id, and served through a signed proxy: there is no lasting public URL. If you remove it, we delete it from the cloud.
A try-on result made with your account stays in your private album until you delete it or the account is deleted. Publishing it to the gallery is a separate act, with express consent: other My Lookam accounts may then see that image or video through the same kind of authenticated proxy, not as an open internet URL and not indexed by search engines. Unpublishing or removing the outfit from the album takes it off the gallery.
A try-on made without an account does not enter that album. That photo and its result are deleted within 48 hours, during which you can download them. The store receives neither the photo nor the result.
You represent that the photos are of you or that you have express permission from the person depicted, and that you do not upload photos of minors. If you upload a third party’s image without permission, you are responsible to that person and to Lookam.
5. Recipients
Data is accessed, as needed, by the processors that generate or host the try-on (Google for the image and video models, xAI when that model is used, Cloudinary for storage, application hosting, and transactional email) and by Lookam staff for support, security, abuse prevention and legal compliance.
The store where you ran the try-on does not receive the photo or the result, and does not decide how long they are kept. It also does not receive your measurements card. If a store prepares an offer, Lookam sends it to people who accepted the emails.
If you publish an outfit, other My Lookam account holders may see that try-on, your title, your description, your profile photo if you have one, and the name on your card (or a generic alias). They may comment if you allow it and save it to their gallery favourites. They do not see your email, your measurements card, or your private album.
The private album is not indexed by search engines. The gallery is not offered to people who are not signed in. We do not sell your contact list or your photos.
6. International transfers
Some processors (in particular Google, xAI when used, Cloudinary and hosting) may be outside the European Economic Area. We limit the transfer to what is needed to generate and host your try-on. The safeguards for each transfer are those of that provider. This text does not state that every set of standard contractual clauses is already signed.
7. Retention
If you have a My Lookam account, album photos, results and the personal card are kept while the account exists. They are deleted if you delete that item or if the account is deleted. To delete the account, write to hello@lookam.io.
A try-on made without an account does not enter the album. That photo and its result are deleted within 48 hours. If you ask for the result by email, we use that address to send it to you; the email does not enter the album.
After erasure, aggregated or anonymised metrics that no longer identify you may remain. Technical logs are kept for a reasonable period for security and incident debugging.
8. Your rights
You may exercise access, rectification, erasure, objection, portability and restriction by writing to hello@lookam.io. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
From the account itself you can change your password, edit or clear the personal card, upload or remove the profile photo, delete fitting-room photos, remove outfits from the album, publish or unpublish, and delete your own comments. From the fitting room you can deactivate the account: it can no longer be used, but the photos are not deleted by that step. Permanent deletion, which removes the profile and the personal content, is requested at hello@lookam.io.
9. Minors
My Lookam is intended for people aged 18 or over. It is not directed at children. If we detect an account or photos of a minor, we will block or delete them. If you are a parent or guardian and believe a minor has uploaded photos, write to hello@lookam.io.
11. Changes
We may update this policy. If a change is material, we will note it on this page and, where reasonable, email the registered account. The current version will always be at my.lookam.io/en/legal/privacy.
12. Gallery and publishing outfits
By default your try-ons are private. Publishing is optional. When you publish you confirm that: (a) the image or video depicts you or you have permission from the person shown; (b) you accept that other My Lookam accounts may see them, together with the title and description; (c) you understand you can unpublish or delete the outfit, after which it leaves the gallery; (d) comments, if you enable them, are visible to those same accounts and you can close or delete them.
The gallery is not an open social network on the public internet: a session is required. We do not use published outfits in Lookam or store advertising without additional consent. Removing an outfit from your album unpublishes it automatically because the file is no longer available.

