Privacy Policy

This Privacy Policy explains, in plain language, what personal data Viblook ("Viblook", "we", "us") collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to the Viblook mobile app and the viblook.app website (together, "the Service"). By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

1. Who is responsible for your data

The data controller is Mattew Thao, sole trader (micro-entreprise), 6 rue Yves Farge, 69700 Givors, France (SIREN 851 652 065). For any privacy question or request, contact us at viblook.app@gmail.com.

2. The data we collect

We collect only what we need to run Viblook. We do not collect your contacts, your health data, your browsing history on other apps, or advertising identifiers.

a. Account data

• Your email address, or the identifier provided when you use Sign in with Apple or Sign in with Google.
• A one-time login code is used to sign you in (passwordless). We do not store a password.

b. Photos and images

• The photos of your outfits that you choose to submit for rating.
• The profile photo you choose to add, if any.
• We only access an image when you actively pick it or take it. We never scan your photo library in the background.

c. Content you create and the results you receive

• The text you type: the optional question you can ask before a rating, the optional short description you can add under a published outfit, and your comments in the community.
• The results generated for you: your outfit scores and your style reports (including the answer to your question, if you asked one).
• What you keep in your account: your rated outfits and their reports, your favourites, and your profile.
• The look you choose for your share card (colours, font, emojis). It stays on your device, unless you publish the outfit to the community from the card: the colours, the font and the emojis placed after the style name are then saved with that publication.

d. Usage and device data

• Preferences and activity needed to run the app: chosen language, streak, onboarding choices, notification preferences, subscription status.
• A device identifier we generate, used to link one account to one device (to prevent account sharing and fraud) and basic technical information (device model, operating system) for reliability.
• If you enable notifications, a push token (an identifier of your device for notifications) and your app language, so we can send you community alerts: when someone likes or comments on your outfit, replies to you, or likes your comment. The daily reminders are scheduled on your device itself and do not go through our servers. We do not collect your location.

e. Subscription data

• Your subscription status and purchase history, provided by the app store. Payment is processed by Apple or Google — we never see or store your bank card details.

f. Community data

• Your username and your profile photo. When your account is created, your username is set by default to the part of your email address before the “@” (for example “lea.martin”); if that part cannot be used (for example with Apple’s “Hide My Email”), a neutral username is generated instead. You can change your username at any time in your profile. Your full email address is never shown to other users.
• The rated outfits you choose to publish: the photo, its score, its style name and the date. Nothing is published unless you choose to.
• Your likes (on outfits and on comments), your comments and your replies, and the reports and blocks you make (used only for moderation and to hide content from you).
• Your member page. Other users can open it by tapping your username. It shows your username, your profile photo, the outfits you published, how many there are, their average score and the total number of likes they received. It never shows your email address or your unpublished outfits.
• Activity. When someone likes or comments on your outfit, replies to you or likes your comment, we keep a record of it (who, on which outfit, when) to show it in your Activity list and to send you the alert if notifications are on. In the same way, other users are told when you interact with their content.
• What you publish is visible to other users of the app. You can remove a published outfit or a comment at any time.
• Sharing outside the app. Any user can share a published outfit as an image (the photo, the style name, the score and the author's username) using their device's share function. Once an image has been shared outside Viblook, we cannot remove it from where it was sent. Only publish what you are comfortable seeing shared.

g. Referral data

• Your personal referral code, the code you entered when signing up (if any), and the number of friends who signed up with your code.

h. Messages you send us

• The content of any email or in-app feedback/support message you send us.

3. How we collect it

• Directly from you: when you sign in, submit a photo, type a question or a comment, publish an outfit, subscribe, or contact us.
• Automatically: minimal technical and usage data generated while you use the app (language, device identifier, subscription status, push token).

4. Why we use your data, and our legal basis (GDPR)

Purpose	Legal basis
Provide the core features: rate your outfits, build your style report, and save your content	Performance of our contract with you
Create and manage your account and your subscription	Performance of our contract
Run the community: display the outfits and comments you choose to publish, your member page, likes and replies, your Activity list, and run the referral program	Performance of our contract (you choose what to publish)
Moderate the community: word filter, reports, blocks, removal of content and suspension of accounts that break the rules	Our legitimate interest in a safe service, and legal obligation
Keep the Service secure, prevent fraud and account sharing (one device per account), enforce our Terms	Our legitimate interest in a secure, fair service
Send you the notifications you turned on (daily reminders and community alerts)	Your consent (you can turn them off anytime)
Optional marketing messages	Your consent (opt-in, never pre-checked)
Improve, debug and maintain the Service	Our legitimate interest
Comply with our legal obligations	Legal obligation

5. AI processing — how it works

• Viblook's core features rely on artificial intelligence. To generate your results, the photos and messages you submit are transmitted to Google (Google LLC) that performs the analysis and returns the result.
• This happens only for the content you actively submit, and only to create the result you asked for (your score and your style report).
• This data is not used for advertising, is never sold, and is not used to train the provider's AI models.
• The results are automatically generated and are provided for guidance only; they are not professional advice.
• This AI processing is clearly disclosed inside the app before you sign in, and you accept it in order to use the app.
• In the community, the style name of a published outfit may be sent to Google to be translated into the reader's language, and comments, outfit descriptions and usernames are checked by an automated word filter. Photos are not re-analyzed when you publish.

6. Who we share data with (service providers)

Other users of the app can see the content you choose to publish in the community (outfit photo, score, style name, its optional description, username, profile photo, comments, and your member page). They can also share a published outfit outside the app as an image (see section 2.f). They never see your full email address or your unpublished outfits; note that your default username is taken from the beginning of your email address unless you change it.

We do not sell your data. We share the strict minimum with trusted providers who act on our behalf and only to deliver the Service. They are bound to protect your data and use it only for that purpose:

• Hosting provider — secure storage of your account, photos and content, on servers located in London, United Kingdom.
• Google (Google LLC) — analyzes your submitted photos and messages to generate your results (see section 5).
• Subscription & payment provider and the app stores (Apple, Google) — manage your subscription and process payment.
• Push notification services (Expo, Apple, Google) — deliver the community alerts you enabled. They receive your device's push token and the text of the alert (for example “@lea liked your outfit”, or the beginning of a comment).

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer, in which case we will let you know.

7. International data transfers

Your account and content are hosted in London, United Kingdom. The United Kingdom is recognised by the European Commission as providing an adequate level of protection for personal data. Some providers (for example the AI provider) may process data outside the EU. When that happens, we rely on appropriate safeguards recognised under the GDPR (such as the European Commission's Standard Contractual Clauses) to protect your data.

8. How long we keep your data

• We keep your account data and content for as long as your account is active.
• When you delete your account (directly in the app, Profile tab), your data and your photos are permanently erased, including your published outfits, your comments and your likes in the community, and residual copies in backups are removed within a short period.
• Some limited data may be kept longer only where required by law (e.g. billing records).

9. Your rights

Depending on where you live (in particular under the EU/UK GDPR and similar laws), you have the right to:

• Access the data we hold about you and get a copy.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Portability — receive your data in a usable format.
• Withdraw consent at any time (for notifications or marketing), without affecting past processing.

You can delete your account and content at any time directly in the app (Profile → delete account). For any other request, email viblook.app@gmail.com; we respond within the legal time limits. If you are in the EU, you may also lodge a complaint with your data protection authority (in France, the CNIL — cnil.fr).

10. Security

Data is encrypted in transit, stored on secured infrastructure, and access is restricted to what is necessary. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data. If you believe your account has been compromised, contact us immediately.

11. Notifications

If you allow notifications, we send you the reminders and style tips you turned on. You can disable them at any time in your device settings or in the app. We do not use notifications for third-party advertising.

12. Children

Viblook is not intended for children below the minimum age required in your country and by the app stores. We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If a change is significant, we will let you know in the app or on this page and update the "Last updated" date above.

14. Contact

For any question about your data or this policy: viblook.app@gmail.com.

15. Data controller

The controller of your data is Mattew Thao, sole trader (micro-entreprise), 6 rue Yves Farge, 69700 Givors, France. Contact: viblook.app@gmail.com. See the legal notice.