Lookit!!! manages 5 data types including tips. Helps you organize, track, and share your work in 1 place for teams and solo users.

Privacy Policy

Last Updated: June 2026 · Version 1.0

Effective Date: July 1, 2026

1. Who We Are & How to Contact Us

Lookit!!! Lookit!!! is operated by Marius-Mario Haidu, located in Romania.
Website: lookitonline.com

Privacy Officer:

📧privacy@lookitonline.com — response within 48 business hours

Data Protection Authority (complaints):

🏛️Romanian ANSPDCP — www.anspdcp.ro

2. What Data We Collect & Why

For Customers:

✓Name – to identify you in confirmations

✓Email address – for booking confirmations

✓Phone number – for business communication

✓Appointment preferences – services, dates, times

✓Location data – city/area to find businesses (not GPS)

✓Special notes – requests for appointments

For Business Owners:

✓Business name, description, address, hours

✓Phone number and email

✓Services offered (pricing and duration)

✓Customer list (names, contact info)

Collected Automatically:

✓Device information – phone model, OS, app version

✓Usage logs – pages visited, businesses viewed

✓Appointment history – past and scheduled bookings

✓IP address – for security and fraud prevention

✓Session cookies – authentication only

✓Analytics data – aggregated, anonymized stats

What We Do NOT Collect:

❌Credit card numbers (processed by payment providers)

❌Medical or health information

❌Continuous GPS tracking

❌Biometric data

❌Financial account details

❌Children's data (we don't serve users under 18)

3. How We Use Your Data

Essential Functions:

•Appointment booking and scheduling

•Booking confirmations and reminders

•Account management and updates

Service Improvement:

•Analytics (which features are used)

•Performance monitoring

•Bug identification

What We Do NOT Do:

❌Sell data to third parties

❌Use data for targeted advertising without consent

❌Share email/phone with marketers

❌Track behavior across other websites

❌Create detailed behavioral profiles

4. Data Security & Encryption

How We Protect Your Data:

✓Encryption at Rest & In Transit – All stored data is encrypted and all communications are secured using TLS

✓Infrastructure Security – Automated security patching, firewall management, and DDoS mitigation

✓Database Isolation – Your data is logically isolated from other applications

✓Authentication & Row-Level Security (RLS) – Fine-grained RLS policies ensure users access only authorized records

✓Managed Backups – Automated backups ensure data durability

✓Secure API & SDK – All API endpoints authenticate requests securely

Your Responsibility:

•Keep passwords confidential

•Log out on shared devices

•Report suspicious activity immediately

6. Your Data Rights (GDPR / CCPA / LGPD)

Right to Access

Request a copy of your data (JSON/CSV). Email: privacy@lookitonline.com — 15 days

Right to Correction

Update incorrect information via in-app settings or email — 5 business days

Right to Deletion

Settings > Delete My Account or email. Deleted within 30 days (exceptions: legal/financial records, 7 years)

Right to Data Portability

Settings > Export My Data — 10 days

Right to Opt-Out

Settings > Privacy — immediate effect

Right to Object

Email privacy@lookitonline.com — response within 10 days

7. Data Retention & Deletion

Retention Schedule:

•Appointment history: 2 years

•Customer contact info: Until deletion request

•Payment records: 7 years (legal requirement)

•Login/access logs: 6 months

•Deleted account data: 30 days backup window

•Database backups: 90 days

•Support tickets: 2 years

Automatic Deletion:

•Inactive accounts (2 years): Deleted after warning

•Disabled accounts: Deleted after 180 days

•Failed transactions: Deleted after 90 days

8. Data Breach Notification

If a breach occurs, we will notify affected users within 72 hours via email, report to ANSPDCP, and publish a statement at lookitonline.com/security.

We maintain cyber liability insurance for breach response.

9. Cookies, Tracking & Analytics

Essential Cookies (Required):

✓session_id – Keeps you logged in

✓_csrf_token – Security protection

Optional Cookies (Can be Disabled):

•Google Analytics – Usage statistics. Opt-out: Settings > Privacy > Disable Analytics

Important:

❌No behavioral profiling

❌No cross-site tracking

❌No pixel/beacon tracking

❌No selling behavior to advertisers

✓Respects Do Not Track signals

10. International Data Transfers

•Primary Storage: Europe (GDPR-compliant)

•Backups: Encrypted and distributed

•Servers: Microsoft Azure/AWS (GDPR certified)

EU users are covered under GDPR. California residents have CCPA rights. Brazilian residents have LGPD protection.

11. Children's Privacy

Lookit!!! is not intended for users under 18. If you believe your child's data was collected, contact privacy@lookitonline.com and we will delete it upon notification.

13. Contact & Complaints

📧Questions: privacy@lookitonline.com — 48 hour response

Lodge a Complaint:

•EU: ANSPDCP — www.anspdcp.ro

•USA: California Attorney General

•Brazil: ANPD (Autoridade Nacional de Protecao de Dados)

Or email privacy@lookitonline.com with subject 'Privacy Complaint' — response within 10 business days.

14. Google Calendar Integration

To provide scheduling convenience, Lookit!!! offers optional integration with Google Calendar. This section explains exactly how we access, use, and protect your Google account data in compliance with Google API Services User Data Policy.

Data Accessed:

✓Google account email — used solely to identify your account during the OAuth connection flow

✓Calendar events (read) — to check your existing availability and prevent double-booking

✓Calendar events (write) — to add confirmed Lookit!!! appointments directly to your calendar

Data Usage:

•Calendar data is used exclusively for appointment scheduling and conflict detection

•We do not use calendar data for advertising, profiling, or any purpose unrelated to scheduling

•We do not read, modify, or delete any calendar events that were not created by Lookit!!!

Data Sharing:

❌We do not share your Google Calendar data with any third parties

❌Access is strictly limited to the user who authorized the connection

❌We do not sell, rent, or disclose calendar data to advertisers or external entities

Data Protection:

✓Access tokens are stored using encrypted, platform-level secure storage

✓All data in transit is protected via TLS/SSL encryption

✓Row-Level Security (RLS) ensures only you can access your own calendar tokens

Revoking Access & Deletion:

•You can revoke Google Calendar access at any time via your Google Account at myaccount.google.com/permissions

•Disconnecting within Lookit!!! immediately purges all stored tokens and cached calendar data

•Deleting your Lookit!!! account also permanently removes all Google OAuth tokens from our systems

15. AI-Powered Features & Third-Party AI Services

Lookit!!! uses artificial intelligence to power certain optional features. This section discloses what data is transmitted to AI services, who provides them, and how your information is protected — in compliance with Apple App Store requirements and GDPR.

AI-Powered Features:

•Booking Assistant (Let us Bookit!) — conversational AI that helps you find businesses, compare services, and book appointments

•Language Translation — translates your messages and generates call scripts for businesses that speak a different language

•Risk Assessment — analyzes booking patterns to detect fraud and protect businesses (administrator use only)

Data Transmitted to the AI Provider:

✓Your first name — for personalized conversation

✓Your approximate location (city/area) — to find nearby businesses

✓Text messages you type in the AI chat

✓Appointment context — service type, date, time, business name

✓Business public information — name, services offered, phone number

Data NOT Transmitted:

❌Your password or authentication credentials

❌Payment or financial information

❌Precise GPS coordinates

❌Your browsing history outside Lookit!!!

❌Your email address or phone number (unless you explicitly type them in the chat)

AI Service Provider:

•Provider: OpenAI, accessed via Base44's platform infrastructure

•Processing: Data is sent to OpenAI's API under their enterprise data usage terms

•Training: Your data is NOT used to train or improve AI models

•Encryption: All data in transit is protected via TLS/SSL

•Retention: AI conversation data is not stored by the provider beyond the session

Your Consent & Control:

✓Explicit consent is required before any data is sent to the AI provider

✓AI features are entirely optional — you can book appointments without them

✓You may withdraw AI consent at any time via Settings

✓Withdrawing consent immediately stops all data transmission to the AI provider

✓Your existing bookings and account are not affected by withdrawing AI consent

By using Lookit!!!, you acknowledge reading this privacy policy.
Last Updated: June 2026 · Next Review: June 2027