Privacy Policy

Superlook.ai

Effective date: March 27, 2026
Last updated: March 27, 2026

Superlook.ai ("Superlook", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our mobile application, website, and related services (collectively, the "Service").

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Data controller:
Superlook.ai Ltd.
Cyprus, Paphos, 8047, Zalongou 2
Email: [email protected]

2. Scope of This Policy

This Policy applies to:

• Superlook mobile application;
• Superlook website and related web pages;
• customer support communications;
• AI content generation functionality (image/video generation and related workflows).

It does not apply to third-party services that we do not control. Those services are governed by their own terms and privacy policies.

3. Information We Collect

3.1 Information you provide directly

We may collect information you provide, including:

• account details (such as email address, username, sign-in identifiers);
• support requests and communications;
• content you submit to generate outputs (for example, uploaded photos, prompts, and selected settings).

3.2 Information collected automatically

When you use the Service, we may collect:

• device and app information (device model, OS version, app version, language, country/region);
• identifiers (app instance identifiers, push token, advertising identifier where applicable and permitted);
• usage and diagnostics data (events, feature usage, crash logs, performance and reliability metrics);
• network/request metadata (IP address, timestamps, request status, security/fraud signals).

3.3 Generation input/output information

For AI generation features, we may process:

• uploaded image(s);
• additional image(s) such as masks, outfit/reference images, if required by selected flow;
• text prompts and selected generation parameters;
• generated outputs and generation status/task identifiers.

3.4 Payment and purchase information

Payments are processed by platform providers and payment partners. We do not store full payment card details. We may receive limited transaction metadata required for billing, support, fraud prevention, and compliance.

4. App Permissions

Depending on your use of features, we may request:

• Photo Library access: to let you select and upload photos;
• Notifications: to send generation status updates and service notifications.

You can deny or revoke permissions in device settings, but certain features may not function without required permissions.

5. How We Use Information

We use personal information to:

• provide and operate the Service;
• process AI generation requests and deliver outputs;
• authenticate users and secure accounts;
• process purchases and manage credits/subscriptions;
• improve product quality, reliability, and performance;
• detect, prevent, and investigate abuse, fraud, and security incidents;
• provide customer support;
• comply with legal obligations.

6. AI Processing, Third Parties, and Consent

6.1 In-app consent before first generation

Before the first AI generation request is sent from the app, we show a dedicated in-app consent prompt that:

• discloses what categories of data will be sent;
• identifies third-party recipients;
• asks for explicit user permission.

If the user declines consent, generation does not start.

6.2 Data categories sent for generation

To fulfill generation requests, we may send:

• uploaded photo(s) and, where applicable, mask/reference/secondary image(s);
• text prompts and selected generation settings;
• limited technical metadata required to process, secure, and troubleshoot requests.

6.3 Where data is processed

Generation-related data may be processed by:

• Superlook backend infrastructure;
• fal.ai infrastructure/models;
• RunPod infrastructure and Superlook-managed GPU infrastructure running custom workflows.

6.4 Identification and biometric statement

We do not use uploaded photos for facial recognition, biometric identification, or identity verification. Photos may contain faces and are processed only to provide the user-requested generation features.

7. How We Share Information

We may share information:

• with infrastructure and service providers that process data on our behalf (hosting, compute, analytics, support, security, communications);
• with AI processing providers strictly for generation requested by the user;
• with payment and subscription providers for billing operations;
• with legal authorities when required by law or to protect rights, safety, and security;
• in connection with a merger, acquisition, financing, reorganization, or asset transfer;
• with your consent or at your direction.

We do not sell your personal information.

8. Data Retention

We retain information only as long as necessary for the purposes described in this Policy, including:

• providing the Service and user-requested generation;
• account, billing, and support operations;
• security, fraud prevention, and legal compliance.

Retention periods vary by data type and legal requirements. When data is no longer needed, we delete, anonymize, or securely isolate it.

9. International Data Transfers

We and our service providers may process information in countries other than your own. Where required, we implement appropriate safeguards for cross-border data transfers under applicable law.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to children under 13 (or higher age where required by local law). We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided us personal information, contact us and we will take appropriate action.

12. Your Privacy Rights

Depending on your location, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• request deletion of information;
• request restriction or object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent.

To exercise rights, contact: [email protected]
We may need to verify your identity before processing requests.

13. Marketing and Communications

If you opt in, we may send product updates and marketing communications. You can unsubscribe at any time using the unsubscribe link or by contacting us.

14. Cookies and Similar Technologies

Our website may use cookies and similar technologies for functionality, analytics, and service improvement. For details, see our Cookie Policy.

15. Third-Party Policies

Third-party services are governed by their own policies and terms. For current AI provider legal terms, please refer to the provider's official legal pages.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the app, website, or other appropriate channels. Continued use of the Service after changes become effective means you accept the updated Policy.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

• Email: [email protected]
• Address: Cyprus, Paphos, 8047, Zalongou 2