LookPrism Privacy Policy

Effective date: August 31, 2026

This Policy applies to the “LookPrism” software and related services.

Before using the LookPrism software and related services, please read and fully understand this Policy carefully. Once you use the LookPrism software and related services, it means that you have fully understood and agreed to all the contents of this Policy. If you have any questions, comments, or suggestions regarding this Policy, you may contact us through the contact information set out in Section X of this Policy.

This Privacy Policy will help you understand the following:

The personal information we collect and how we use it

The device permissions we may need to obtain

How we share, entrust processing of, and disclose your personal information

Third-party SDKs or services we integrate

How we protect your personal information

How you can manage your personal information

How we handle personal information of minors

Where and how we store your personal information

How this Privacy Policy is updated

How to contact us

I.The Personal Information We Collect and Its Uses

“Personal information” refers to various kinds of information recorded electronically or by other means that can identify a specific natural person either alone or in combination with other information, or that can reflect the activities of a specific natural person. We will collect and use your personal information based on the following purposes.

(1) Anonymous User Identifier

The current version does not require you to register with a mobile phone number or email address, or to log in manually. To provide you with core functions such as AI image analysis, photo upload, result display, and maintaining service security, we will create an anonymous user identifier for you through third-party identity authentication and cloud services entrusted by us when you first use the app (such as an anonymous user ID and access token). This identifier is used to associate your uploaded content, analysis records, and necessary security verification.

Before you actively link an identifiable third-party account, email, or other account, this anonymous user identifier usually cannot by itself identify your real name, mobile phone number, or other information that directly identifies you.

(2) Photos You Upload

When you use LookPrism for AI charm analysis (including goal-oriented analysis, scene-based analysis, today’s look analysis, and before-and-after comparison analysis), we will, based on your active operations, collect static photos that you choose to upload or take with the camera (including selfies or outfit photos).

To provide the image analysis service, the photos you upload usually need to contain a recognizable portrait or outfit content. We will upload the photos to our servers and cloud storage for processing, and generate analyses and suggestions for you using artificial intelligence and related technologies. Photos you upload and analysis-related data are retained on our servers for a maximum of 1 day (24 hours). See Section VIII(2) of this Policy for details. We will not use your photos for advertising, user profiling, or behavior tracking unrelated to the image analysis functions of this app.

(3) Analysis Results

We will save the results generated for you from each analysis (such as appearance scores, dimension evaluations, text explanations, optimization suggestions, and related structured data) so that we can display the analysis effect to you. Such results are associated with your anonymous user identifier and the content uploaded for that session.

(4) Device Information

Based on the permissions you grant during installation and use of the LookPrism software and related services, and as necessary for normal use, we may collect device-related information including but not limited to:

Device model;

Operating system version;

Device configuration;

Device identifiers (such as Android ID);

Device network information (such as network type);

Other hardware and software characteristic information.

We collect the above information to provide better-matched services, improve product stability and security, and prevent abnormal use.

(5) Network Log Information

When you use the LookPrism software and related services, we may automatically collect service usage-related network log information, such as:

Dates and times when you use the LookPrism software and related services;

Business logs related to image analysis requests;

App runtime status and crash logs.

This information is mainly used to troubleshoot failures, improve product stability, identify abnormal use, safeguard service security, and comply with relevant laws and regulations.

(6) Customer Service and Communication Records

When you contact us via email or other means, we may save your communication records and related content, or contact information you leave (such as an email address), to contact you, help resolve your issues, record handling results, and improve our products and services.

(7) Exceptions Where Prior Consent Is Not Required

Where permitted or required by applicable law, we may process your personal information without prior authorization or consent, including to fulfill legal obligations, protect your or another person’s vital interests, process information you have made public, or as otherwise provided by law.

If we cease operation of the LookPrism software and related services, we will immediately stop collecting your personal information, notify you of the termination of services through separate notices or announcements, and delete or anonymize your personal information in accordance with relevant laws and regulations.

II.Device Permissions We May Need to Obtain

To provide relevant functions or services, we may need to request the following Android system permissions. You may choose whether to grant them and may withdraw them at any time. If you do not use the related functions, we will not access the corresponding permissions. You may disable authorization at any time in your device system settings, but some functions may not work as a result.

Android system permissions:

1.

Permission type: Camera

Permission name: android.permission.CAMERA

Description: Use the device camera to take photos

Purpose: Take photos and upload them for AI image analysis

When you choose a photo from your library, we use the system photo picker. You only grant access to the single photo you select. We do not request album or storage read permissions, and we do not browse other images on your device.

2.

Permission type: Write external storage (Android 9 and below only)

Permission name: android.permission.WRITE_EXTERNAL_STORAGE

Description: Write images to the device photo library

Purpose: Requested only when you actively save an image to your photo library. On Android 10 and above, the system media APIs are used and this permission is not required.

Except for the above permissions, we will not actively enable other system permissions that may involve your personal information.

III.How We Share, Entrust Processing of, and Disclose Your Personal Information

(1) Sharing and Entrusted Processing

We will not sell your personal information to any company, organization, or individual.

Without harming your lawful rights and interests, we may share or entrust processing of your personal information in the following situations:

Where we have obtained your explicit consent or authorization in advance;

Where required by laws and regulations or by administrative or judicial authorities in accordance with the law;

Where necessary to protect your or another person’s life, property, or other major lawful rights and interests but it is difficult to obtain your consent;

Where necessary to entrust third-party service providers to process information in order to provide image analysis, photo upload, result storage, and other functions (see Section IV of this Policy);

Other circumstances provided by laws and regulations.

(2) Disclosure

We will not publicly disclose your personal information to any third party unless:

You actively choose to disclose it, or explicitly authorize us to disclose it; or

Disclosure is required by laws and regulations or competent authorities.

IV.Third-Party SDKs or Services We Integrate

To provide anonymous identity authentication, photo storage, and other functions, we integrate the following third-party SDKs or services. We require third parties to protect your personal information in accordance with this Policy and applicable laws and regulations:

• Supabase Auth (Identity Authentication Service)

Purpose of use: Create and manage anonymous user identifiers and session verification

Information involved: Anonymous user ID, access token, etc.

Privacy policy link: https://supabase.com/privacy

• OSS (Singapore region)

Purpose of use: Store photos you upload and files related to analysis services

Information involved: Photo files, analysis-related files, and storage path information associated with anonymous user identifiers

Privacy policy link: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202107091605_49298.html

If we integrate other third-party SDKs or services in the future, we will update this Privacy Policy and provide additional notices in an appropriate form, clearly listing the names of such third parties, the types of personal information collected, the purposes of use, and the processing methods, and obtain your explicit consent again where necessary.

V.How We Protect Your Personal Information

We will adopt reasonable and feasible security protection measures to prevent your personal information from being used illegally or from unauthorized access, disclosure, alteration, damage, or loss, including but not limited to:

Using encryption technologies (such as SSL/HTTPS) to protect data in transit;

Encrypting storage of sensitive information (including photos and analysis results) and anonymizing or de-identifying it where possible;

Establishing access control mechanisms, following the principle of least privilege, and authorizing only necessary personnel to access personal information;

Conducting security and personal information protection training regularly.

If a personal information security incident occurs, we will activate emergency plans and notify you through push notifications, announcements, or other means, and fulfill obligations under laws and regulations.

VI.How You Can Manage Your Personal Information

(1) Access Your Personal Information

The current version does not require you to actively register an account. Personal information generated during your use mainly includes: anonymous user identifiers, photos you upload, analysis results, device information, and network log information.

If you wish to confirm whether we still retain specific information related to you, you may contact us through the contact information in Section X of this Policy. We will respond as soon as possible, generally within 30 days.

(2) Correct or Supplement Your Personal Information

If you believe we have recorded personal information related to you based on misunderstanding or error, you may submit a correction or supplementation request through the contact information in Section X of this Policy.

(3) Delete Your Personal Information

You have the right to request deletion of your personal information in the following situations:

Our processing violates laws and regulations;

We collected and used personal information without your explicit consent;

Our processing seriously violates our agreement with you;

You no longer use our products or services;

We permanently cease providing products or services to you.

When you delete information from our services, we may not immediately delete the corresponding information from backup systems, but we will delete or anonymize it when backups are updated.

(4) Change the Scope of Your Authorization

For optional permissions (such as camera), you may change or withdraw authorization at any time in device system settings. Once you withdraw authorization, we will no longer process personal information within the scope of that permission, but this will not affect processing already carried out based on your prior consent.

(5) Responding to Your Requests

We will respond as soon as possible, generally within 30 days. We generally do not charge fees for reasonable requests. To the extent permitted by applicable law, we may be unable to respond to your request if doing so would violate the law, harm others’ lawful rights, involve trade secrets, or if there is sufficient evidence of an abuse of rights.

VII.How We Handle Personal Information of Minors

We attach great importance to the protection of minors’ personal information.

Our services are intended for users who have reached the minimum age required by the laws of their place of residence. If you are under that age, or are a minor under the laws of your place of residence, please read this Policy with your guardian and use our products and/or services only after obtaining your guardian’s explicit consent.

If you are the guardian of a minor and allow the minor to use our products and/or services, we assume you agree to our processing of the minor’s relevant personal information in accordance with this Policy.

If your guardian does not agree to your use of our services or provision of personal information to us under this Policy, please stop using our services immediately and ask your guardian to contact us.

VIII.Where and How We Store Your Personal Information

We store your personal information collected under this Policy in encrypted form and protect it with reasonable security measures.

(1) Storage Media and Location

Your personal information, uploaded photos, and analysis results will be stored on servers and cloud storage hosted by legally compliant service providers entrusted by us. Currently, the relevant services are primarily deployed in Singapore. Your personal information may be transferred to, stored in, or processed in locations other than your country or region of residence. We require such providers to protect your personal information in accordance with this Policy and applicable laws and regulations.

(2) Retention Period

We retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy. After that period expires, we will delete or anonymize your personal information, except where laws and regulations require otherwise.

In particular:

Photos you upload and analysis results: retained for up to 1 day (24 hours) as necessary to provide image analysis and display results to you, after which they will be deleted or irreversibly anonymized;

Anonymous user identifiers, device information, network logs, and security-related records: generally retained for the shortest period necessary to achieve the purposes described in this Policy, unless laws and regulations require a longer retention period.

IX.How This Privacy Policy Is Updated

Our Privacy Policy may be adjusted or changed from time to time. Without your explicit consent, we will not reduce your rights under this Privacy Policy. If there are major changes to this Policy, we will notify you by posting an announcement in a prominent place within LookPrism or via pop-up prompts, and obtain your consent again where necessary.

X.How to Contact Us

If you discover a possible personal information security issue, or have any questions, suggestions, or complaints about this Privacy Policy, you may contact us as follows:

Email: 582884502@qq.com

We will reply as soon as possible after receiving your comments and suggestions, generally within 30 days.

Our company information:

Company name: Guangzhou Broken Dome Technology Co., Ltd.

Registered address and usual business address: 5F, Venus Building, No. 1 Hanjing Road, Tianhe District, Guangzhou

Personal information protection contact: 582884502@qq.com

If you are not satisfied with our response, especially if you believe our processing of personal information has harmed your lawful rights and interests, you may seek a judicial remedy. You may bring a lawsuit before a court of competent jurisdiction at the domicile of Guangzhou Broken Dome Technology Co., Ltd. This does not limit any non-waivable right you may have under the mandatory laws of your place of residence to seek relief in the courts of that place.