Privacy Policy
Last updated: September 27, 2026
1. Data controller
Promptolook (promptolook.com) is operated by Keenvo Tech OÜ, registered in Estonia (17457927), Kotkapoja tn 2a-10, 10615 Tallinn, Estonia. Keenvo Tech OÜ is the data controller responsible for your personal data under applicable data protection laws (including the GDPR and the LGPD). Advertising, traffic acquisition, and monetization services are provided by ActiveView OÜ, registered in Estonia (16639782), Kotkapoja tn 2a-10, Tallinn 10615, Harju, Estonia. You can reach the controller at support@promptolook.com.
2. What we collect
We collect the email you sign up with, the prompts and images you submit, photos you upload for visual search, answers and preferences you share in quizzes and style tools, your gameplay and progress when you play our games, and basic usage telemetry (page views, clicks, outcomes).
3. Games and interactive challenges
You can play our games without an account. To keep your lives, progress, and leaderboard position, we create an anonymous player record linked to a random visitor id stored in a first-party cookie. For every level you play we store the moves you make and their timing, the result, your time, stars, and lives. We replay those moves on our servers to check that each result is genuine and to detect cheating or automated play.
If you choose to save your progress, we store your email address and use it to sign you in on other devices with a one-time code or link, and to send the messages you ask for. We send marketing emails only if you agree, and every such email has an unsubscribe link. You must confirm you are 13 or older before giving us an email address.
Leaderboards show a display name you choose, or an anonymous player number, with your country and results. They also include clearly labelled computer-controlled rivals, which are never counted as players. Some games let you watch an optional rewarded video to get an in-game item, such as an extra life, a second chance or a hint; we record that the video was completed, with your anonymous player record, to grant the item and apply daily limits.
In games with online play, such as Tavlino, your opponent and anyone who opens a public profile, leaderboard or finished match can see your display name or anonymous player number, country, rating and results. For each online match we store the moves, dice, timings, result and the data that lets anyone verify the dice (a server seed, its commitment and a random seed your browser adds). Messages during a match are limited to preset emotes. If you report or block a player, we store that. If you turn on notifications, we store your browser's push subscription, language, time zone and chosen topics.
If you buy a game's one-time Supporter status, Stripe processes the payment. We store the purchase record (amount, currency, country, time and Stripe identifiers) with your player record and email so the status follows you to every device where you sign in. We never receive your card number.
4. How we use it
We use what you submit only to fulfill your request (generate a look, run a visual search, return your personalized style and beauty insights, or run the game you are playing). Telemetry is used to improve the product, measure conversion, and run A/B tests. We do not sell personal data.
5. Third-party services
Authentication and data storage are handled by Supabase. Payments are processed by Stripe; we never store your card number, CVC, or full card details, only a Stripe customer ID. Hosting is provided by Vercel. Transactional email is delivered through Resend. If you sign in with Google, we receive your name and email from your Google profile.
Image generation, visual search, and personalized insights are powered by third-party AI and search providers; your inputs are processed only to fulfill your request. We do not use your images to train models.
6. Advertising
Free accounts may be shown ads served through Google’s ad network (Google Ad Manager) and certified ad partners. These third-party vendors use cookies and similar technologies to serve ads based on your prior visits to this and other websites. Opting out disables interest-based targeting only; you may still see non-personalized, contextual ads. Paid subscribers are not shown ads.
You can opt out of personalized advertising at Google My Ad Center or aboutads.info. To learn how Google uses information from sites that use its services, see How Google uses information from partner sites.
7. Affiliate links
Some links to third-party products or services on Promptolook are affiliate links. If you click one and make a purchase or sign up, we may earn a commission at no extra cost to you. We only surface options we believe fit your needs, and commissions never change our editorial picks or the substance of our guidance. Affiliate links are marked where they appear.
9. Data retention
Generated images, library items, chat history, and game progress are retained while your account is active. Account deletion removes all personal data within 30 days. Anonymized, aggregated analytics may be kept longer for reporting.
10. Your rights
You can access, update, or delete your account at any time from the app, or request a data export or deletion by emailing support@promptolook.com. Depending on where you live, the following data protection laws grant you additional rights:
GDPR (European Union, EEA & United Kingdom)
General Data Protection Regulation (EU 2016/679) and UK GDPR
We process your personal data on the legal bases of contract performance (providing the service you signed up for), consent (push notifications, marketing emails), and legitimate interest (security, product analytics). You have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to its processing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your local supervisory authority.
LGPD (Brazil)
Lei Geral de Proteção de Dados (Law No. 13,709/2018)
You have the right to confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, portability to another provider, information about who we share data with, and revocation of consent. Requests are handled by the data controller identified above. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
CCPA/CPRA (California, United States)
California Consumer Privacy Act, as amended by the CPRA
California residents have the right to know what personal information we collect and how it is used, to request its deletion or correction, to opt out of its sale or sharing (we do not sell personal information), to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.
11. Children's privacy
Promptolook's style tools are not intended for users under 18. Our games and interactive challenges are not directed to children and are not intended for anyone under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.
12. Security
We use industry-standard measures including encryption in transit (TLS) and database row-level security. No method of transmission over the internet is 100% secure.
13. Changes to this policy
We may update this policy from time to time and will post the updated version here with a new "Last updated" date. Continued use of Promptolook after changes constitutes acceptance.
14. Contact
Keenvo Tech OÜ · support@promptolook.com · Support form