Privacy Policy
H2A Digital ("we," "us," or "our") operates the LooksUP mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
📊 Information We Collect
Personal Information
- ✓User Photos: Front and side selfies uploaded for analysis and removed after processing
Automatically Collected
- ✓Device Information: Device type, OS, identifiers
- ✓Analytics: PostHog data to improve services
- ✓Usage Data: Features accessed and actions taken
🙂 Face Data (Photos Containing Faces)
What we collect: LooksUP processes the photos you choose to upload. These photos may contain faces.
What we do not collect: We do not create or store biometric identifiers such as faceprints, face templates, embeddings, or other biometric profiles for the purpose of identifying a person.
How we use face data: We use the uploaded photos only to provide the App's core functionality, generating the analysis result requested by the user. We do not use uploaded photos for advertising, marketing, or tracking, and we do not use them to train our own models.
Where it is stored: Uploaded selfies are stored temporarily in our backend on Supabase Storage to perform the analysis request.
🧩 Third-Party Face Data Storage (Service Providers)
Do they store face data? Yes. Supabase temporarily stores: uploaded photos (which may contain faces) in Supabase Storage under our account.
Why do they store it? We upload photos to create a short-lived signed URL that our backend uses to securely retrieve the image during processing. This avoids sending large image files inside the analysis request payload and improves reliability (e.g., if the app is backgrounded or a retry is needed).
Selfies: We delete uploaded photos after the analysis attempt completes. If deletion fails due to network or unexpected errors, we run automated cleanup to remove any remaining photo uploads within 6 hours.
Why these lengths? The 6-hour window exist only as short reliability fallback (e.g., client disconnects, network errors, or retries) while minimizing retention of face photos.
Do they store face data? No. We do not send uploaded photos to PostHog.
What do they store instead? PostHog receives usage/analytics events (e.g., screen views, button taps, feature usage) to help us improve the App.
🎯 How We Use Your Information
Provide, maintain, and improve our services
Personalize your experience
Send updates and marketing (with consent)
Provide customer support
Analyze usage patterns
🔒 Data Storage and Security
- 🔐We apply reasonable security safeguards to protect stored data
- ☁️We use Supabase for temporary storage and backend services
- 🛡️Uploads are removed after processing to minimize retention
⏳ Data Retention
Selfies: Photo uploads are intended to be removed after processing to minimize retention. If a removal fails due to network or unexpected errors, we run automated cleanup to remove remaining photo uploads within 6 hours.
On-device storage: The App may save generated results locally on your device (e.g., to view your results). You can remove local data by deleting results in the App (if available) or uninstalling the App.
🤝 Sharing Your Information
We do not sell your personal information.
- →
Service Providers: Third-party services that help us operate the App (e.g., Supabase, PostHog)
- →
Legal Requirements: When required by law or to protect our rights
✨ Your Rights
Access
Correct
Delete
Opt-out
Export
📬 Email Communications
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us at support@h2adigital.com.
👶 Children's Privacy
Our App is not intended for children under 13. We do not knowingly collect personal information from children under 13.
🔄 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date."