Privacy Policy
Last Updated: September 26, 2026 · Effective Date: September 26, 2026 (October 26, 2026 for accounts created before September 26, 2026)
What changed (September 26, 2026). We updated where your data is stored (Google Firebase), added the analytics and crash-reporting tools the app uses, explained how public content may be featured on our website and marketing (and how to opt out), and described the community content our website now shows.
Who we are. “Lookdrop,” “we,” “our,” and “us” mean ZEMO Digital, LLC, a Texas limited liability company. This Privacy Policy explains how we handle personal information when you use the Lookdrop mobile application and our related websites, support channels, and online services (collectively, the “Services”).
Contact. Privacy questions or requests: privacy@lookdrop.io
1) Scope
This Policy covers personal information processed through: the Lookdrop iOS application (including features such as Inspire feed, moodboards, Pro Color/LUT tools, geotagging, push notifications, and in-app purchases), and related websites, help centers, and support channels operated by Lookdrop.
2) Information We Collect
Account & Profile. Email, username, display name, date of birth, country/region, biography, website URL, and profile/header images.
Camera, Photos & Metadata. Photos and videos you capture or upload; EXIF/metadata (e.g., camera settings, device model, lens information). If you enable it, precise location (GPS) may be embedded in photo metadata.
Usage & Engagement. Content you like or save; users you follow; moodboards; comments; view and activity timestamps; Pro Color/LUT usage counts.
Device & App. Device model and OS version (used to tailor features), push notification token, crash/diagnostic data, and basic interactions necessary to maintain the Services.
Analytics & Crash Reports. We use Google Analytics for Firebase to understand in-app usage (for example, screens viewed, features used, and subscription funnel steps) and Firebase Crashlytics to diagnose crashes. These tools use app-instance identifiers, not advertising identifiers, and we do not use them for cross-app tracking or advertising.
Purchase Information. Subscription tier and purchase metadata processed via Apple’s StoreKit (we do not receive your full payment card details).
Communications. Your messages to support, email address for account/transactional notices, and your marketing preferences (if you opt in).
3) Sources & Storage Locations
Google Firebase. Accounts, profiles, posts and photos, moodboards, shared looks, the social graph, activity, and Pro Color information are stored with Google Firebase (Authentication, Cloud Firestore, Cloud Storage, and Cloud Functions), encrypted in transit and at rest.
Apple iCloud (CloudKit). Some older data from earlier versions of the app may remain in CloudKit (Apple-managed encryption).
Device Keychain. User ID and authentication tokens.
UserDefaults (local). Preferences (e.g., liked/saved IDs, recent LUTs).
Photos Library (local). Media captured to your device when you choose to save locally.
4) How We Use Information
To provide, maintain, and improve the Services (camera, editing, social posting, discovery, moderation). To process purchases/subscriptions and manage your entitlements. To send push notifications about account or activity (you can disable in device settings). To send transactional emails (verification, password resets, receipts) and respond to support requests. To analyze usage, ensure security and integrity, prevent fraud/misuse, and enforce our policies. To feature public content on our websites, social media, and marketing, with credit, as described in our Terms of Service (Section 4).
Legal bases (EEA/UK). Contract (to provide the Services), legitimate interests (safety, improvement, anti-fraud), consent (e.g., location in EXIF, notifications), and compliance with legal obligations.
5) How We Share Information
Service Providers & Apple Services. Google Firebase / Google Cloud (hosting, storage, authentication, backend functions, analytics, crash reporting); Apple CloudKit (legacy app data); StoreKit (purchases/subscriptions); Sign in with Apple (authentication); Apple Push Notification service; Photos framework (user-initiated saves). Cloudflare Workers (notification delivery and related infrastructure). SendGrid (email via Cloudflare or other configured integration). We require providers to use information only to perform services for us and to protect it appropriately.
Social/External Sharing (User-Initiated). When you choose to share to Instagram, Facebook, Snapchat, WhatsApp, Messages, or other platforms, we pass the content you select to those apps. Their privacy policies apply.
Promotional Features (Public Content Only). If we feature a public post, it may appear on our websites, our official social media accounts, App Store pages, press materials, and other marketing, alongside your username, display name, profile image, and the Pro Color you used. This is visible to anyone. We never feature private content and never publish your email, date of birth, or precise location as part of a feature. Photos shown on our website are re-saved without location or camera metadata.
Legal and Safety. We may disclose information to comply with laws, lawful requests, and legal processes; to protect rights, property, and safety of Lookdrop, our users, or others; and in connection with corporate transactions (e.g., merger, acquisition, or asset sale).
No cross-app tracking; no sale/share for ads. We do not use collected data for cross-app tracking or third-party targeted advertising and do not “sell” or “share” personal information for cross-context behavioral advertising under California law.
6) Your Choices & Controls
Location in Photos. You can disable geotagging in the app and/or device settings. If enabled, GPS coordinates may be embedded in EXIF and visible to recipients of the media.
Push Notifications. You can opt out at any time in device settings.
Account & Content. Manage your profile, posts, and followers in-app. You can delete your account in-app; see Retention for what happens to stored data.
Promotional Features. To opt out of having your public content featured outside the app, email support@lookdrop.io from your account email with the subject “Opt out of features” (or use an in-app setting if one is available). Deleting a post or your account also removes it from our websites within a reasonable time, usually 30 days.
Marketing Emails. If you opted in, you can opt out using the unsubscribe link or by contacting us.
Do Not Track. We do not respond to DNT signals because industry standards are not consistent; you may use device/app privacy controls instead.
7) Children’s Privacy
The Services are not intended for children under 13 (or older minimum age where required). We collect date of birth during registration to help gate under-age accounts and do not knowingly collect personal information from children. Parents/guardians who believe a child has provided personal information may contact privacy@lookdrop.io to request deletion.
8) Security
We employ technical and organizational measures appropriate to the risk, including iOS Keychain storage for credentials, Apple-managed CloudKit encryption, and HTTPS/TLS for network communications. No method of transmission or storage is 100% secure.
9) Data Retention
CloudKit data (e.g., profile, posts, social graph) is retained while your account is active and deleted upon account deletion (subject to reasonable backup/archival latency). Local app data remains on your device until you remove the app or clear data. Push tokens are flagged inactive on logout or when the OS marks them invalid. We may retain minimal records needed to comply with law, resolve disputes, or enforce agreements.
10) Your Rights
EEA/UK. You may request access, correction, deletion, portability, and restriction/objection to processing. Where processing relies on consent, you may withdraw consent at any time without affecting prior processing.
California (CPRA). You may request to know/access specific pieces and categories of personal information, delete, correct, and opt-out of sale/share (we do not sell/share). You may also limit the use/disclosure of sensitive personal information (e.g., precise location) to what is necessary to provide the Services. We will not discriminate against you for exercising your rights.
How to exercise. Email privacy@lookdrop.io or use in-app controls (Settings › Privacy › Export Data / Delete Account). We will verify your request and respond within applicable timeframes. Authorized agents may submit requests with proof of authorization.
11) International Transfers
If we transfer personal information outside your region, we use appropriate safeguards (e.g., Standard Contractual Clauses with service providers) and implement supplementary measures as needed.
12) User-Generated Content & Public Profiles
Content you post to the Inspire feed (including captions, hashtags, and any metadata you choose to include) may be visible to others within the app. Public content may also be featured on our websites, social channels, and marketing, as described above and in our Terms. Reporting and moderation tools help enforce our community guidelines.
13) Changes to This Policy
We may update this Policy from time to time. If changes are material, we will provide notice (e.g., in-app notice or email). Your continued use after the Effective Date means you accept the updated Policy.
14) Contact Us
ZEMO Digital, LLC · Attn: Privacy Team · privacy@lookdrop.io · support@lookdrop.io
App Privacy Disclosures (for App Store)
The following data types are collected and linked to your account and not used for tracking: Contact Info (email), Identifiers (user ID), Location (precise, if enabled), Photos/Videos, Usage Data, Purchases.
This Website
Cookies. This website does not set advertising or analytics cookies and does not use tracking pixels. WordPress may set strictly necessary cookies only if you log in or submit a comment; browsing the site sets none.
Community content on this site. Pages that show Pro Colors and community photos load them from our Google Firebase backend (Cloud Functions and Cloud Storage). Google processes your IP address to deliver those files. The site receives only public display information (such as a username, display name, photo, and Pro Color name), never an account email or other private data.
Hosting & CDN. The site is served through Cloudflare’s content delivery network (via our host, Rocket.net) for security and performance. Cloudflare processes visitor IP addresses as a network necessity and may set a strictly necessary security cookie (such as __cf_bm) to filter automated traffic; a small number of static script files are also served from Cloudflare’s cdnjs. This processing is based on our legitimate interest in operating a fast, secure website (GDPR Art. 6(1)(f)).
Download links. Some links on our social profiles route through this site before sending you to the App Store. When one is used we record the time, which link it was, the app or browser it opened from, and the country our CDN reports, so we can see which channels bring people to Lookdrop. No cookie is set and your IP address is not stored, and the record cannot be tied back to you. The App Store link also carries a campaign label so Apple can tell us which channel a download came from; Apple reports totals only, never individual people. Legal basis: our legitimate interest in measuring our own marketing (GDPR Art. 6(1)(f)).
No profiling. We do not build visitor profiles, sell data, or share browsing data with advertisers. Emails you send to our addresses are used solely to respond to you.
