Privacy & your data
Lookn's privacy posture in three sentences: we collect the minimum we need, we never read your journal entries, and you can wipe everything in two taps. Here's the longer version.
❓ What we collect
- Account basics — your email and (optionally) your chosen username, avatar, and locale. Lookn is passwordless: you log in by entering a 6-digit code we email you each time, so there's no password to remember or for us to store.
- Your app stuff — your koko's name, your tasks, streak history, dome, coins, adventure progress, quests, friend list, shared task progress. It's encrypted on the way to our servers and while sitting on them.
- Anonymous usage signals — counts like "opened the app," "completed a task," "started an adventure." Tied to a random ID, never your name or email. Never includes the text of your journal entries.
- Anonymous web analytics — on looknapp.com only (not the app), via Microsoft Clarity, and only after you accept the cookie banner.
❓ What we never collect
- The words in your journal entries. Ever. Not for analytics, not to train AI, not for support.
- The contents of your task or mood notes — usage signals only see things like emoji or completion time, never the free-text you wrote.
- Your contacts, photos, calendar, location, microphone, biometric data — unless a specific feature asks and you say yes.
- Advertising IDs, ad targeting, behavioral profiles. There are no ads in Lookn.
🔒 Who can see your data
- You — through the app.
- The companies we use to run Lookn — Amazon Web Services (the secure cloud where your data lives), Apple and Google (for app delivery and handling subscription billing), and Microsoft Clarity (for anonymous website analytics only — never inside the app). They process data on our behalf under their own privacy commitments. No one at these companies is reading your journals.
- Us — only as anonymous aggregate numbers, or as your specific account data if you email support and ask us to look at something.
🎛️ Your controls
- Export — email support@looknapp.com, we send a JSON copy within 30 days.
- Delete — see Deleting your account.
- Stop anonymous analytics — Settings → Privacy → Analytics → off (in the app), or Decline the cookie banner on the website.
- Stop notifications — Settings → Notifications, or your phone's system settings.
💬 FAQ
Do you sell my data?
No. Not to advertisers, not to data brokers, not to AI model providers. If we're ever acquired, the same promise has to come with the deal.
Where are my data stored?
AWS US regions. Encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed — we can't see them, only let you reset them.
I'm in the EU / Canada / California — do I have rights?
Yes. GDPR, PIPEDA, and CCPA all give you the right to access, correct, delete, and export your data. Email support@looknapp.com and we respond within 30 days.