Privacy Policy

This Privacy Policy explains, in plain language, what personal data Viblook ("Viblook", "we", "us") collects, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to the Viblook mobile app and the viblook.app website (together, "the Service"). By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

1. Who is responsible for your data

The data controller is Mattew Thao, sole trader (micro-entreprise), 6 rue Yves Farge, 69700 Givors, France (SIREN 851 652 065). For any privacy question or request, contact us at viblook.app@gmail.com.

2. The data we collect

We collect only what we need to run Viblook. We do not collect your precise location, your contacts, your health data, your browsing history on other apps, or advertising identifiers.

a. Account data

• Your email address, or the identifier provided when you use Sign in with Apple or Sign in with Google.
• A one-time login code is used to sign you in (passwordless). We do not store a password.

b. Photos and images

• The photos of your outfits and of yourself that you choose to submit for rating, look preparation, or your style/body profile.
• Any inspiration photos and any image you choose to send in the Coco chat.
• We only access an image when you actively pick it or take it. We never scan your photo library in the background.

c. Content you create and the results you receive

• The text you type: occasions and requests for looks, and your messages to the Coco AI stylist.
• The results generated for you: outfit scores and advice, prepared looks, your style/body profile, and Coco's replies.
• What you save: your rated outfits, your closet, your saved looks, your profile, and your Coco conversations.

d. Usage and device data

• Preferences and activity needed to run the app: chosen language, streak, poll votes, onboarding choices, notification preferences, subscription status.
• A device identifier we generate, used to link one account to one device (to prevent account sharing and fraud) and basic technical information (device model, operating system) for reliability.
• If you enable notifications, a push token so we can send you the reminders you asked for.

e. Subscription data

• Your Viblook Pro subscription status and purchase history, provided by the app store. Payment is processed by Apple or Google — we never see or store your bank card details.

f. Messages you send us

• The content of any email or in-app feedback/support message you send us.

3. How we collect it

• Directly from you: when you sign in, submit a photo, type a request, chat with Coco, subscribe, or contact us.
• Automatically: minimal technical and usage data generated while you use the app (language, device identifier, subscription status, push token).

4. Why we use your data, and our legal basis (GDPR)

Purpose	Legal basis
Provide the core features: rate outfits, prepare looks, build your style profile, power the Coco chat, and save your content	Performance of our contract with you
Create and manage your account and your Pro subscription	Performance of our contract
Keep the Service secure, prevent fraud and account sharing (one device per account), enforce our Terms	Our legitimate interest in a secure, fair service
Send you the notifications and reminders you turned on	Your consent (you can turn them off anytime)
Optional marketing messages	Your consent (opt-in, never pre-checked)
Improve, debug and maintain the Service	Our legitimate interest
Comply with our legal obligations	Legal obligation

5. AI processing — how it works

• Viblook's core features rely on artificial intelligence. To generate your results, the photos and messages you submit are transmitted to Google (Google LLC) that performs the analysis and returns the result.
• This happens only for the content you actively submit, and only to create the result you asked for (your score, advice, look, profile, or Coco reply).
• This data is not used for advertising, is never sold, and is not used to train the provider's AI models.
• The results are automatically generated and are provided for guidance only; they are not professional advice.
• This AI processing is clearly disclosed inside the app before you sign in, and you accept it in order to use the app.

6. Who we share data with (service providers)

We do not sell your data. We share the strict minimum with trusted providers who act on our behalf and only to deliver the Service. They are bound to protect your data and use it only for that purpose:

• Hosting provider — secure storage of your account, photos and content, on servers located in the European Union.
• Google (Google LLC) — analyzes your submitted photos and messages to generate your results (see section 5).
• Subscription & payment provider and the app stores (Apple, Google) — manage your subscription and process payment.
• Push notification services (Apple, Google) — deliver the notifications you enabled.

We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer, in which case we will let you know.

7. International data transfers

Your account and content are hosted in the European Union. Some providers (for example the AI provider) may process data outside the EU. When that happens, we rely on appropriate safeguards recognised under the GDPR (such as the European Commission's Standard Contractual Clauses) to protect your data.

8. How long we keep your data

• We keep your account data and content for as long as your account is active.
• When you delete your account (directly in the app, Profile tab), your data and your photos are permanently erased, and residual copies in backups are removed within a short period.
• Some limited data may be kept longer only where required by law (e.g. billing records).

9. Your rights

Depending on where you live (in particular under the EU/UK GDPR and similar laws), you have the right to:

• Access the data we hold about you and get a copy.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Portability — receive your data in a usable format.
• Withdraw consent at any time (for notifications or marketing), without affecting past processing.

You can delete your account and content at any time directly in the app (Profile → delete account). For any other request, email viblook.app@gmail.com; we respond within the legal time limits. If you are in the EU, you may also lodge a complaint with your data protection authority (in France, the CNIL — cnil.fr).

10. Security

Data is encrypted in transit, stored on secured infrastructure, and access is restricted to what is necessary. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data. If you believe your account has been compromised, contact us immediately.

11. Notifications

If you allow notifications, we send you the reminders and style tips you turned on. You can disable them at any time in your device settings or in the app. We do not use notifications for third-party advertising.

12. Children

Viblook is not intended for children below the minimum age required in your country and by the app stores. We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If a change is significant, we will let you know in the app or on this page and update the "Last updated" date above.

14. Contact

For any question about your data or this policy: viblook.app@gmail.com.

15. Data controller

The controller of your data is Mattew Thao, sole trader (micro-entreprise), 6 rue Yves Farge, 69700 Givors, France. Contact: viblook.app@gmail.com. See the legal notice.