Privacy Policy

1. Who is responsible

The controller of your personal data is Westbridge, MB, a small partnership registered in the Republic of Lithuania, operating the Look Like Us service at looklike.us ("we", "us").

For privacy requests, including access, correction, or deletion, email hello@looklike.us. We will respond within the time required by applicable law (generally one month under the GDPR, extendable where the request is complex).

2. Scope

This policy covers the website, web app, progressive web app, quiz, membership, and related emails. It does not cover third-party websites we link to. Payment card data is handled by Stripe, not stored on our servers in a form that lets us see your full card number.

If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, we process personal data under the GDPR or equivalent rules as described below.

3. Data we collect

Account data. Email address, name if you provide one, password hash (if you sign up with email), and identifiers from Google or Apple if you use those sign-in options. We also store an internal user ID and profile fields such as avatar URL if you set one.

Quiz and fitness data. Information you enter to generate a blueprint, which may include sex or gender, age, height, weight, goal weight, goal type (for example fat loss or muscle gain), and activity level. If you later log meals, workouts, measurements, or progress photos, we store those so we can show your dashboard.

Guest leads. If you complete the quiz before creating an account, we may store the email you submit so we can save your result and contact you about the service. Pending quiz answers may also be kept in your browser until you sign in.

Membership and purchases. Subscription status, trial start time, whether a membership is set to cancel at period end, Stripe customer and subscription identifiers, and records of blueprint access. We do not store full payment card numbers. Stripe processes the card and sends us limited billing metadata (for example last four digits, brand, and payment status).

Usage and device data. Pages viewed, approximate location from IP address, browser type, device type, language, referring URL, and diagnostic logs needed to keep the service secure and working. If you install the app as a PWA, the browser may store files locally for offline or faster loading.

Support. The content of emails you send to hello@looklike.us, and any information you include so we can help you.

Cookies and similar technologies. See our Cookie Policy for detail. Essential cookies keep you signed in and remember theme and cookie choices. Analytics cookies are used only if you agree.

4. Why we use your data (legal bases)

Where the GDPR applies, we rely on these bases:

• Contract. To create your account, run the quiz, deliver trial or paid access, process subscriptions through Stripe, and provide customer support.
• Legitimate interests. To keep the service secure, prevent fraud and trial abuse, understand how the product is used at an aggregate level, and improve features. You may object to processing based on legitimate interests as described in section 9.
• Consent. For non-essential cookies and any optional marketing email we may send. You can withdraw consent at any time without affecting processing that already happened.
• Legal obligation. To keep tax, accounting, and dispute records, and to respond to lawful requests from authorities.

We use fitness and quiz data to personalise meal and workout recommendations. That is health-adjacent information you volunteer. We do not use it to make automated decisions that produce legal effects about you (for example credit, employment, or insurance). Calorie and training numbers are informational tools, not medical determinations.

5. How we use it

• Operate Look Like Us, including blueprints, meal plans, workouts, and tracking
• Authenticate you and keep your session secure
• Start and end the 48-hour free trial, and bill memberships you choose to buy
• Send service messages such as receipts, password resets, and security notices
• Respond to support requests
• Detect abuse, debug outages, and protect the service
• Improve content and product design, using aggregated or de-identified insights where we can

We do not sell your personal data. We do not rent your email list. We do not use your progress photos for advertising without a separate, explicit agreement.

6. Who we share data with

We share data with processors who help us run the product, under contracts that require them to use it only on our instructions:

• Supabase. Authentication, database, and related backend infrastructure.
• Stripe.Payment processing, invoices, and fraud checks for paid memberships and refunds. Stripe's privacy policy applies to data Stripe holds as an independent or joint processor depending on the operation.
• Hosting and content delivery. The servers and CDN that serve the website and media files (for example application hosting and image/video delivery).
• Google and Apple. If you choose to sign in with those providers, they authenticate you and share the account identifiers and email they are configured to release.
• Analytics providers. Only if you accept non-essential cookies, and only to the extent we have enabled them.

We may also disclose information if required by law, to protect our users or Westbridge, MB, or in connection with a merger, acquisition, or restructuring, in which case we will require the recipient to honour this policy or give you notice.

7. International transfers

We are established in Lithuania. Some processors are in the United States or other countries. Where we transfer personal data out of the EEA or UK, we use a lawful mechanism such as the European Commission's Standard Contractual Clauses, an adequacy decision, or another recognised safeguard, together with supplementary measures where needed.

8. Retention

We keep account and profile data for as long as your account is open. If you ask us to delete your account, we will delete or irreversibly anonymise personal data that we do not need to keep. We may retain limited records after closure where we must, for example:

• Stripe and tax records, typically for the period required by Lithuanian accounting and tax law (often several years)
• Records of a dispute, chargeback, or security incident, until the matter is resolved plus a reasonable archive period
• Backups, which rotate on a schedule and are not used for day-to-day operations

Quiz answers stored only in your browser remain until you clear site data or complete sign-up. Guest emails submitted through the quiz are kept so we can associate a later account or as a lead, until you ask us to delete them or they are no longer needed.

Trial timestamps are kept so we can enforce one free trial per account and explain your access history if you contact support.

9. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete data in certain circumstances
• Restrict or object to certain processing, including processing based on legitimate interests
• Receive data you provided to us in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

In Lithuania the supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). If you live elsewhere in the EEA or the UK, you may contact your local authority instead.

You can update many profile fields in Settings. For deletion of an account or a request we cannot complete in the product, email hello@looklike.us from the address on the account. We may need to verify it is you before we act.

10. Security

We use HTTPS, hashed passwords, access-controlled databases, and vendor security practices. No method of transmission or storage is perfectly secure. You should use a unique password and keep your device locked. Tell us promptly if you think your account was compromised.

11. Children

The service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have, contact us and we will delete it.

12. Automated decision-making

The quiz applies formulas (for example estimated calorie targets) to the numbers you enter. That is not profiling that produces legal or similarly significant effects. We do not use solely automated decisions to set prices in a discriminatory way or to deny you a fundamental right.

13. Changes

We may update this policy. The current version is always on this page. If we make a material change, we will provide a notice that is reasonable in the circumstances. Continued use after the effective date means you acknowledge the updated policy.

14. Contact

Westbridge, MB
Look Like Us — privacy
hello@looklike.us