Look Again - Privacy Policy

Look Again is an iPhone app made by TKT Labs LLC ("we", "us"). This policy explains what the app collects, why, who it is shared with, how long it is kept, and how to delete it. If you have a question, write to tktlabsllc@gmail.com.

The short version

• We don't show ads, track you across other companies' apps or websites, or sell your information.
• We only know your name or email if you choose to sign in with Apple.
• Our analytics aren't linked to your account, name, or email.
• Your saved works, reading progress, and looking history stay on your phone.
• You can delete your account in the app at any time.

What we collect

An account for each install

The first time you open Look Again, it creates an account on our server so the app can check whether you have access to paid features. That account holds a random identifier (your Look Again ID) and the date it was created. It doesn't hold your name, email, or phone number. The app keeps a sign-in token for the account in your iPhone's Keychain.

If you sign in with Apple

Signing in is optional. It keeps your account and subscription when you change phones. If you sign in, Apple gives us a stable identifier for your Apple ID, your email address (or a private relay address, if you chose Hide My Email), and, the first time only, your name. We also keep the tokens Apple issues for your sign-in so that we can end the connection to your Apple ID when you delete your account. We don't send you email.

Purchases

Apple handles payment, so we never see your card or Apple ID details. Our subscription service, RevenueCat, receives your Look Again ID and the App Store's record of your purchases: which subscription, when it started and renews, and whether it began with a free trial. Our server keeps only whether you have access and until when.

Usage analytics

To learn what works in the app and what doesn't, we record events with PostHog, an analytics service. These events cover:

• which works you view and how long you stay on each one;
• which discoveries you reveal, save, report, or look up the source for;
• how far you zoom into a work, but never where;
• which paths you open, which of their questions you reveal, and when you reach a path's ending;
• which search filters you use, but never the words you type;
• when you open the painting of the day, and whether you came from the app, the widget, or a morning note;
• when you turn the morning note on or off or change its time, your answer when the app offers the widget and the note, and when you open the steps for adding the widget;
• when you share a work, which discovery was showing, and which app you shared it to;
• when a shared link opens the app;
• when you see a subscription screen, switch between plans, start a purchase, answer the free-trial reminder, close the screen, start a subscription, or restore purchases;
• when the app is installed, updated, opened, or closed.

Each event includes your device model, iOS version, screen size, app version, whether you have a subscription, and a random analytics identifier that the app creates. These events aren't linked to your account, your Look Again ID, your name, or your email. We don't record your screen or sessions. We've set PostHog not to look up your location and to discard your IP address.

Reports

If you flag a discovery as wrong, we receive the discovery's text, the work it belongs to, your note if you write one, the app and catalog versions, and a random identifier for your install. Reports aren't linked to your account. Please don't include personal information in a note.

Server logs

Like most online services, our servers log the requests the app makes. A log entry includes your IP address, device and app information, the time, and the address that was requested. For a search, that address includes the words you searched for. When the app loads your saved works, or a work a shared link opens, it includes their IDs. We use these logs to run and secure the service, and they're kept for about 30 days.

Sharing a work

When you share a work, the app makes its card on your phone and hands it to the iOS share sheet with a link to lookagain.io. The card and the link carry only the work and the discovery you were on, nothing about you. We receive only the analytics event above.

Our hosting provider Vercel serves lookagain.io. If Look Again is installed, iOS opens the shared work in the app. If it isn't, the browser asks lookagain.io for the link: Vercel logs that request (the IP address, device and browser information, the time, and the address requested) and sends the browser on to Look Again's page on the App Store. The App Store counts installs that come from these links, and Apple reports them to us only as totals.

What stays on your phone

Your saved works, reading progress, the last work you viewed, your settings, a copy of the catalog and its images, and the painting of the day's schedule with the pictures for its widget and morning note are stored only on your phone. Deleting the app removes them. The sign-in token in your Keychain can outlast the app, so reinstalling Look Again on the same phone can bring back the same account.

The app also keeps your looking history on your phone: which works you open and for how long, and what you reveal, save, or zoom into. It keeps it to suggest paths in a later version, and never sends it to us. Deleting the app deletes it.

What we don't collect

Look Again doesn't access your location, contacts, camera, microphone, or advertising identifier, and it never reads your photos. If you choose Save Image when sharing a work, iOS asks your permission to add the card to your photo library; the app can only add to it. It doesn't send crash reports.

Notifications

The app asks permission to send notifications only when you turn on the morning note, or when you start a free trial and tap to be reminded before it ends. Both are scheduled on your phone: the morning note brings the painting of the day at the time you choose, and the reminder comes before the trial ends. Nothing about them is sent to us, apart from the analytics event when you change the morning note. You can turn notifications off in your iPhone's Settings.

How we use information

We use the information above to:

• run the app: your account, access to paid features, and moving a subscription to a new phone;
• improve the app and its writing, using analytics and reports;
• keep the service secure and working, for example by limiting abusive requests;
• meet our legal obligations.

We don't sell or share your personal information for advertising. We don't use it to make automated decisions about you.

If you're in the European Economic Area or the United Kingdom, here is the legal basis for each use:

• Contract. Running your account and subscription is necessary to provide the app you asked for.
• Legitimate interests. Analytics, reports, and security logs. They're limited to what we need and aren't linked to you.
• Consent. Notifications. You can withdraw consent at any time in your iPhone's Settings.

Who we share it with

We share information only with the service providers that run parts of Look Again for us:

• Apple: Sign in with Apple, and payment for subscriptions. Apple's own privacy policy also applies to these.
• RevenueCat, Inc.: managing subscriptions.
• PostHog, Inc.: analytics.
• Google Cloud (Google LLC): hosting our server, database, and logs, and delivering the artwork images. When the app loads an image, Google receives your IP address.
• Vercel, Inc.: hosting lookagain.io, the address of shared links. When someone opens a shared link in a browser, Vercel receives their IP address.

Each provider receives only what it needs to do its job. Each may use the information only to provide its service to us, and is required to protect it at least as well as this policy describes. We may also disclose information when the law requires it, or to a successor if TKT Labs or Look Again is sold or merged. In that case this policy continues to apply to information collected under it.

When you open a museum's page from a work's source, you leave Look Again. The museum's own privacy policy applies from then on.

Where it's processed

We and our providers process information in the United States. If you use Look Again from outside the United States, your information is transferred there. Where the law requires a safeguard for that transfer, we rely on our providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Your account: until it's deleted.
• After you delete your account: it's removed from our database right away, and from our backups within about a week. We also ask RevenueCat to delete its record of you at the same time.
• Server logs: about 30 days.
• Shared-link requests: kept by Vercel for a limited time under its own policy.
• Analytics: kept to understand how the app is used over time. Because they aren't linked to you, we can't find or delete one person's events.
• Reports: kept as the record of corrections to the writing. They aren't linked to your account.
• Apple: keeps its own records of your purchases under Apple's privacy policy.

Deleting your account

Go to Saved, tap the Settings gear, and choose Delete account. Deleting your account:

• removes your account, your Look Again ID, your sign-in records, and your access record;
• ends Sign in with Apple's connection to Look Again;
• asks RevenueCat to delete its record of you.

Saves on your phone stay until you delete the app.

The Delete account button appears once you've signed in with Apple. If you've never signed in, sign in with Apple in the same Settings screen first, then delete the account.

Deleting your account doesn't cancel a subscription. To cancel, open your iPhone's Settings, tap your name, then Subscriptions. Turning off Sign in with Apple for Look Again in your iPhone's Settings doesn't delete your account either; use Delete account in the app.

The app has no setting to turn analytics off. Analytics aren't linked to you, and deleting the app stops all collection.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct it or delete it;
• receive a copy of it;
• restrict or object to how we use it;
• withdraw your consent.

To make a request, write to tktlabsllc@gmail.com. We'll respond within 30 days, and we may ask you to confirm that the account is yours. We won't treat you differently for using these rights.

If you're in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.

We don't sell or share personal information, as California law defines those terms, and we don't use it for targeted advertising.

Children

Look Again isn't directed to children under 13, or under the minimum age where you live, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.

Security

Information travels between the app and our servers over encrypted connections. It's stored with Google Cloud, which encrypts data at rest. Apart from the providers above, only TKT Labs can access it. No system is perfectly secure, but we work to protect your information and keep only what we need.

Changes to this policy

When we change this policy, we'll post the new version here and update the date at the top. If a change significantly affects how we handle your information, we'll give notice before it takes effect, for example in the app.

Contact

TKT Labs LLC
tktlabsllc@gmail.com
tktlabs.llc/contact