1. Information We Collect

We collect information to provide and improve our Service to you. The types of information we may collect include:

• Account Information:When you create an account, we collect your email address, chosen username, and a hashed version of your password. Your email is used for account verification, password resets, and essential Service communications. If you sign up via a referral link, we may also store the UID of the user who referred you to award points appropriately.
• Profile Information (Optional):You may choose to provide additional information for your profile, such as a profile picture, links to your TikTok or Instagram profiles. This information, if provided, can be publicly visible within the App (e.g., on leaderboards or your profile page). You control what optional profile information you provide.
• Outfit Submissions & AI Interaction Data:
  • Outfit Images: We collect the images of outfits you upload. These images are sent to our AI service provider for analysis. If you choose to submit your rated outfit to the daily leaderboard, the image and its AI rating will be stored and publicly displayed within the App on that leaderboard.
  • AI Feedback: We store the AI-generated rating, critiques, and suggestions associated with your outfit submissions that are posted to the leaderboard. This is displayed publicly alongside your outfit on the leaderboard.
  • User Responsibility for Images: You are responsible for the images you upload. Please ensure you have the right to use them and that they do not contain sensitive personal information you do not wish to share, especially if submitting to the public leaderboard. Crucially, do not upload images of other people without their explicit consent (see our Terms of Service).
• Usage and Engagement Data:We collect information about your interactions with the Service, such as your LukuPoints earned, Badges achieved, LukuStreak progress (based on submission dates), and AI usage counts (to manage daily limits, this count resets daily). We also record the date of your last login (for system maintenance) and last outfit submission (for streak calculations).
• Technical Information (Automatically Collected via Firebase):Our Service is built on Firebase (a Google platform). Firebase may automatically collect certain technical information when you use the Service, such as your IP address (which can be used to estimate your general location), device type, operating system, Firebase installation IDs, and access times. This information is primarily used by Firebase for service operation, security, analytics, and to ensure the reliability of their services. We, as the LukuCheck creator, have limited access to this raw data, primarily in aggregated or anonymized forms for understanding app usage. Please refer to Firebase's privacy policy for more details on their data collection.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Service (e.g., manage your account, authenticate you, process outfit uploads, display leaderboards, calculate LukuPoints and streaks).
• To provide you with AI-powered feedback on your outfits.
• To personalize your experience within the App, such as displaying your username and profile picture.
• To communicate with you for essential service-related purposes, such as sending email verification, password reset emails, or important updates regarding the Service or these policies. We do not currently send marketing or promotional emails.
• To monitor and analyze usage and trends to improve the Service, identify bugs, and develop new features.
• To enforce our Terms of Service and maintain a safe, respectful, and fair community.
• To process referrals and award relevant points/badges.
• To manage AI usage limits and ensure fair access to AI features.

3. How We Share Your Information

We understand the importance of your privacy and do not sell your personal information. We may share your information only in the following limited circumstances:

• Publicly on LukuCheck (Information YOU Choose to Make Public):Certain information is public by the nature of the Service if you participate in public features:
  • Your username and profile picture (if you provide one) are visible on leaderboards and your profile.
  • Outfit images you submit to the leaderboard, along with their AI rating and associated AI feedback, are publicly visible on the leaderboard for that day.
  • Your LukuPoints total and earned Badges may be displayed on leaderboards or your profile.
  • Links to your TikTok or Instagram if you've added them to your profile and they are displayed on the leaderboard.

  You are responsible for ensuring you have the necessary rights and consents for any content, particularly images featuring identifiable individuals, that you make public through the Service. Please refer to our Terms of Service for content standards.

• With Service Providers (Third Parties): We use third-party services to help us operate LukuCheck. These providers only have access to your information to perform tasks on our behalf and are obligated (by us or by their own terms) not to disclose or use it for other purposes.
  • Firebase (Google): We use Firebase for core functionalities including authentication, database (Firestore for user profiles, leaderboard data, etc.), image storage (Cloud Storage for outfit and profile pictures), and application hosting. Firebase's privacy policy and terms apply to their data processing. You can learn more about Firebase's privacy practices on their website.
  • Google AI (Gemini models via Genkit): When you submit an outfit for AI analysis, the image data is sent to Google's AI models for processing to generate the rating and feedback. No other personal user data (like your UID or email) is sent with the image for the analysis itself. Google's privacy policy and terms for their AI services apply to this processing.
• For Legal Reasons or to Prevent Harm: We may disclose your information if we believe in good faith that it's reasonably necessary to:
  • Comply with a law, regulation, valid legal process (e.g., a subpoena or court order), or governmental request.
  • Protect the safety, rights, or property of any person, LukuCheck, its creator, or the public.
  • Detect, prevent, or otherwise address fraud, security, or technical issues.
  • Enforce our Terms of Service.
• Business Transfers/Project Evolution: If LukuCheck (or its assets) were to be acquired, or if the project evolves into a more formal entity or is transferred to another party, your user information would likely be one of the assets transferred or acquired by a third party. We would endeavor to provide notice (e.g., via the App or your registered email) if your personal information becomes subject to a different privacy policy.

4. Data Security

We take reasonable measures to help protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We primarily rely on Firebase's security infrastructure for data storage (encryption at rest, secure data centers) and authentication (hashed passwords, secure protocols). However, please remember that no internet or email transmission is ever fully secure or error-free, and no security system is impenetrable. You are also responsible for keeping your account password confidential and using a strong, unique password.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service and achieve the purposes described in this policy.

We may also retain anonymized or aggregated data that does not personally identify you for analytical or service improvement purposes indefinitely.

6. Your Choices and Rights

You have certain choices and rights regarding your personal information:

• Access and Update: You can access and update certain personal information (like your username, profile picture, optional social links) through your account settings within the App. Your email address cannot be changed after account creation.
• Account Deletion: You can request to delete your account through the App's profile settings. This will initiate the data deletion process as described in the "Data Retention" section. Please note that account deletion is permanent and irreversible.
• Email Communications: You will receive transactional emails (like email verification for account creation and password resets). We do not currently send marketing or promotional emails.
• Data Protection Rights (e.g., under Kenyan Law): If you are in Kenya, you may have certain rights under the Data Protection Act, 2019, including the right to access your personal data, request correction or deletion of your data, object to processing in certain circumstances, and the right to data portability. To exercise these rights, or if you have questions about them, please contact us at lxmwaniky@gmail.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. Children's Privacy

LukuCheck is not intended for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take steps to delete such information from our files and terminate the child's account. If you believe we might have any information from or about a child under 13, please contact us.

8. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers and servers located outside of your state, province, country (including Kenya), or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. For example, Firebase servers, which we use, are located globally, including in the United States. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and may provide additional notice through the App or via your registered email address prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy, our data practices, or if you wish to exercise your privacy rights, please contact us at: lxmwaniky@gmail.com.

As LukuCheck is based in Kenya, we strive to comply with the Kenyan Data Protection Act, 2019.