Privacy Policy
Who Are We? What Is the Purpose of This Policy?
Your privacy is important to us. This Privacy Policy explains how Dr.LOOK E-Commerce Limited, operating under the trade name Dr.LookAI ("Company," "we," "us," or "our"), collects, uses, discloses, and protects personal information. Dr.LOOK E-Commerce Limited is based in Hong Kong.
By reading this Privacy Policy, you demonstrate your concern for privacy and data protection when using AI-powered products and services. At Dr.LookAI, we fully understand the importance of this trust and place the protection of your personal information at the center of everything we do.
Dr.LookAI (hereinafter referred to as “Dr.LookAI,” “we,” “us,” or “our”) is an AI technology company focused on providing intelligent AI-powered experiences, including AI conversations, image recognition, image generation, and creative content generation services.
Our product, Dr.LookAI, is an AI learning camera device that helps users explore, recognize, and create through artificial intelligence. The device supports multiple AI-powered interaction methods, including: an integrated camera that captures or takes photos and visual content for image recognition and AI analysis, a microphone that enables voice conversations and speech interaction with AI, and cloud-based AI generation capabilities that allow users to capture or take images to create cartoon-style artworks, creative visual effects, and other AI-generated image transformations.
To provide these features, we may process user-submitted content such as text prompts, photos or images taken by the device, voice inputs, and AI-generated outputs. Some AI functionalities may require secure cloud-based processing through trusted third-party AI infrastructure providers.
All data processing activities are conducted in strict accordance with applicable laws, regulations, and privacy protection requirements, aiming to enhance your experience and interaction with the product.
Given that Dr.LookAI processes various types of potentially sensitive data, including photos taken by the device, voice interactions, AI conversation content, and AI-generated creative outputs, this Privacy Policy aims to transparently explain what information we collect, why we collect it, how we use it, how we protect it, and the choices and control you have over your information. We are committed to using this data solely to provide and improve AI-powered learning, recognition, communication, and creative generation experiences, and never for unauthorized or unrelated purposes.
This Privacy Policy clearly explains how we collect, use, process, store, disclose, and protect your personal information while outlining the rights available to you under applicable data protection laws.
Protecting user privacy is one of the foundational principles of Dr.LookAI. We are committed to handling your data in a transparent, cautious, and compliant manner.
To achieve this, we follow industry best practices and applicable legal requirements, including the following principles:
You retain control over your personal information. We collect and process only the information necessary to provide and improve our services.
For functions involving sensitive permissions or data access, including:
• Camera access
• Photo album access
• Microphone access
• Voice interaction
• Cloud-based AI processing
we will inform you of the purpose before access and process data only after obtaining your authorization where required by law.
You may manage, adjust, or revoke permissions at any time through your device settings or privacy management within the product. Once permissions are revoked, we will stop processing the relevant data except where retention is legally required.
You may request deletion of content you capture, upload, create, or generate through our services, including:
• photos taken by the device
• AI conversation content
• Voice inputs
• AI-generated images
• Creative outputs
• Associated interaction records
When you request deletion:
1. We will verify and process the request within a reasonable period.
2. The content will be removed from our online systems.
3. Backup copies will be deleted during the normal backup overwrite cycle.
4. Deleted information may become permanently unrecoverable.
We implement technical and organizational safeguards to ensure deletion requests are handled securely and in accordance with applicable laws.
Purpose Limitation and Data Minimization
We strictly follow the principles of processing personal information for specific, clearly defined, and lawful purposes. Your data is used only to provide and improve our services, maintain product functionality and security, and comply with applicable legal obligations.
In addition, we are committed to the following:
1. We do not use your content to train third-party AI models.
2. We do not share your personal content with other Dr.LookAI users or unrelated third parties.
3. We do not use collected information for purposes unrelated to the original intended use without your authorization.
All data processing activities are carried out under the principle of data minimization, meaning we only collect and process the minimum amount of information necessary to provide the relevant functionality or service.
Prohibition of Selling Personal Information
We do not sell, rent, or otherwise monetize your personal information, nor do we share your data with third parties for commercial advertising or marketing purposes. Your personal content is not used to serve advertisements, and we do not build commercial advertising profiles based on your personal information.
Our business model is based on providing user-focused products, AI-powered services, subscriptions, and related hardware or software offerings, rather than exploiting or trading user data.
In addition, we strictly prohibit our partners and service providers from using your information in any manner inconsistent with this Privacy Policy. All third-party providers are required to undergo rigorous data protection and security assessments and must comply with privacy and security standards that are equivalent to or stronger than our own.
To provide personalized, secure, and reliable services, we may collect the following categories of information.
All collected information is protected using industry-standard security measures and encryption where appropriate.
Here are the types of information we may collect during service provision:
Information You Provide Directly
Including:
• Email address
• Login credentials
• Account preferences
• Subscription or billing information
used for account creation, authentication, and service management.
When using AI-powered features, we may collect and process:
• User messages and prompts submitted to AI features
• AI conversation content
• photos taken by the device
• Voice recordings or speech inputs
• User instructions and creative requests
• Interaction history associated with AI services
This information is necessary for generating AI responses, enabling image recognition, and providing personalized AI experiences.
1.3 AI Recognition and Image Processing Data
When you voluntarily capture or take photos for AI analysis or generation, we may process:
• Photos and images captured through the device or application
• Visual content submitted for AI recognition, analysis, or generation
• Image data necessary to provide AI-powered visual features and effects
For example, users may capture or take photos for:
• AI recognition and analysis
• AI-enhanced visual effects
• Cartoon-style image generation
• Artistic transformations
• Creative AI outputs
1.4 AI-Generated Content and Creative Output Data
We may collect and store AI-generated outputs associated with your use of the services, including:
• AI-generated images
• Cartoon-style artwork
• Generated text responses
• Creative edits and transformations
• User-generated AI projects
Generated outputs may be stored temporarily or persistently depending on service functionality and your settings.
Including:
• Feature usage frequency
• Interaction duration
• Application activity
• Crash reports
• Performance diagnostics
• Device interaction behavior
used to improve service quality and stability.
Including:
• Customer support requests
• Feedback submissions
• Survey responses
• Communications with our support team
Automatically Collected Information
We may automatically collect technical information including:
• IP address
• Device type and operating system
• Browser type
• Application version
• Diagnostic logs
• Approximate geographic location (such as city-level location)
• Network and connection information
Information from Third-Party Sources
When you authorize Dr.LookAI to connect to third-party services (such as Apple, Google, etc.) we may receive limited information necessary to provide those integrations.
Examples may include:
• Cloud storage integrations
• Authentication providers
• Productivity or content-sharing platforms
We process such data in accordance with applicable platform policies and legal requirements.
How We Use Personal Information
We primarily process your personal information in order to provide, operate, improve, and maintain the security and reliability of our products and services. All processing activities are carried out in accordance with lawful, legitimate, and necessary principles. The specific purposes include, but are not limited to, the following:
Service Delivery and Operation (Based on Contract and User Authorization)
We use personal information to:
1. Create and manage your user account.
2. Enable and deliver the core functions of the Dr.LookAI device and associated applications.
3. Set up service preferences, personalized experiences, and cross-device feature synchronization.
4. Handle orders, subscriptions, payments, and billing processes.
5. Support daily operations and system maintenance to ensure stable and proper product functionality.
Communication and Customer Support (Based on Legitimate Commercial Interest or User Authorization)
To ensure you receive timely and relevant service-related information, we may use your personal information to:
1. Respond to your inquiries, feedback, and customer support requests.
2. Send essential service notifications, such as feature updates, system changes, security alerts, or policy modifications.
3. With your consent, share product updates or usage guidance related to our services.
We will not use communication content for any unauthorized marketing or advertising purposes.
Service Improvement, Performance Optimization, and Security (Based on Legitimate Commercial Interest)
We may use personal information within the minimum necessary scope to:
1. Analyze product usage patterns, device performance, and feature behavior.
2. Identify and resolve technical issues, including debugging, testing, and system optimization.
3. Monitor system operations to ensure stability, reliability, and compatibility.
4. Prevent, detect, and address fraud, abuse, security risks, and policy violations.
5. Enhance interaction experiences, improve model accuracy, and optimize AI performance.
Where possible, we apply anonymization or pseudonymization techniques.
Anonymized Research, Statistics, and Internal Analysis (Based on Legitimate Commercial Interest)
We may aggregate, anonymize, or de-identify information for:
1. Conduct internal business analysis and evaluate operational efficiency.
2. Support product improvements, model optimization, and feature iterations.
3. Analyze user behavior trends and optimize service experience.
4. Generate insights on market and industry trends.
Anonymized data does not include any personally identifiable information and will not be used in any way that could impact your individual rights or decisions about you.
Legal Compliance, Rights Protection, and Risk Management (Based on Legal Obligations or Legitimate Interests)
When required by applicable law or to protect the legal rights and interests of you, us, or third parties, we may process your personal information for the following purposes:
1. Comply with applicable laws, regulations, and lawful enforcement requests.
2. Enforce our Terms of Service and related policies.
3. Prevent, detect, and investigate potential illegal activities, fraud, or security incidents.
4. Protect the rights, property, and safety of Dr.LookAI, our users, and the public.
We will carry out such processing strictly within the scope permitted by applicable law.
How We Disclose Personal Information
We do not sell your personal information, nor do we share it with third parties for commercial profit or marketing purposes. We only disclose personal information in limited, specific, and lawful situations, and ensure that all such disclosures comply with applicable laws, contractual requirements, and relevant privacy protection standards. These situations include, but are not limited to, the following:
We may disclose personal information to third-party service providers that act on our behalf to support the delivery, operation, and maintenance of our products and services. These services may include, but are not limited to:
• Cloud computing and data hosting services
• Communication and message delivery services
• Data and network security monitoring services
• Fraud detection, anomaly analysis, and risk prevention services
• Bias detection and AI model evaluation services
• Security investigations and incident response services
• Web, application, and mobile analytics services
• Email, push notification distribution, tracking, and monitoring services
All service providers are bound by strict confidentiality and data protection obligations through contractual agreements and are only permitted to process your information to the extent necessary to perform the services we have engaged them to provide.
2. Third-Party AI Service Providers
To provide AI-powered features, certain user content may be securely processed by trusted third-party AI providers and cloud infrastructure providers, including:
• OpenAI (text-based large language model processing services)
• Google AI (image generation and text-to-speech TTS services)
• Microsoft Azure AI (speech recognition ASR and text-to-speech TTS services)
• Amazon Web Services (cloud infrastructure services)
Depending on the feature used, data that may be processed includes:
• User prompts and AI conversation content
• Photos captured or taken by users
• Voice recordings and speech inputs
• AI-generated outputs
• Device, diagnostic, and usage information related to AI functionality
We impose strict requirements on such service providers, including that they must:
• Use your data exclusively for the purpose of delivering AI services to us
• Not use your personal information to train their own or any third-party AI models
• Comply with data security and confidentiality standards that are equal to or stricter than our internal requirements
• Implement appropriate technical safeguards and access controls to prevent unauthorized access or misuse
Where necessary to support the provision of professional services, we may disclose personal information to the following categories of professional advisors:
• Legal counsel (law firms)
• Auditors and accounting professionals
• Banks and payment service providers
• Insurance providers and risk management institutions
Such advisors are permitted to use personal information solely for the purpose of providing the relevant professional services, and are bound by professional and legal confidentiality obligations.
4. Legal and Regulatory Requirements
We may disclose personal information where we reasonably determine that such disclosure is necessary or appropriate for the following purposes:
• To comply with applicable laws, regulations, court orders, or regulatory obligations
• To respond to lawful requests from law enforcement agencies, government authorities, or other entities with legal authority
• To investigate, prevent, or address suspected illegal activities, fraud, abuse, or security incidents
• To protect the rights, property, safety, or legitimate interests of Dr.LookAI, our users, or the public
We will review and evaluate all such requests to ensure compliance with applicable laws and limit disclosure to what is legally required.
In the event of any of the following transactions involving Dr.LookAI (or its affiliates), we may disclose or transfer personal information to relevant parties involved in such transactions:
• Mergers, acquisitions, or changes in ownership
• Asset sales or business transfers
• Corporate restructuring or spin-offs
• Bankruptcy, liquidation, or similar proceedings
• Due diligence activities or negotiations related to any of the above
We will ensure that any successor entity remains bound by this Privacy Policy or is subject to data protection obligations that provide a level of protection no less stringent than those described herein.
Your Privacy Rights and Choices
We respect and support your right to manage your personal information and provide you with corresponding rights in accordance with applicable data protection laws. Subject to certain limitations, you may request access to, correction of, deletion of, restriction of, or other control over how your personal information is processed. These rights include:
Right of Access and Correction
You have the right to access the personal information we hold about you and to review its accuracy and completeness. If you believe the information is inaccurate or incomplete, you may update it through your account settings or submit a correction request. We will handle such requests within the timeframes required by applicable law.
Right to Deletion (“Right to Be Forgotten”)
Under certain conditions, you may request deletion of your personal information, for example when:
• The information is no longer necessary for providing our services
• You withdraw consent for certain processing activities
• You believe the information has been processed unlawfully
Please note that we may be required to retain certain information to comply with legal obligations or for legitimate business purposes (such as accounting or audit requirements). In such cases, we will ensure retention is limited strictly to what is necessary.
You may request account deletion through in-app settings or by contacting us through email support@drlookai.ai.
Upon deletion:
• Personal data will be deleted or anonymized from active systems
• Certain records may be retained as legally required
• Services associated with the account may become permanently unavailable
We may verify identity before processing requests.
Right to Restrict Processing and Right to Object
In certain circumstances, you may request that we restrict the processing of your personal information, for example when:
• The accuracy of your personal information is being verified
• The processing has no clear lawful basis, but you prefer not to have the data deleted
• You are assessing whether our processing based on legitimate interests is appropriate
In addition, you have the right to object, based on your specific situation, to certain processing activities carried out on the basis of legitimate interests (such as usage analytics). We will review your request and continue processing only where legally permitted.
Where applicable, you may also have the right to receive a copy of your personal information that you have provided to us in a structured, commonly used, and machine-readable format, and, where technically feasible, request that we transmit this data to another service provider of your choice.
Push Notifications and Permissions
You may manage:
• Push notifications
• Camera permissions
• Microphone permissions
• Photo library access
through device settings or in-app controls.
To exercise any of the rights described above, please submit your request using the contact details provided in the “How to Contact Us” section of this Privacy Policy.
To safeguard your personal information, we may require identity verification before we can process your request.
Depending on applicable laws in your jurisdiction, you may also have the right to file a complaint with your local data protection authority if you believe that our processing of your personal information does not comply with relevant legal requirements.
Data Storage and International Transfers
We use globally recognized service providers, such as Amazon Cloud, for data storage and processing. As a result, your information may be transferred to and processed on servers located outside your country or region of residence. When carrying out such cross-border transfers, we implement appropriate safeguards in accordance with applicable data protection laws (such as the EU Standard Contractual Clauses) to ensure the protection of your personal information.
The personal information we collect may be stored or processed in Singapore, the United States, the European Union or European Economic Area, the United Kingdom, and other places where we or our service providers operate.
Where personal information is transferred across borders, the countries involved may not provide the same level of data protection as the country in which the information was originally collected.
Where applicable law requires safeguards for cross-border transfers, we will take steps reasonably designed to implement those safeguards, which may include contractual protections, technical measures, organizational measures, or other steps required or permitted by law.
Personal Information Retention
We retain personal information only as long as necessary for:
• Providing services
• Fulfilling contractual obligations
• Security and fraud prevention
• Legal and accounting compliance
• Resolving disputes
Retention periods depend on the type of information and applicable legal requirements.
Our services may contain links to third-party websites or services.
This Privacy Policy applies only to Dr.LookAI services. We encourage users to review the privacy policies of third-party services independently.
We implement industry-standard technical, physical, and organizational security measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction.
Security measures may include:
• Encryption in transit and at rest
• Access controls
• Security monitoring
• Internal data protection procedures
However, no internet transmission or electronic storage system can be guaranteed completely secure.
Children's Privacy and Parental Consent
The Dr.LookAI Device and App are designed for use by children aged 3 and older. We are committed to protecting children's privacy and to complying with child privacy laws that apply to our Services, including COPPA in the United States and comparable requirements that may apply in other jurisdictions.
Parents, Guardians, and Regional Age Thresholds
In some jurisdictions, including parts of the EEA and the UK, a child may not be able to consent to certain data processing activities on their own. In those cases, a parent or legal guardian must provide the permissions or consents required by applicable law before the child uses the relevant features of the Services.
Parental Consent and Account Management
Parents and legal guardians are responsible for account registration, consent decisions, device settings, and parental controls associated with a child's use of the Services. Where applicable law requires parental consent before personal information is collected from a child, that consent is required during account registration and before child-facing features that rely on personal information are activated.
Our current Verifiable Parental Consent method uses an email plus confirmation flow. During registration, the parent or guardian provides an email address, we send a consent or confirmation message to that address, and the account holder must follow the instructions in that message before relevant child-facing account features are fully enabled.
We keep records of consent status, confirmation history, and the account information associated with that consent so we can manage permissions, respond to parental requests, and demonstrate compliance where required. Parents may review, update, or revoke consent through available account settings or by contacting support@drlookai.ai.
Service Providers and Child Data
We may disclose children's personal information to service providers that help us operate, host, secure, support, or improve the Services, but only as reasonably necessary for those purposes and subject to applicable law.
Parents and legal guardians have the right to:
• Review the personal information collected from their child
• Request deletion of their child's personal information
• Refuse further collection or use of their child's personal information
• Revoke previously given consent at any time
• Control and configure the child's access to features through the App's parental controls
• Report concerns about content, safety, or product functionality
To exercise any of these rights, please contact us at support@drlookai.ai. Include "Children's Privacy" in the subject line of your email.
The types of data collected from or about children during use of the Services are described in Section 2.3 of this Privacy Policy. We use that data to provide, maintain, secure, support, and improve the Services, personalize educational experiences, manage accounts, and communicate with parents or guardians about service-related matters, subject to applicable law.
No Advertising or Behavioral Profiling
The Services do not display advertisements to children. The Company does not use data collected from children for targeted advertising, behavioral profiling, or the sale or sharing of personal information to third parties for marketing purposes. The Services do not use children's personal information for advertising-related AI profiling, behavioral targeting, or third-party AI model development purposes.
Images, Voice Data, and Similar Inputs
The Device may process images, voice recordings, and similar inputs to provide recognition, educational, and interactive features. We do not use the Services for facial recognition for identity, biometric identification, surveillance, tracking, profiling of children, or biometric database creation. Images and voice data are used only for requested feature functionality, service support, safety, and the limited purposes described in this Privacy Policy.
AI-assisted processing of such inputs may involve secure transmission of limited data necessary to provide requested functionality, including image, voice, or text inputs. Such processing is performed within infrastructure controlled and managed by the Company or through service providers acting on behalf of the Company under contractual restrictions. Such data is not used for independent commercial purposes, advertising, or general-purpose AI model training.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in laws, technology, or business practices.
Updated versions will be posted with a revised “Last Updated” date. Material changes may be communicated through email, notifications, or service announcements where appropriate.
Your continued use of the services after updates become effective constitutes acceptance of the revised Privacy Policy.
We, Dr.LOOK E-Commerce Limited, operating under the trade name Dr.LookAI, act as a data controller with respect to the personal information described in this Privacy Policy to the extent applicable UK law says we do.
For any questions or concerns regarding your privacy, you may contact us using the following details:
Company: Dr.LOOK E-Commerce Limited
Trade Name: Dr.LookAI
Privacy Contact: support@drlookai.ai
Website: https://www.drlookai.ai
Location: Hong Kong. For requests related to children's privacy, parental rights, or COPPA inquiries, please include "Children's Privacy" in the subject line of your email.