Privacy Policy
Last updated: July 2026
Hi, we're LookOver. We built this app because we're riders too, and we understand that your maintenance data matters. This policy explains what data we collect, why we collect it, and how we protect it. We've tried to make it as readable as possible.
Your Privacy at a Glance
We DO
- Store your data securely with encryption
- Let you export all your data anytime
- Delete everything when you ask
- Keep your data private to you
- Keep AI features optional (manual entry always works)
- Tell you about any changes to this policy
We DON'T
- Sell your data to anyone
- Use your data to train AI models
- Share your machines, service records, or photos with advertisers
- Track you in other apps without asking first
- Keep data after you delete your account
What Information We Collect
| Data Type | Examples | Why We Need It |
|---|---|---|
| Account Info | Email, name (if provided) | To create and manage your account |
| Machine Data | Make, model, year, VIN, odometer | To track your vehicles |
| Service Records | Service types, dates, costs, notes | To maintain your history |
| Photos/Files | Service photos, receipts | To document your work |
| Reminders | Service schedules, thresholds | To notify you of due maintenance |
How We Use Your Information
- 1Provide the Service: Store your machines, services, and reminders. Sync across your devices. Send reminder notifications.
- 2Improve the App: Understand how features are used, identify bugs, and make improvements based on usage patterns.
- 3Communicate: Send important updates about your account, respond to support requests, and notify you of policy changes.
- 4Send Push Notifications and Safety Recall Alerts: Deliver reminders, app updates, and safety recall alerts to your device. To check for recalls, we match the make, model, and year of the machines in your garage against the public U.S. recall databases (NHTSA and CPSC) on our own servers. That matching stays in our database. We never collect or use your VIN for this. Delivery runs through OneSignal, which receives your device push token, your account ID and email (to address the notification), and the message itself (title, body, link). It never receives your machine details, VINs, service history, or location. You can turn recall alerts and other notification types on or off anytime in the app.
- 5Process Payments: Handle subscription purchases through Apple App Store and Google Play (we don't see your payment details).
- 6Power Optional AI Features: When you choose to use an AI helper, we send only what that feature needs to process your request. Manual entry always works, and we never train AI models on your data. See AI Features & Your Data below.
AI Features & Your Data
AI is optional and only runs when you ask it to. Manual entry always works, and we never use your data to train AI models.
LookOver has a few optional, Premium AI helpers: logging a service from a sentence you type, scanning a photo or PDF of a receipt or a handwritten log, and suggesting a maintenance schedule for your machine. You choose when to use them. Every one has a manual option right next to it, and the app works fully without ever touching AI.
What we send when you use an AI feature
- Only what that feature needs: the text you typed, or the photo/PDF you chose to scan, plus your machine's make, model, and year. When you scan a service record, the machine's VIN is included so the result matches the right machine.
- Who processes it: OpenAI and Anthropic, through their standard business APIs. We also route these requests through Helicone so we can monitor performance and fix problems you report. For the photo and PDF scans, Helicone records only that a scan ran, never the image or the VIN.
- What we never send: your full garage, service history, reminders, ride routes, or anything from machines you are not actively working with in that moment.
We don't train AI on your data
Your entries and photos are used to give you a result, and that is it. We do not train AI models on your data, and our AI providers do not use data sent through their business APIs to train their models either. There is no LookOver “AI” quietly learning from your machines in the background.
What our AI does not do
It turns what you type or scan into a tidy service record, reminder, or schedule. That is the whole job. It does not look up service manuals, answer open-ended questions, or chat. AI features need an internet connection. Manual entry works offline, 20 miles from the trailhead.
Third-Party Services We Use
We use trusted third-party services to operate LookOver. Each has their own privacy policy governing how they handle data.
| Service | Purpose | Data Shared | Policy |
|---|---|---|---|
| Supabase | Database, authentication, and file storage (our backup and sync backend) | Account info, maintenance records, and photos. Kept private to your account. | View |
| RevenueCat | Subscription management | Purchase history, subscription status, your account ID, email, and display name | View |
| OpenAI | AI-powered service logging and record scanning (Premium, only when you use an AI feature) | The text, CSV, or photos/PDFs of records you choose to send, plus the machine make, model, and year (and the VIN when you scan a service record). Not used to train AI models. | View |
| Anthropic | AI scanning of handwritten maintenance logs you choose to import (Premium) | Photos or PDFs of the logs you scan. No VIN or account details attached. Not used to train AI models. | View |
| Helicone | Monitoring our AI features and diagnosing problems you report | The text of your AI request and the AI's response, tagged with your account email so we can trace an issue. For the photo/PDF scan features, only that a scan ran and whether it succeeded, never the scanned image or the VIN. | View |
| Sentry | Crash and error diagnostics | Error/crash reports, device info, IP address, and app diagnostic logs. On mobile these logs can include your email or account ID so we can trace a problem. Never your machines, service records, or photos. | View |
| Firebase Analytics | App usage analytics (mobile) | Usage statistics tied to your account ID, not your email or name. On iOS, your device advertising identifier (IDFA) is included only if you allow tracking. Android advertising IDs are never collected. | View |
| Google Analytics | Usage analytics on our website and signed-in web companion | Pages viewed, referring campaign (UTM), and general device/browser info, tied to a random analytics ID, not your account. On the web app it records which sections you use, never your machine or service data itself. | View |
| Meta (Facebook) | Ad attribution on iOS (only when you tap Allow on the tracking prompt) | Your device advertising identifier (IDFA), a one-way hash of your email and name, and app events (install, signup, trial start, purchase). Nothing about your machines or service records. | View |
| OneSignal | Delivering push notifications (reminders, recall alerts, app updates) | A push token, your account ID and email (used to address and deliver notifications), and your app language. No machine details, VINs, service records, or location. | View |
| Zoho Campaigns | Newsletter and product update emails (only if you opt in) | The email address and name you enter when subscribing. You can unsubscribe anytime. | View |
| TrailIntel (via Segment) | Measuring which ads drive installs and subscriptions. In the mobile app (iOS only if you allow tracking; Android whenever the feature is active) and on our marketing website (lookover.app). Not used in the signed-in web companion. | In-app: anonymous screens viewed and trial/subscription conversions, including the plan and amount. On the website: marketing pages visited, the referring ad or link, general browser and device info, and IP address. Never your account, email, name, VIN, machines, or service records, and no advertising identifier. | View |
| Google Places | Finding nearby service shops (Service Guidance, Premium-only) | Approximate location at the moment of search (not stored by LookOver) | View |
A note on push notifications: OneSignal is our delivery relay. It receives your device push token, your account ID and email (used to address and deliver the notification), and the message itself (the title, body, and a link) so it reaches your phone through Apple and Google. It never receives your machine inventory, VINs, location, or service history. For safety recall alerts, all of the matching that decides whether a recall is relevant to your garage happens on our own servers using only the make, model, and year you entered.
Location Data
Location is optional. LookOver works fully without it.
LookOver offers an optional ride tracking feature that uses GPS to track distance and duration for your machines.
- When collected: Only during ride tracking sessions you manually start. We never track you passively.
- Background tracking: If enabled, continues while the app is backgrounded so your ride isn't interrupted.
- What we store: Ride summaries (distance, duration, date) and GPX route files linked to your machines.
- Your control: Disable anytime in device settings or simply don't use the feature.
Service Guidance (Premium): nearby shop lookup
When you open the “Take It In” tab on a reminder, LookOver sends your approximate location to Google's Places API to surface nearby service shops and dealers. This is a one-shot lookup, not continuous tracking. Your lat/lng is sent to Google for that single search and is not stored on LookOver's servers. If you never open the Take It In tab, no location is sent.
Advertising & Ad Attribution
You're always asked first. Tap “Ask App Not to Track” and the app works exactly the same. The only thing affected is whether we can measure which ad brought you to us.
LookOver runs ads on Meta (Facebook and Instagram) so we can reach more riders. To know which ads actually work, we use Meta's App Events SDK on iOS to measure conversions. This is only active if you tap Allow on the iOS tracking prompt the first time you open the app.
What we share with Meta (only if you tap Allow)
- Your device advertising identifier (IDFA). A device-level ID that Apple controls. It is not tied to your name, your account, or anything you typed into the app.
- A one-way hash of your email and name. We never send your raw email or name. The SDK turns them into SHA-256 fingerprints before transmission so Meta can match them to an ad click without ever seeing the details themselves.
- App events. Anonymous signals like “installed the app,” “completed signup,” “started a trial,” “subscribed.” No details about which machines you own or what services you logged.
What we never share with Meta
- Your machines, makes, models, VINs, or photos.
- Your service records, costs, or notes.
- Your reminders or maintenance schedules.
- Your ride tracking routes or GPS data.
- Your raw email or phone number.
How to opt out
- At the prompt: Tap “Ask App Not to Track” when you first open the app.
- Later, on iOS: Open the Settings app → Privacy & Security → Tracking → toggle LookOver off.
- Or globally: Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track,” which silently declines every app.
Note: Android users are not part of this program. We do not collect Android advertising IDs.
This measurement runs on your device and follows your tracking choice. We don't bypass that choice with server-side tracking, and we never share your ad-conversion data with Meta for anyone who hasn't tapped Allow.
In the app: measuring which ads work
We also work with an advertising partner, TrailIntel, using a data tool called Segment to route the measurements, so we can see which ads lead to installs and subscriptions. What we send is anonymous and never tied to you.
- What it sees: the screens you view and when you start a trial or subscription, including the plan and amount.
- What it never sees: your email, name, account ID, VIN, machines, service records, photos, or any advertising identifier.
- How it's controlled: turn it off anytime in the app under Settings → General → Ad Measurement, on either platform. On iOS it also requires tapping Allow on the tracking prompt, so declining tracking keeps it off too. On Android it collects no advertising ID.
On our website: measuring which ads work
When you visit our marketing website at lookover.app we use the same partner, TrailIntel, to understand which of our ads brought you there. It runs only in your browser on our public marketing pages. It does not run on the signed-in web companion where your garage lives.
- What it sees: the marketing pages you visit, the ad or link that referred you, general browser and device information, and your IP address.
- What it never sees: your account, machines, service records, photos, or reminders. You are not signed in on the marketing pages, so none of that data is there to collect.
- How to opt out: use your browser's privacy settings or any ad or tracker blocker. Blocking it has no effect on how the app or the web companion works.
Data Security
In Transit
All data sent between your device and our servers uses TLS/HTTPS encryption (the same protection banks use).
At Rest
Your data is stored encrypted on enterprise-grade servers with daily backups and 7-day retention.
Access Control
Database-level security policies ensure only you can access your data. Not other users. Not even us.
Offline First
Your data lives on your device first and syncs when connected. You're never locked out of your records.
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
Your Rights
You Have the Right To:
Children's Privacy
LookOver is not intended for children under 13. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child under 13, please contact us immediately at privacy@lookover.app and we will delete it.
International Data Transfers
LookOver is based in the United States. If you use our service from outside the US, your data will be transferred to and processed in the United States, where data protection laws may differ from your country.
By using LookOver, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data regardless of where it's processed.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last updated" date at the top
- Notify you via email or in-app notification for material changes
- Give you the opportunity to review before changes take effect
Your continued use of LookOver after changes take effect means you accept the updated policy.
Contact Us
Questions about this Privacy Policy? We're happy to help.
Email: privacy@lookover.app
General Support: feedback@lookover.app
Company: LookOver, LLC
Location: Belgrade, Montana, USA