Privacy Policy
Last updated: October 2026
Hi, we're LookOver. We built this app because we're riders too, and we understand that your maintenance data matters. This policy explains what data we collect, why we collect it, and how we protect it. We've tried to make it as readable as possible.
Your Privacy at a Glance
We DO
- Store your data securely with encryption
- Let you export all your data anytime
- Delete everything when you ask
- Keep your data private to you
- Keep AI features optional (manual entry always works)
- Let you turn off partner offers with one switch
- Tell you about any changes to this policy
We DON'T
- Sell your data to anyone
- Use your data to train AI models
- Share your machines, service records, or photos with advertisers
- Tell the brands behind partner offers who you are
- Track you in other apps without asking first
- Read your Apple Health history, or send any health data off your devices
- Scan for nearby Bluetooth devices, or send your ride device's name or address to our servers
- Keep data after you delete your account
What Information We Collect
| Data Type | Examples | Why We Need It |
|---|---|---|
| Account Info | Email, name (if provided) | To create and manage your account |
| Machine Data | Make, model, year, VIN, odometer | To track your vehicles |
| Service Records | Service types, dates, costs, notes | To maintain your history |
| Photos/Files | Service photos, receipts | To document your work |
| Reminders | Service schedules, thresholds | To notify you of due maintenance |
How We Use Your Information
- 1Provide the Service: Store your machines, services, and reminders. Sync across your devices. Send reminder notifications.
- 2Improve the App: Understand how features are used, identify bugs, and make improvements based on usage patterns.
- 3Communicate: Send important updates about your account, respond to support requests, and notify you of policy changes.
- 4Send Push Notifications and Safety Recall Alerts: Deliver reminders, app updates, and safety recall alerts to your device. To check for recalls, we match the make, model, and year of the machines in your garage against the public U.S. recall databases (NHTSA and CPSC) on our own servers. That matching stays in our database. We never collect or use your VIN for this. Delivery runs through OneSignal, which receives your device push token, your account ID and email (to address the notification), and the message itself (title, body, link). It never receives your machine details, VINs, service history, or location. You can turn recall alerts and other notification types on or off anytime in the app.
- 5Process Payments: Handle subscription purchases through Apple App Store and Google Play (we don't see your payment details).
- 6Power Optional AI Features: When you choose to use an AI helper, we send only what that feature needs to process your request. Manual entry always works, and we never train AI models on your data. See AI Features & Your Data below.
AI Features & Your Data
Our AI helpers only run when you ask them to. The one exception is tagging reminder titles for partner offers, which you can turn off. Manual entry always works, and we never use your data to train AI models.
LookOver has a few optional, Premium AI helpers: logging a service from a sentence you type, scanning a photo or PDF of a receipt or a handwritten log, and suggesting a maintenance schedule for your machine. You choose when to use them. Every one has a manual option right next to it, and the app works fully without ever touching AI.
What we send when you use an AI feature
- Only what that feature needs: the text you typed, or the photo/PDF you chose to scan, plus your machine's make, model, and year. Before typed text is sent, we remove anything that looks like an email address, VIN, or phone number. When you scan a service record, the machine's VIN is included so the result matches the right machine.
- Your machine list, for Auto Add only: so Auto Add can tell which machine you mean (“changed the oil in my Yamaha”), it sends each machine's name, year, make, and model. Nothing else about them.
- Who processes it: OpenAI and Anthropic, through their standard business APIs. We also route these requests through Helicone so we can monitor performance and fix problems you report. For the photo and PDF scans, Helicone records only that a scan ran, never the image or the VIN.
- What we never send: your service history, reminder details, ride routes, or notes and files from machines you are not actively working with in that moment. The only exception is partner offers, which send reminder titles on their own (see Partner Offers).
We don't train AI on your data
Your entries and photos are used to give you a result, and that is it. We do not train AI models on your data, and our AI providers do not use data sent through their business APIs to train their models either. There is no LookOver “AI” quietly learning from your machines in the background.
What our AI does not do
It turns what you type or scan into a tidy service record, reminder, or schedule. That is the whole job. It does not look up service manuals, answer open-ended questions, or chat. AI features need an internet connection. Manual entry works offline, 20 miles from the trailhead.
Partner Offers
Brands never learn who you are from LookOver. Turn partner offers off under More > General and none of this happens.
When a reminder is for a job that needs a part, like servicing your air filter, LookOver may show a discount from a brand we partner with. Each one is labeled “Partner offer.” Partner offers are on by default, and you can turn them off anytime under More > General > Show partner offers.
How we match an offer to a reminder
To know which part a reminder needs, we send its title (for example “Clean air filter”) to OpenAI, which tags the part. We send the title only: no account, machine, notes, or other details. We skip any title that looks like it contains an email address or a long number. The tags are saved by title, not by rider, so when two riders have the same reminder title we only ask once. Helicone records only that a request ran, never the title.
What we record
When an offer is shown, and when you copy its code, tap Shop, or dismiss it, we record that event with your account so we can count real riders and stop showing you an offer you dismissed. We use this to report results to our partners as totals only, such as how many riders saw an offer. We never give a partner your name, email, account, machines, or anything else that identifies you.
When you shop
Tapping Shop opens the partner's website. The link tells them the visit came from LookOver, not who you are. Anything you do or buy there is covered by that partner's own privacy policy.
Third-Party Services We Use
We use trusted third-party services to operate LookOver. Each has their own privacy policy governing how they handle data.
| Service | Purpose | Data Shared | Policy |
|---|---|---|---|
| Supabase | Database, authentication, and file storage (our backup and sync backend) | Account info, maintenance records, and photos. Kept private to your account. | View |
| RevenueCat | Subscription management | Purchase history, subscription status, your account ID, email, and display name | View |
| OpenAI | AI-powered service logging and record scanning (Premium, only when you use an AI feature) | The text, CSV, or photos/PDFs of records you choose to send, plus the machine make, model, and year (and the VIN when you scan a service record). Not used to train AI models. | View |
| Anthropic | AI scanning of handwritten maintenance logs you choose to import (Premium) | Photos or PDFs of the logs you scan. No VIN or account details attached. Not used to train AI models. | View |
| Helicone | Monitoring our AI features and diagnosing problems you report | The text of your AI request and the AI's response, tagged with your account ID (never your email) so we can trace an issue. Emails, VINs, and phone numbers in what you type are removed before it's sent. For the photo/PDF scan features, only that a scan ran and whether it succeeded, never the scanned image or the VIN. | View |
| Sentry | Crash and error diagnostics | Error/crash reports, device info, IP address, and app diagnostic logs. On mobile these logs can include your email or account ID so we can trace a problem, and details of what you were doing in the app when it happened, like text you typed into an AI feature. Never your photos. | View |
| Firebase Analytics | App usage analytics (mobile) | Usage statistics tied to your account ID, not your email or name. On iOS, your device advertising identifier (IDFA) is included only if you allow tracking. Android advertising IDs are never collected. | View |
| Google Analytics | Usage analytics on our website and signed-in web companion | Pages viewed, referring campaign (UTM), and general device/browser info, tied to a random analytics ID, not your account. On the web app it records which sections you use, never your machine or service data itself. | View |
| Meta (Facebook) | Ad attribution on iOS (only when you tap Allow on the tracking prompt) | Your device advertising identifier (IDFA), a one-way hash of your email and name, and app events (install, signup, trial start, purchase). Nothing about your machines or service records. | View |
| Insert Affiliate | Runs our creator program: crediting the creator whose link brought you to LookOver so they can be paid a commission, and handling creator sign-ups on lookover.app/creators | In the app: a random install ID, the creator's link code if you came from one, and on Android the Play Store install referrer. On iOS, only if you allow tracking, a one-time snapshot on first launch of your device model, OS version, screen size, memory size, language and region setting, time zone, and network type (Wi-Fi or cellular), used to match your install to a link you tapped. Like any server, Insert Affiliate also sees your IP address. If a creator referred you, your subscription purchases are credited to them through RevenueCat. Never your email, name, machines, or service records. For creators who sign up: the username, email, and password you enter, plus the payout details you give Insert Affiliate. No advertising identifier is ever collected. | View |
| OneSignal | Delivering push notifications (reminders, recall alerts, app updates) | A push token, your account ID and email (used to address and deliver notifications), and your app language. No machine details, VINs, service records, or location. | View |
| Zoho Campaigns | Newsletter and product update emails (only if you opt in) | The email address and name you enter when subscribing. You can unsubscribe anytime. | View |
| TrailIntel (via Segment) | Measuring which ads drive installs and subscriptions. In the mobile app (iOS only if you allow tracking; Android whenever the feature is active) and on our marketing website (lookover.app). Not used in the signed-in web companion. | In-app: anonymous screens viewed and trial/subscription conversions, including the plan and amount. On the website: marketing pages visited, the referring ad or link, general browser and device info, and IP address. Never your account, email, name, VIN, machines, or service records, and no advertising identifier. | View |
| Google Places | Finding nearby service shops (Service Guidance, Premium-only) | Approximate location at the moment of search (not stored by LookOver) | View |
A note on push notifications: OneSignal is our delivery relay. It receives your device push token, your account ID and email (used to address and deliver the notification), and the message itself (the title, body, and a link) so it reaches your phone through Apple and Google. It never receives your machine inventory, VINs, location, or service history. For safety recall alerts, all of the matching that decides whether a recall is relevant to your garage happens on our own servers using only the make, model, and year you entered.
Location Data
Location is optional. LookOver works fully without it.
LookOver offers an optional ride tracking feature that uses GPS to track distance and duration for your machines.
- When collected: Only during ride tracking sessions you manually start. We never track you passively. If you use the Bluetooth ride trigger, tapping its prompt is how you start the ride yourself. It never starts GPS on its own.
- Background tracking: If enabled, continues while the app is backgrounded so your ride isn't interrupted.
- What we store: Ride summaries (distance, duration, date) and GPX route files linked to your machines.
- Your control: Disable anytime in device settings or simply don't use the feature.
Service Guidance (Premium): nearby shop lookup
When you open the “Take It In” tab on a reminder, LookOver sends your approximate location to Google's Places API to surface nearby service shops and dealers. This is a one-shot lookup, not continuous tracking. Your lat/lng is sent to Google for that single search and is not stored on LookOver's servers. If you never open the Take It In tab, no location is sent.
Apple Watch & Health
We write your ride to Health. We never read your health history, and none of it leaves your devices.
LookOver's Apple Watch app lets you record a ride without carrying your phone. Recording a ride asks for Health access, and it is fair to wonder why a maintenance app needs it.
The honest answer: on Apple Watch, only an active workout session keeps an app running with your wrist down. Without one, tracking would stop within seconds of the screen dimming and capture almost nothing of your ride. So LookOver records your ride as a workout.
- What we write: A workout for the ride you recorded, plus the active calories Apple Health attaches to it, saved on your watch. Those calories are what make the ride count toward your activity rings, which is why we save the workout rather than discarding it.
- What we read: Heart rate and active calories, and only while a ride is running. Apple's workout builder collects both to add the workout up, and the calories are what let it count toward your rings. LookOver never shows you either number, never reads your health history, and never asks for anything outside the ride in progress.
- Where it goes: Nowhere. Health data stays on your watch and iPhone under Apple's protection. It is never sent to LookOver's servers, never included in your cloud backup, and never shared with anyone.
- What reaches your phone: The ride itself, handed over directly from watch to phone. That is GPS points, distance, and time, exactly as if you had recorded on your phone. It carries no health information.
- Your control: You can decline Health access, or turn LookOver off under Health in the Watch app on your iPhone at any time. Rides started on the watch need it and will not run without it. The rest of LookOver is unaffected, and you can still record rides on your phone.
Location on the watch works the same way it does on your phone, covered in Location Data above: captured only during a ride you start yourself.
Bluetooth Ride Trigger
It's off until you turn it on, and it never starts GPS by itself. Your device's name and address are never sent to our servers.
The Bluetooth ride trigger is an optional Pro feature. You pick a Bluetooth device you ride with, like your helmet comm, a speaker, your UTV, or the truck or car you drive to the trail. When that device connects, LookOver sends you a notification, and one tap starts a GPS ride on the machine you chose. When it disconnects, LookOver asks whether you want to end the ride. You turn it on under More > General > GPS Tracking.
It works differently on Android and iPhone, so here's exactly what each one does.
- What we read on Android: LookOver asks for Android's Nearby devices permission (Bluetooth connect), and only from the trigger's setup screen. It reads your list of paired devices only when you tap Choose device, so you can pick yours. After that it pays attention to that one device alone: whether it connected or disconnected, and whether it's still connected for audio. Every other device is ignored. LookOver never scans for nearby devices and never uses your location to find Bluetooth devices.
- What we read on iPhone: No Bluetooth data at all. You set up two automations in Apple's Shortcuts app, and iOS runs LookOver's Ride Device Connected and Ride Device Disconnected actions without telling LookOver which device set them off.
- What we store: On Android, the name and Bluetooth address of the device you chose, and the machine you picked, saved on your phone. On iPhone, the machine you picked and the time your device was last seen, saved on your phone, so the setup screen can show it's working.
- Where it goes: Your device's name and address are never sent to LookOver's servers and never included in your LookOver cloud backup. So we can tell whether the feature works, our analytics (Firebase) and error monitoring (Sentry) tools receive simple signals: when your device connects or disconnects, when a prompt is shown or tapped, how many seconds a dropout lasted, and whether the needed permissions are on. The same signals are included in a diagnostics report if you choose to send us one. None of them include your device's name or address.
- What shows on your screen: The device name appears in your own ride prompt notification (on Android, that can include your lock screen) and in the “Done riding?” banner in the app. That is shown on your phone only.
- Your control: It's off by default. Turn it off anytime under More > General > GPS Tracking, and LookOver stops watching for your device. Uninstalling LookOver removes what the trigger saved on your phone (Google's device backup, if you use it, is separate; see the Android note below). On Android you can also take back the Nearby devices permission in your phone's settings, and on iPhone you can delete the two automations in Shortcuts.
The trigger never starts GPS on its own. A ride starts only when you tap the prompt, and the same location permission and Pro requirements as any other ride still apply. Ending a ride takes a tap too. Tapping the prompt counts as starting the ride yourself, covered in Location Data above.
A note for Android: if Google's own device backup is turned on for your phone, it may include LookOver's on-device settings, which can include the device you chose. That backup belongs to your Google account and is handled by Google, not LookOver.
Calendar Feed
The calendar feed is optional. On the Calendar screen in the More tab you can get a private subscribe link for your garage and add it to Apple Calendar, Google Calendar, Outlook, or any calendar app that takes a link. Nothing goes out until someone adds that link to a calendar.
- What it includes: One all-day event per open reminder in that garage, showing the machine's name, the reminder's title and description, the day it's due, and whether it's approaching, due, or overdue. Completed, dismissed, and deleted reminders are left out. It doesn't include your name, email, location, costs, or files.
- Who receives it: The calendar service you subscribe with (for example Apple, Google, or Microsoft) fetches the link on its own schedule and stores those events under its own privacy policy. Anyone you give the link to can see the same events, so treat it like a password.
- Shared garages: Everyone in a shared garage uses the same link. An owner or admin can reset it anytime, which turns off the old link for every calendar subscribed to it, for example after someone leaves the crew.
To stop sharing, remove the subscription from your calendar app, and have an owner or admin reset the link if it went anywhere it shouldn't have.
Advertising & Ad Attribution
You're always asked first. Tap “Ask App Not to Track” and the app works exactly the same. The only thing affected is whether we can measure which ad brought you to us.
LookOver runs ads on Meta (Facebook and Instagram) so we can reach more riders. To know which ads actually work, we use Meta's App Events SDK on iOS to measure conversions. This is only active if you tap Allow on the iOS tracking prompt the first time you open the app.
What we share with Meta (only if you tap Allow)
- Your device advertising identifier (IDFA). A device-level ID that Apple controls. It is not tied to your name, your account, or anything you typed into the app.
- A one-way hash of your email and name. We never send your raw email or name. The SDK turns them into SHA-256 fingerprints before transmission so Meta can match them to an ad click without ever seeing the details themselves.
- App events. Anonymous signals like “installed the app,” “completed signup,” “started a trial,” “subscribed.” No details about which machines you own or what services you logged.
What we never share with Meta
- Your machines, makes, models, VINs, or photos.
- Your service records, costs, or notes.
- Your reminders or maintenance schedules.
- Your ride tracking routes or GPS data.
- Your raw email or phone number.
How to opt out
- At the prompt: Tap “Ask App Not to Track” when you first open the app.
- Later, on iOS: Open the Settings app → Privacy & Security → Tracking → toggle LookOver off.
- Or globally: Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track,” which silently declines every app.
Note: Android users are not part of this program. We do not collect Android advertising IDs.
This measurement runs on your device and follows your tracking choice. We don't bypass that choice with server-side tracking, and we never share your ad-conversion data with Meta for anyone who hasn't tapped Allow.
In the app: measuring which ads work
We also work with an advertising partner, TrailIntel, using a data tool called Segment to route the measurements, so we can see which ads lead to installs and subscriptions. What we send is anonymous and never tied to you.
- What it sees: the screens you view and when you start a trial or subscription, including the plan and amount.
- What it never sees: your email, name, account ID, VIN, machines, service records, photos, or any advertising identifier.
- How it's controlled: turn it off anytime in the app under Settings → General → Ad Measurement, on either platform. On iOS it also requires tapping Allow on the tracking prompt, so declining tracking keeps it off too. On Android it collects no advertising ID.
On our website: measuring which ads work
When you visit our marketing website at lookover.app we use the same partner, TrailIntel, to understand which of our ads brought you there. It runs only in your browser on our public marketing pages. It does not run on the signed-in web companion where your garage lives.
- What it sees: the marketing pages you visit, the ad or link that referred you, general browser and device information, and your IP address.
- What it never sees: your account, machines, service records, photos, or reminders. You are not signed in on the marketing pages, so none of that data is there to collect.
- How to opt out: use your browser's privacy settings or any ad or tracker blocker. Blocking it has no effect on how the app or the web companion works.
Creator links: crediting the rider who sent you
Riders who make videos or run communities can share a LookOver link and earn a commission when the people they send subscribe. Our partner Insert Affiliate tracks which creator gets the credit.
- What it sees: a random ID for your install, the creator's link code if you arrived through one, and on Android the Play Store install referrer. On iOS, and only if you tap Allow on the tracking prompt, a one-time snapshot on first launch of your device model, OS version, screen size, memory size, language and region setting, time zone, and network type (Wi-Fi or cellular), so an install can be matched to the link you tapped. Like any server, it also sees your IP address.
- What gets credited: if a creator sent you, your subscription purchases are credited to them for 30 days after you tap their link. If you already pay for LookOver, no creator is ever credited.
- What it never sees: your email, name, advertising identifier (IDFA), location, machines, service records, photos, or GPS data.
- Your choices: on iOS, tap “Ask App Not to Track” and the device snapshot is never sent. The random install ID is still used on every device, and it is not linked to your email or name. On Android there is no separate switch: the install referrer only names a creator if you installed from their link. Either way, if you didn't arrive through a creator's link, nothing is credited to anyone.
Signing up as a creator on lookover.app/creators happens in a form run by Insert Affiliate, which holds your creator account (username, email, and password) and payout details under its own privacy policy.
Data Security
In Transit
All data sent between your device and our servers uses TLS/HTTPS encryption (the same protection banks use).
At Rest
Your data is stored encrypted on enterprise-grade servers with daily backups and 7-day retention.
Access Control
Database-level security policies ensure only you, and anyone you invite to your garage, can access your data. Other users can't see it. Our own access is limited to running the service and helping when you ask for support.
Offline First
Your data lives on your device first and syncs when connected. You're never locked out of your records.
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
Your Rights
You Have the Right To:
Children's Privacy
LookOver is not intended for children under 13. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child under 13, please contact us immediately at privacy@lookover.app and we will delete it.
International Data Transfers
LookOver is based in the United States. If you use our service from outside the US, your data will be transferred to and processed in the United States, where data protection laws may differ from your country.
By using LookOver, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data regardless of where it's processed.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last updated" date at the top
- Notify you via email or in-app notification for material changes
- Give you the opportunity to review before changes take effect
Your continued use of LookOver after changes take effect means you accept the updated policy.
Contact Us
Questions about this Privacy Policy? We're happy to help.
Email: privacy@lookover.app
General Support: feedback@lookover.app
Company: LookOver, LLC
Location: Belgrade, Montana, USA