Privacy Policy

1. Who we are

LKBK ("we", "us", "our") is operated by LKBK LLC, a South Carolina limited liability company. Our Service helps users save, organize, and discover products using AI-powered visual search.

For the purposes of the GDPR, LKBK LLC is the data controller of your personal data. You can reach us at contact@shoplkbk.com.

2. Information we collect

We collect information only when you choose to share it with us. LKBK does not crawl, scrape, monitor, or collect content from any website, social media platform, post, or page in the background or in advance. We access and process external content — such as a social media post, product page, link, or image — only at the moment you actively send or share it with LKBK to use a feature (for example, visual search or saving a product). That processing is transient: we analyze what you submit in order to return results, and we do not retain copies beyond what is described in this Section and in Section 10.

• Account information: email address, display name, and profile photo when you create an account. If you sign in with Apple or Google, we receive the email and name those providers share with us.
• User-generated content: wishlists, collections, products you save, follows, notes, claims on shared wishlist items, and any text or images you submit.
• Search and usage data: URLs you share with us, images you upload for visual search, search queries derived from those images, products you save or click, and your in-app activity (e.g., when you create a wishlist).
• Content you share to LKBK: posts, links, and images you choose to send to LKBK (for example, sharing a social media post to find a product). We use this content only to provide the feature you requested. We retain it only for as long as you choose to keep it — if you remove a shared post or saved item, or if the content was used only for a one-time search, the associated content is deleted and is not kept beyond the transient processing window described in Section 10. We do not retain posts or other content you share after you stop sharing them with us.
• Photos and camera input: photos you take or upload for visual search are sent to our backend and temporarily stored on Supabase storage so that our search providers can analyze them and return results. Temporary copies are deleted automatically within 24 hours of the search. We do not retain the original photo on your account. We use these photos only to return product search results — we do not use them for facial recognition or any other biometric identification, and we do not use them to build advertising or personal profiles.
• Device and technical data: IP address, browser type, operating system version, device model, app version, time zone, language preference, crash logs, and pages visited, collected automatically via cookies and server logs.
• Authentication identifiers: when you sign in with Apple, we receive a stable user identifier from Apple; we do not receive your Apple ID or Apple email beyond what Apple shares at sign-in.
• Affiliate and referral data: when you click a product link in LKBK and we have an affiliate relationship with the retailer, the affiliate network may receive a click identifier, the originating partner ID, and (after a qualifying purchase) the purchase amount, retailer, and order reference for commission attribution. See Section 8 for details. We do not receive your payment card information from any affiliate network.
• Reports and moderation data: reports you submit about other users or content, and records of blocks you apply.
• Browser extension data: when you use the LKBK browser extension, we read the current page's publicly visible metadata (page title, product image URL, price, and site name) from Open Graph meta tags. This data is collected only when you actively click the extension icon. We also store your authentication session tokens locally in your browser using chrome.storage to keep you signed in. We do not track your browsing history, monitor your activity, or collect data from pages you do not interact with through the extension. See Section 7 for our Limited Use commitments.

3. Device permissions (iOS)

The LKBK iOS app may ask for the following permissions. You can always change permissions in iOS Settings.

• Camera: used only when you take a photo for visual search.
• Photo library: used only when you pick an existing photo for visual search.
• Push notifications (optional): if enabled, used to send you wishlist activity and product alerts. You can opt out at any time.

4. How we use your information

We use your information to:

• Power AI visual search and return product results.
• Save products, wishlists, and collections to your account.
• Display public content you choose to share (e.g., public collections, shared wishlists).
• Enforce our Terms of Service, including reviewing reports and moderating content.
• Improve our Service, debug issues, and analyze usage trends.
• Send transactional emails (account confirmation, security alerts, report notifications).
• Detect, prevent, and respond to fraud or misuse of our Service, including affiliate-attribution fraud.
• Attribute affiliate referrals and reconcile commissions with our affiliate partners.

We do not use your photos, search inputs, or other content to train our own or any third party's AI or machine-learning models. We send your photo or URL to our AI and search providers only to obtain the results you requested, and they process it on our behalf rather than for their own purposes (see Section 7).

5. Automated processing

Our visual search uses automated technology to analyze the image or URL you submit and match it to products. This does not involve automated decision-making that produces legal or similarly significant effects about you within the meaning of Article 22 of the GDPR. You always control whether to act on the results we return.

6. Cookies and tracking

We use cookies and similar technologies for authentication, analytics, and affiliate-referral tracking. Strictly necessary cookies are required for the Service to function. Analytics and affiliate-tracking cookies can be declined via your browser settings, and once a specific affiliate network is active, we will document its dedicated opt-out mechanism in Section 8.

We do not use cross-app or cross-site tracking for advertising purposes, we do not share data with third parties for their independent advertising use, and we do not request permission to track you across other companies' apps and websites under Apple's App Tracking Transparency framework.

7. Data sharing and third parties

We do not sell your personal information. We share data only with the following service providers and partners, who process it on our behalf under contract and only as needed to provide the Service:

• Supabase — backend infrastructure (database, authentication, file storage). Servers in the United States.
• Vercel — web hosting. Servers in the United States.
• Resend — transactional email delivery (e.g., account confirmation, report notifications).
• AI and search providers — OpenAI, Google Cloud Vision, SerpAPI, and Firecrawl. We send the photo or URL you provide and receive analysis results. These providers process the data on our behalf to return search results and, per their published policies and our agreements with them, do not retain your photo or URL data beyond the duration of the API call required to process the request and do not use it to train their models.
• Affiliate networks and partners (when active) — see Section 8. Affiliate networks receive click and transaction data to attribute commissions; they do not receive your account credentials or payment card information.
• Apple and Google — when you sign in with Apple or Google, those providers handle authentication and share account information with us as you authorize.
• Law enforcement and legal compliance — we may disclose information when required by law, court order, or to protect the rights, safety, and property of LKBK or others.

Browser extension — Limited Use. Our use of information obtained through the LKBK browser extension complies with the Chrome Web Store User Data Policy and Microsoft Edge Add-ons policies, including their Limited Use requirements. Page metadata read through the extension is used only to provide and improve the user-facing features you invoke (saving and identifying products). We do not sell this data, do not transfer it to third parties except as needed to provide those features, and do not use it for advertising, profiling, or any purpose unrelated to the extension's core functionality.

8. Affiliate links and partnerships

LKBK monetizes in part through affiliate partnerships with retailers and affiliate networks. Some product links shown in the Service are or will be affiliate links, meaning we may earn a commission when you complete a qualifying purchase through them — at no additional cost to you. Affiliate revenue does not influence which products we surface or how we rank them, and we do not boost retailers in results because they offer higher commissions.

When you click an affiliate link, the relevant affiliate network may set a cookie or similar identifier on your device to attribute a resulting purchase to LKBK. The cookie typically carries a click identifier and our partner ID, not your name, email, or LKBK account. If you complete a purchase, the network may share transaction information with us — purchase amount, retailer, and order reference — solely for commission reconciliation. We do not receive your payment card details, billing address, or full order contents from any affiliate network.

Specific affiliate partners may change over time. When a specific affiliate network is active, we will name it here and link to its privacy policy and consumer opt-out page. You can also clear affiliate cookies through your browser settings at any time, which prevents the corresponding network from attributing future clicks to LKBK.

Any material change to our affiliate practices (such as the introduction of a new network, or a change in the categories of data we receive) will be communicated as a material policy change under Section 16.

9. International data transfers

LKBK is operated from the United States and our service providers are primarily based in the United States. If you access the Service from outside the United States, your information will be transferred to, processed in, and stored in the United States.

For users in the European Economic Area, the United Kingdom, or Switzerland, where we transfer personal data outside your region we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or Swiss equivalent, as applicable) or other lawful transfer mechanisms with our processors.

10. Data retention and deletion

We retain your account data for as long as your account is active.

You can delete your account at any time from inside the LKBK iOS app (Profile → Delete Account) or by emailing contact@shoplkbk.com. Account deletion is permanent and removes your profile, wishlists, collections, products, follows, and blocks. Apple Sign-in tokens are also revoked at Apple at the same time.

We retain limited operational records (e.g., server logs, abuse-detection records, aggregated usage analytics) for up to 12 months after deletion as required for security and legal compliance, after which they are deleted or de-identified. Photos uploaded for visual search are deleted within 24 hours regardless of account status (see Section 2).

Content you share to LKBK — posts, links, and images you send for search or saving — is retained only for as long as you choose to keep it. Content used for a one-time search is processed transiently and is not stored beyond completing that search; content you save is deleted when you remove it or delete your account. We do not retain shared posts or other shared content longer than you share them with us.

11. Categories of personal information (California)

For the 12 months preceding the date of this policy, we have collected the following categories of personal information under the CCPA/CPRA. We disclose these categories to the service providers listed in Section 7 for the business purposes described in Section 4. We do not sell or share any category for cross-context behavioral advertising.

• Identifiers: email, display name, IP address, device identifiers, Apple/Google sign-in identifiers. Source: you; your device; Apple/Google. Disclosed to: Supabase, Resend, Vercel, Apple/Google.
• Internet or network activity: search queries, products saved or clicked, in-app activity, pages visited, crash logs. Source: your device. Disclosed to: Supabase, Vercel.
• Visual information: photos uploaded for visual search. Source: you. Disclosed to: Supabase, AI/search providers.
• Commercial information: products saved or clicked; affiliate transaction references (when affiliate is active). Source: you; affiliate networks. Disclosed to: Supabase, affiliate networks.
• User-generated content: wishlists, collections, notes, follows, reports, blocks. Source: you. Disclosed to: Supabase.
• Approximate location: coarse location inferred from IP address and time zone. Source: your device. Disclosed to: Supabase, Vercel.

We do not collect personal information for the purpose of inferring characteristics, and we do not use sensitive personal information for any purpose that would require us to offer a right to limit its use under the CPRA.

12. Your rights — California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, the sources, and how it is used (see Sections 2, 4, and 11).
• Access the personal information we hold about you.
• Delete your personal information, subject to limited exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. LKBK does not sell or share your personal information for cross-context behavioral advertising.
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes that would require this right to be offered.
• Non-discrimination — we will not discriminate against you for exercising any of these rights.

To exercise these rights, email us at contact@shoplkbk.com with the subject "CCPA Request." We will verify your identity before fulfilling the request, and you may use an authorized agent acting on your behalf.

13. Your rights — EU, UK, and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing.
• Data portability (a copy in a structured, machine-readable format).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

Our legal bases for processing are: contract (to provide the Service you request), legitimate interests (to operate and improve the Service, attribute affiliate referrals, detect fraud, and personalize results), and consent (where you have given it, e.g., optional push notifications). We have balanced our legitimate interests against your rights and concluded that our processing does not override them given the limited scope of data used. To exercise any of these rights, email contact@shoplkbk.com. The data controller is LKBK LLC.

14. Content moderation and appeals

LKBK offers tools to report objectionable content and block other users. We aim to review reports of objectionable content and respond within 24 hours, and we may remove content or restrict accounts that violate our Terms of Service.

If you believe content was removed in error or your account was restricted incorrectly, you may appeal by emailing contact@shoplkbk.com with the subject line "Moderation Appeal" within 30 days. We will review and respond.

15. Security

We use industry-standard security measures including TLS encryption in transit, encryption at rest on Supabase, and role-based access controls to protect your data. No internet service is 100% secure.

If we become aware of a breach affecting your personal information, we will notify affected users and, where required, the relevant regulators within the timeframes required by applicable law. If you believe your account has been compromised, contact us at contact@shoplkbk.com.

16. Children

LKBK is not directed at users under 16. We do not knowingly collect personal information from users under the applicable digital consent age (13 in the United States; 13–16 in EU member states under GDPR Article 8). If you believe a younger user has provided us with personal information, contact us at contact@shoplkbk.com and we will delete it.

17. Changes to this policy

We may update this Privacy Policy from time to time. Material changes — including new categories of data collected, new sharing with third parties (including the introduction of new affiliate networks), or changes that reduce your rights — will be communicated via email to your registered address or via a prominent notice on our website and in the app for at least 14 days before they take effect.

18. Contact us

Questions about this policy or general support? Email contact@shoplkbk.com.