Privacy Policy

1. Who we are

LKBK ("we", "us", "our") operates shoplkbk.com, the LKBK mobile app, and the LKBK browser extension for Chrome and Edge. Our service helps users save, organize, and discover products using AI-powered visual search. LKBK is operated by LKBK LLC, a Delaware limited liability company. You can reach us at contact@shoplkbk.com.

2. Information we collect

• Account information: email address, display name, and profile photo when you create an account. If you sign in with Apple or Google, we receive the email and name those providers share with us.
• User-generated content: wishlists, collections, products you save, follows, notes, claims on shared wishlist items, and any text or images you submit.
• Search and usage data: URLs you share with us, images you upload for visual search, search queries derived from those images, products you save or click, and your in-app activity (e.g., when you create a wishlist).
• Photos and camera input: photos you take or upload for visual search are sent to our backend and temporarily stored on Supabase storage to enable third-party image-search APIs to access them. Temporary copies are deleted automatically within 24 hours of the search. We do not retain the original photo on your account.
• Device and technical data: IP address, browser type, operating system version, device model, app version, time zone, language preference, crash logs, and pages visited, collected automatically via cookies and server logs.
• Authentication identifiers: when you sign in with Apple, we receive a stable user identifier from Apple; we do not receive your Apple ID or Apple email beyond what Apple shares at sign-in.
• Purchase and affiliate data (future): LKBK does not currently earn affiliate commissions. When affiliate integration is live, we will receive information passed to us by affiliate networks when you complete a qualifying purchase through our links (typically: amount, retailer, click reference). We will not receive your payment card details.
• Reports and moderation data: reports you submit about other users or content, and records of blocks you apply.
• Browser extension data: when you use the LKBK browser extension, we read the current page's publicly visible metadata (page title, product image URL, price, and site name) from Open Graph meta tags. This data is only collected when you actively click the extension icon. We also store your authentication session tokens locally in your browser using chrome.storage to keep you signed in. We do not track your browsing history, monitor your activity, or collect data from pages you do not interact with through the extension.

3. Device permissions (iOS)

The LKBK iOS app may ask for the following permissions. You can always change permissions in iOS Settings.

• Camera: used only when you take a photo for visual search.
• Photo library: used only when you pick an existing photo for visual search.
• Push notifications (optional): if enabled, used to send you wishlist activity and product alerts. You can opt out at any time.

4. How we use your information

• To power the AI visual search and return product results.
• To save products, wishlists, and collections to your account.
• To display public content you choose to share (e.g., public collections, shared wishlists).
• To enforce our Terms of Service, including reviewing reports and moderating content.
• To improve our service, debug issues, and analyze usage trends.
• To send transactional emails (account confirmation, security alerts, report notifications).
• To detect, prevent, and respond to fraud or misuse of our service.

5. Affiliate links (future)

LKBK does not currently earn affiliate commissions. In the future, LKBK plans to use Skimlinks, a third-party affiliate technology provider, to monetize product links shown in the Service. When that integration is live, this section will be updated to describe what data is collected by Skimlinks and how you can opt out.

Once active, Skimlinks may set a cookie on your device when you click a product link, used solely to attribute affiliate commissions. That cookie will be governed by Skimlinks' privacy policy and you will be able to opt out at the Skimlinks opt-out page. We will notify users of material changes to this section before the affiliate integration goes live.

6. Cookies and tracking

We use cookies and similar technologies for authentication, analytics, and affiliate tracking. Strictly necessary cookies are required for the service to function. Analytics and affiliate tracking cookies can be declined via your browser settings or the Skimlinks opt-out link above. We do not use cross-app or cross-site tracking for advertising purposes, and we do not share data with third parties for their independent advertising use.

7. Data sharing and third parties

We do not sell your personal information. We share data only with:

• Supabase — our backend infrastructure provider (database, authentication, file storage). Servers in the United States.
• Vercel — our web hosting provider.
• Skimlinks — affiliate link management and commission tracking (not currently active; will be enabled in the future).
• Resend — transactional email delivery (e.g., account confirmation, report notifications).
• AI and search providers — OpenAI, Google Cloud Vision, SerpAPI, and Firecrawl. We send the photo or URL you provide and receive analysis results. These providers process the data on our behalf to return search results. Photo and URL data is not retained by these providers beyond the duration of the API call required to process the request, per their published policies.
• Apple and Google — when you sign in with Apple or Google, those providers handle authentication and share account information with us as you authorize.
• Law enforcement and legal compliance — we may disclose information when required by law, court order, or to protect the rights, safety, and property of LKBK or others.

8. International data transfers

LKBK is operated from the United States and our service providers are primarily based in the United States. If you access the service from outside the United States, your information will be transferred to, processed in, and stored in the United States. By using LKBK you consent to this transfer. For users in the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards with our processors.

9. Data retention and deletion

We retain your account data for as long as your account is active.

You can delete your account at any time from inside the LKBK iOS app (Profile → Delete Account) or by emailing contact@shoplkbk.com. Account deletion is permanent and removes your profile, wishlists, collections, products, follows, and blocks. Apple Sign-in tokens are also revoked at Apple at the same time.

We retain limited operational records (e.g., server logs, fraud-prevention records, aggregated usage analytics) for up to 12 months after deletion as required for security and legal compliance.

10. Your rights — California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you, the sources, and how it is used.
• Access the personal information we hold about you.
• Delete your personal information, subject to limited exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. LKBK does not sell or share your personal information for cross-context behavioral advertising.
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes that would require this right to be offered.
• Non-discrimination — we will not discriminate against you for exercising any of these rights.

To exercise these rights, email us at contact@shoplkbk.com with the subject "CCPA Request." We will verify your identity before fulfilling the request.

11. Your rights — EU, UK, and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing.
• Request data portability (a copy in a structured, machine-readable format).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

Our legal bases for processing are: contract (to provide the service you request), legitimate interests (to operate and improve the service, detect fraud, and personalize results), and consent (where you have given it, e.g., optional push notifications). To exercise any of these rights, email contact@shoplkbk.com. The data controller is LKBK LLC at the address above.

12. Security

We use industry-standard security measures including TLS encryption in transit, encryption at rest on Supabase, and role-based access controls to protect your data. No internet service is 100% secure; if you believe your account has been compromised, contact us at contact@shoplkbk.com.

13. Children

LKBK is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email us at contact@shoplkbk.com and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address or via a prominent notice on our website and in the app for at least 14 days before they take effect.

15. Contact us

Questions about this policy or general support? Email contact@shoplkbk.com.