lewk Back to site
Legal

Privacy policy

How we handle your data on this website (the waitlist) and in the Lewk app.

Last updated 21.10.2026

1. Who is responsible

The controller for data processing on this site, within the meaning of the GDPR, is:

Alexander Salomon Verganistrasse 16 3644 Emmersdorf, Austria info@salomon-webdev.at

2. What we collect

When you join the waitlist, we store the email address you type in and the date and time you submitted it. If you pick one, we also store which phone you use (iPhone or Android; on a phone it is preselected from your browser), so we can email you when Lewk is in your store. If you came through one of our links with a tag (for example from a TikTok video of ours), we store that tag, to see which videos bring people. Only the email is required.

Our hosting provider, Cloudflare, additionally writes standard server logs (IP address, browser and device type, requested page, timestamp) for security and troubleshooting. These logs are kept for 7 days and are not merged with your waitlist entry.

3. Why, and on what legal basis

Waitlist email
To tell you when Lewk is out in your phone's store (the App Store or Google Play). Legal basis: your consent, Art. 6(1)(a) GDPR.
Server logs
To keep the site available and secure. Legal basis: our legitimate interest, Art. 6(1)(f) GDPR.

We do not sell your data, we do not use it for profiling, and we do not send marketing unrelated to this launch.

4. Who else sees it

Your waitlist entry is stored in Lewk's own database at Supabase, in the EU (Frankfurt), acting as our processor under a data processing agreement (Art. 28 GDPR).

5. How long we keep it

Until you unsubscribe or ask us to delete it, and in any case no longer than 12 months after the waitlist closes. Every email we send includes a one-click unsubscribe link.

6. Cookies

This page sets only technical cookies. Anything beyond that is only loaded after you agree, and you can change your mind at any time.

7. Your rights

Under the GDPR you can ask us for access to your data (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), portability (Art. 20), and you can object to processing based on legitimate interest (Art. 21). You can withdraw your consent at any time with effect for the future.

Write to info@salomon-webdev.at and we'll handle it within one month.

You also have the right to lodge a complaint with a supervisory authority — for us that is the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna).

8. The Lewk app

This section covers the Lewk app for iPhone. The controller named in section 1 is also responsible for the app. Contact for anything about your data in the app: support@uselewk.com.

9. What the app stores

Your account
An account ID created when you first open the app. If you sign in with Apple or Google, your account ID with that provider and the email address it shares (Apple may give a private relay address). If you add an email yourself, that address (we send a link to confirm it, and 6-digit codes to sign in; there is no password). Your name, if you add one, and your shopping country and settings.
Photos and screenshots you choose
Only after you agree in the app (asked once; you can withdraw it in Settings → AI photo analysis), the image you pick is uploaded to your private Lewk storage and analyzed to describe the visible makeup. Lewk never identifies people. The app shows your latest photos on the camera screen only if you allow it, and nothing leaves your phone until you choose one. The sample looks offered when you first open the app come with results we prepared in advance; picking one uploads nothing.
Your selfie and AI previews
Only if you add one, and only after you agree in the app: your selfie is stored in your private Lewk storage. It is never shared. To draw the how-to pictures, the app finds the outline of your eyes, brows and lips on your phone; these face points never leave your phone and are never used to identify anyone. When you ask for a preview of a look on you, your selfie and the look you picked are sent to OpenAI to make a private preview picture of the look on your face, which is stored in your account and marked as an AI preview. You can save a copy to your photo library. Replacing or deleting your selfie (Settings → Your selfie) also deletes the previews made from it.
Makeup you own (My products)
Only if you add them, with a Lewk Pro subscription: the products you own, found in our catalog by name or barcode, or entered by you (name, brand, shade, color, finish). They are stored privately in your account and are never shared. When you analyze a look, the products from your list that suit it are sent to OpenAI with the description of the look, so the recommendations can use them first. If you photograph a product’s label, the photo is sent to OpenAI once to read the brand, name and shade; it isn’t stored, and you confirm the product before it is added. Scanning a barcode only looks up the number. You can edit or remove your products any time in My products.
TikTok links you share
When you share a TikTok to Lewk, we fetch the post’s public cover image and analyze it. The analysis of a public cover can be reused for anyone who shares the same post; it is not linked to you. The link itself is kept privately with your saved look; sharing the same post again opens that look instead of analyzing it again. To show you which post you shared, Lewk’s share sheet reads the post’s cover and creator name from TikTok’s embed page (the page TikTok provides for embedding a post); that request goes from your phone straight to TikTok, without cookies and without any Lewk data.
Looks and boards
Your analysis results, saved looks and boards, and which looks you marked as favourites. Only you can see them. You can delete a single look in the app (the look’s … menu → Delete look): its photo, products, steps and AI previews are deleted, and it comes off your boards.
Subscription
Purchases are made through Apple; we never see your payment details. We store whether your subscription is active, its plan, and when it renews or ends.
Your free first look
Each account and each iPhone get one free scan. To keep it to one per iPhone, the app asks Apple’s DeviceCheck for a short-lived token; our server asks Apple whether this iPhone has had its free look and, once it has, tells Apple so. Apple keeps those two bits for us per device; Lewk stores no device identifier, and the token is not kept.
Your products and label photos
Keeping your product list and using it in your recommendations is part of the service you ask for, Art. 6(1)(b) GDPR. Sending a label photo, or your products with a look, to OpenAI relies on the same consent as analyzing your images (Art. 6(1)(a) GDPR), asked once before the first upload and withdrawable in Settings → AI photo analysis.
Usage statistics
Anonymous step counts: which steps are reached (for example, that the plans screen was opened, or a shop link was tapped), with your shopping country or plan. Each event carries a new random number, no account or device ID, and nothing is stored on your phone for it; your IP address is discarded, so these counts can’t be linked to you. Detailed usage (only if you turn it on in Settings → Share detailed usage): the same events with your Lewk account ID, so we can follow the order of steps. Never your photos, links, captions, name or email.

10. Why, and on what legal basis

Running the app
Your account, looks, boards and subscription: to provide the service you asked for. Legal basis: contract, Art. 6(1)(b) GDPR.
Analyzing your images
Legal basis: your consent, Art. 6(1)(a) GDPR, which the app asks for once, before the first upload. You can withdraw it any time in Settings → AI photo analysis; the app then asks again before the next scan. You can also delete your looks or account.
Your selfie and AI previews
Legal basis: your consent, Art. 6(1)(a) GDPR, which the app asks for once, before your first selfie is uploaded. You withdraw it by deleting your selfie in Settings → Your selfie; the app then asks again before a new one.
Usage statistics
Anonymous step counts don’t identify you; to the extent data protection law applies, the basis is our legitimate interest in knowing which steps of the app work, Art. 6(1)(f) GDPR. Detailed usage: your consent, Art. 6(1)(a) GDPR (off unless you turn it on).
Safety and abuse prevention
Usage limits and security logs. Legal basis: our legitimate interest in a safe service, Art. 6(1)(f) GDPR.

We do not sell your data, we do not show ads, and we do not track you across other apps or websites.

11. Who processes it for us

These providers act as our processors under data processing agreements (Art. 28 GDPR). Where data leaves the EU, the transfer relies on the EU–US Data Privacy Framework or the EU standard contractual clauses.

Supabase
Hosts the app’s database, file storage and server functions, in the EU (Frankfurt).
OpenAI
Describes the makeup in images you choose, picks products for a look (including suitable ones from your product list), reads product labels in photos you take for your list, and makes the AI previews of looks on your selfie when you ask for one. Under OpenAI’s API terms, this data is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse.
RevenueCat
Records your App Store subscription status against your Lewk account ID.
Resend
Sends email confirmation links and sign-in codes.
PostHog
Counts usage steps (see section 9), in the EU (Frankfurt). Anonymous counts carry no identifier; detailed usage carries your Lewk account ID only if you turn it on.
Google
Only if you choose Sign in with Google: confirms your Google account and shares your name and email with us, under Google’s own privacy policy.
Apple
Handles payments and subscriptions, Sign in with Apple if you choose it, and DeviceCheck for the free first look, under Apple’s own privacy policy.
Cloudflare
Hosts this website and routes email to our support address.

12. How long we keep it, and deleting your account

We keep your data for as long as you have a Lewk account. You can delete any single look yourself (its photo, products, steps and AI previews). In the app, Settings → Delete account removes your account, profile, photos, selfie, AI previews, looks, product list, boards and our record of your subscription immediately. RevenueCat keeps the App Store purchase record under a random ID that is no longer linked to you, so the subscription can be restored to a new Lewk account on the same Apple ID. Analyses of public TikTok covers are not linked to you and remain. We don’t keep separate backups of the app’s database, so deleted data can’t be restored.

Deleting your account does not cancel an App Store subscription. Cancel it in your Apple ID settings (or in Lewk under Settings → Manage subscription) first.

You have the rights listed in section 7 for app data as well. Write to support@uselewk.com.

13. Children

Lewk is not intended for children under 16.

14. Changes

As Lewk grows we may update this policy. The version on this page, with the date at the top, is always the one that applies.