Privacy Policy

Looksmax Last updated: 9 September 2026

This Privacy Policy applies to the Looksmax mobile application (the "Application"), provided by Lanchas Dev (the "Service Provider"). Contact: lanchasdev@gmail.com

The short version: the Application has no accounts, no login and no registration, and everything you do in it — your habits, your missions, your progress — is written to your device and stays there. Two things do leave it, both described below and neither of them anything you type: anonymous statistics about which screens get used, and advertising, which is how the Application stays free. Both arrive with version 1.2; earlier versions collected nothing.

1. What the Application stores on your device

Everything you do in the Application is written to your device's own storage and stays there:

• Your habits, routines, missions, contracts, skills and packs, and whatever progress, streaks and results they produce.
• The results of the habit wheel.
• Your chosen language and whether you have finished the introduction.
• The random identifier used for the statistics in section 2, the date the Application was first opened, and your advertising choice from section 4.

None of that content is transmitted. There is no account to attach it to, no backup in the cloud and no copy held by us. If you change device, the data does not travel with you — that is the cost of a design with no server, and we would rather state it than quietly upload your data to solve it.

2. Usage analytics

To know which screens are used, where people give up and whether a mission's deadline is ambitious or impossible, the Application records how it is navigated. This measurement is anonymous by design and has no identified level: there is no setting that turns it into something that identifies you, because nothing here does.

• No profile is created or updated. Every event is explicitly marked as profile-less before it leaves the device, and the client is configured so that no profile can be created even if one were not.
• The identifier is a random value generated on the device and renewed every 13 months. It is not the advertising identifier of section 3, and it is not linked to your identity.
• No IP address is stored by us and no location is derived from it. Location by IP is switched off on every single event, which means we cannot tell your country either.
• Nothing you write leaves the device. Task names, habits and notes are never sent.
• There is no session recording, no screenshots and no automatic capture of taps. Only the events listed below are sent, and each one exists because it answers a question we would otherwise be guessing at.

What is recorded: application opened; screen viewed, and how long the previous screen lasted; session ended; the five steps of the introduction, and whether it was finished; a mission started, completed or failed, with its difficulty, mode, deadline and number of tasks, and — when it fails — whether the time ran out or you abandoned it; each spin of the wheel and its result; skills unlocked and routine packs bought with the Application's own credits; the weekly contract claimed; routines started and completed; language changed; the review prompt being shown; the rank card being shared; progress being reset; and the lifecycle of each advertisement — requested, loaded, shown, closed, skipped or failed, and what it paid.

Each of these events carries technical context only: the application version, the platform, the operating system and its version, the device model and type, the language, how many days have passed since the Application was installed, and a marker saying whether the event came from a released build or from our own internal testing. Builds we use for development send nothing unless we deliberately turn it on, so our own testing does not end up mixed with real use.

This data is used in aggregate, to count and compare. It is not used to personalise advertising and it is not shared with advertisers.

Why we do not ask you for consent for this, and what that costs you

Measurement like this — first-party, aggregated, not shared with third parties for their own purposes, and tied to an identifier with a limited life — falls under the audience-measurement exemption recognised by the Spanish and French data protection authorities. The 13-month life of the identifier is the limit those authorities set, and it is the line between measuring something and following someone.

Not asking for permission is not the same as not telling you, which is why this section exists. It has a cost you should know about: there is no separate switch to turn the statistics off. Building a consent form for measurement that is exempt from consent would ask you to decide something the law says you should not have to. If you would rather not be counted at all, uninstalling the Application stops it completely. The advertising in the next section is a different matter and does have a switch.

3. Advertising

The Application shows advertisements through Google AdMob, and that is how it stays free: there is no subscription, no paywall and no in-app purchase of any kind. You will see them in three places, and in three places only:

• A banner at the bottom of the Skills, Routines and Profile screens.
• A full-screen ad when you return to base after a mission ends — never during one, never between the wheels, and never on your first mission.
• An optional ad you choose to watch, on the reward screen, in exchange for a streak shield. Nothing in the Application is locked behind it.

There are no ads inside the mission itself. The wheel, the briefing and the countdown are what the Application is for, and we are not going to interrupt them.

To serve those ads, AdMob uses the advertising identifier of your device, together with your IP address and your interactions with the ads, to deliver advertising and measure how it performs. AdMob may derive an approximate location from that IP address. This is Google processing data as a third party for its own purposes, which is exactly why it needs your permission and the statistics in section 2 do not. Where consent is required, the advertising identifier is used for personalised advertising only if you have agreed to it — see section 4; if you have not, you still see ads, but non-personalised ones.

You can reset the advertising identifier, or opt out of ad personalisation altogether, at any time from your device settings (on Android, Settings → Google → Ads; on iOS, Settings → Privacy & Security → Tracking).

One detail of the current version, stated because it is true rather than because it is flattering: until version 1.2 the advertising described here reached Android only, because the iOS build carried the same code with no ad slots configured. Version 1.2 configures them, so everything in this section now applies to iOS as well. Google limits what it serves to an app it has not yet finished verifying, so on iOS you may see few ads, or none, for a while after release. Nothing else in the Application changes either way.

4. Consent

If you are in the European Economic Area or the United Kingdom, the Application asks for your advertising consent the first time it opens, through Google's own consent form. Your answer decides whether the ads you see are personalised.

You can change your mind at any time: Profile → "Ad privacy" reopens the same form. That row appears wherever the form applies. Withdrawing consent has to be as easy as giving it, and here it is the same two taps.

Outside those territories the form may not appear, because local law does not require it; the advertising identifier is still governed by your device settings, described in section 3.

5. Network activity

The anonymous events in section 2 and the advertising in section 3 are the only requests the Application makes. Everything else works with the device in flight mode, and behaves identically online and offline: the spinning wheel is a small web page bundled inside the Application itself, not a page loaded from the internet.

There is no crash reporting and no remote configuration. Nothing you enter reaches us or any third party.

6. Permissions

The Application asks for one optional permission: notifications, so it can remind you about a habit at the time you chose. Those reminders are scheduled on the device. The Application does not obtain a push token, there is no notification server, and we cannot send you anything. Declining the permission only means no reminders; everything else works the same.

On iOS you may also be asked whether the Application may track you across apps and websites. That question is about the advertising identifier in section 3 and nothing else. Declining only means the ads are less relevant.

The Application does not ask for the camera, the microphone, your location, your contacts, your photos or your health data.

7. Third parties

• PostHog — product analytics, hosted in the European Union. It receives the anonymous events described in section 2 and processes them on our behalf and under our instructions only, never for its own purposes. Its own policy: posthog.com/privacy.
• Google AdMob — advertising. It receives what section 3 describes and processes it for its own purposes as well as ours. Its own policy: policies.google.com/privacy.
• Apple and Google know that you downloaded the Application, in the same way they know about every app you install, and that happens on the store's side under Apple's and Google's own privacy policies. We receive nothing from them beyond aggregate download and crash statistics that identify nobody.

We do not sell data.

8. Data retention, deletion and your controls

• Everything you enter stays on your device until you delete it or uninstall the Application.
• Anonymous events are kept by PostHog for as long as they remain useful as statistics, under the retention settings of our project. The random identifier is renewed every 13 months, so the measurement cannot follow one device indefinitely.
• Advertising data is retained by Google under Google's own policies, not ours.
• Change your advertising consent: Profile → "Ad privacy".
• Reset or opt out of the advertising identifier: your device's settings, as described in section 3.
• Stop notifications: your device's notification settings.
• Delete everything on Android: Settings → Apps → Looksmax → Storage → Clear data. On iOS: delete the Application from the Home Screen or from Settings → General → iPhone Storage.
• Support emails. If you write to us, your message and address are kept for at most 6 months, unless a legal obligation requires longer. That is the only personal data we ever hold about anyone, and it exists only because you chose to write.

9. Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to lodge a complaint with your data protection authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es).

In practice those rights bite on the advertising data in sections 3 and 4, and you exercise them through the consent form and your device's advertising settings. They cannot be exercised over the statistics in section 2, for an honest reason rather than a convenient one: those events carry no identifier that could be traced back to you, so we are genuinely unable to find "your" data among them — and the law does not require us to collect more information about you merely so that we could.

10. International data transfers

The anonymous events are processed within the European Union. Data handled by Google and Apple may be processed in other countries, under the safeguards set out in their own privacy policies, including standard contractual clauses.

Children's privacy

The Application offers general self-improvement content and is not directed at children under 13. It has no account, and the statistics described above identify nobody, child or adult. If you believe a child under 13 has provided us with personal data, write to lanchasdev@gmail.com and we will delete it.

Changes to this policy

We may update this policy — most likely because the Application starts doing something new. Changes take effect when the revised version is posted, with a new "Last updated" date. An earlier version of this page promised that if a future release ever began collecting data, this page would say so before that release reached you. This update is that promise being kept twice over: the statistics in section 2 and the advertising in section 3 both ship with version 1.2, and this page changed first.

Contact

Lanchas Dev — lanchasdev@gmail.com