LooKey Privacy Policy
Last updated: 10 August 2026
LooKey (“the app”) lets people share and find access information for public and semi-public places — bathroom passcodes, guest WiFi details and related notes. This policy explains what the app collects, why, and what control you have.
Who is responsible
LooKey is operated by Kandai Watanabe. For any privacy question, data request or content removal request, contact kandai.wata+lookey@gmail.com.
What the app collects
Account information. When you sign in with Google or Apple we receive and store your email address, display name and profile photo URL. If you use Apple’s “Hide My Email”, we only ever see the relay address Apple provides. We never receive or store your password — authentication is handled entirely by Google, Apple and Firebase Authentication.
Location. The app requests your device location while it is open, to centre the map near you, sort nearby places by distance, and attach coordinates to a place you add. Your location is used on the device and is not stored or transmitted to us as a record of your movements. The only coordinates saved are those of places you deliberately add to the map.
Content you submit. Places you add, access codes, WiFi network names and passwords, notes, comments, votes and any photo you attach are stored and shown to other signed-in users. Your display name is shown alongside content you contribute. Do not submit anything you are not willing to make public, and do not submit codes for private homes or areas you are not permitted to access.
Reports. If you report content, we store the reason you selected, any note you add, and your account identifier, so moderators can act on it and prevent duplicate reports.
Moderation records. If your account is restricted, we store that status and the reason. If a place is removed at an owner’s request, we store an identifier for that place so it cannot simply be re-added.
What the app does not collect
- No advertising identifiers, and no advertising.
- No third-party analytics or tracking SDKs.
- No background or continuous location tracking.
- No contacts, calendar, microphone or health data.
- No payment information — the app has no payments.
Who your data is shared with
Google Firebase (Authentication, Cloud Firestore, Cloud Storage) hosts the app’s data and processes it on our behalf. See Google’s privacy policy at https://policies.google.com/privacy.
OpenStreetMap services (Nominatim and Overpass) provide place search. When you search, or tap an unmapped point to identify it, the search text and/or the coordinate are sent to those services. Your account identity is not sent. See https://wiki.osmfoundation.org/wiki/Privacy_Policy. Results are cached on your device to reduce these requests.
Your content is visible to other signed-in users of the app. We do not sell personal information, and we do not share it with advertisers or data brokers.
Retention and deletion
Content you contribute is retained while your account exists.
You can delete your account at any time from the You tab → Delete my account. This permanently removes your account, your profile, the places you added, and the codes, notes and comments you contributed. It cannot be undone. Full details, including the email route if you no longer have the app installed, are on the account deletion page.
Removal requests for businesses and property owners
If you own or represent a property listed in LooKey and want it removed, email kandai.wata+lookey@gmail.com with the name and address of the place. We will remove the listing and block it from being added again. You can also use the in-app Report this spot action and choose “I represent this business”.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to its processing. Email kandai.wata+lookey@gmail.com and we will respond within the period your local law requires. The in-app deletion above satisfies most deletion requests immediately.
Children
LooKey is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact kandai.wata+lookey@gmail.com and we will delete it.
Security
Data is transmitted over encrypted connections and stored in Google Firebase with server-side access rules restricting who can read and write what. No system is perfectly secure; please do not submit sensitive information.
Changes
If this policy changes materially we will update the date above and, where required, notify you in the app.
Contact
kandai.wata+lookey@gmail.com