← Back to Loot

Legal & privacy

Privacy Policy

Your discoveries can be personal. This policy explains what information Loot handles, why we need it, and the choices available to you.

Last updated: August 3, 2026

Overview

Loot ("Loot," "we," "our," or "us") provides a mobile application and related website that help people identify, understand, value, and organize antiques and collectible objects. This Privacy Policy applies when you use the Loot app, visit this website, contact us, or otherwise interact with our services.

By using Loot, you acknowledge the practices described below. If you do not agree with this policy, please do not use the services.

Information we collect

Account and profile information

Loot creates an anonymous account identifier so core features can work before you register. If you create or link an account, we may receive your email address, display name, account identifier, authentication provider, and account creation information. Authentication may be provided through Firebase Authentication, Apple, or Google.

Scans, images, and collection content

When you scan or add an item, we process the photographs you submit and related information such as scan results, object names, categories, estimated values, condition, notes, folders, and collection records. Images and results may be stored so you can access your scans and collection.

Device, usage, and diagnostics information

We and our service providers may process technical information such as app instance identifiers, device and operating-system information, IP address, language, app version, interaction events, crash or diagnostic data, notification tokens, and general usage information.

Subscription and purchase information

If you start a trial or make a purchase, Apple, Google, and our subscription provider may send us transaction identifiers, product and entitlement information, subscription status, renewal information, and attribution data. We do not receive or store your full payment-card details.

Communications

If you contact us, we receive the information you choose to provide, including your name, email address, message, attachments, and support history.

How we use information

We use information to:

  • create and secure accounts and keep your data synchronized;
  • upload, analyze, identify, value, and organize scanned objects;
  • operate subscriptions, trials, and premium access;
  • send requested service and push notifications;
  • provide support and respond to questions;
  • understand product usage, measure campaigns, and improve Loot;
  • detect misuse, enforce limits, troubleshoot failures, and protect the service; and
  • comply with applicable law and enforce our agreements.

Where required, we rely on your consent. We may also process information to perform our contract with you, pursue legitimate interests such as securing and improving Loot, and meet legal obligations.

AI processing

Loot sends the image you choose to scan, together with instructions necessary to perform the analysis, to our server-side AI provider. The provider processes this material to return identification, provenance, authenticity indicators, and valuation-related results. Our current scan request is configured not to store the response as a reusable provider conversation.

AI results are estimates and may be incomplete or incorrect. Do not submit images containing people, sensitive documents, private background details, or anything you do not want processed for the scan.

How information is shared

We do not sell your personal information. We may disclose information to vendors that help us operate Loot, including:

  • Firebase and Google services for authentication, databases, file storage, server functions, app integrity, analytics, and messaging;
  • OpenAI for server-side analysis of submitted scan images;
  • Mixpanel for optional product analytics;
  • Adjust for install attribution and campaign measurement;
  • Adapty, Apple, and Google Play for purchases, subscriptions, and entitlement management; and
  • professional advisers, authorities, or a successor organization when required by law, needed to protect rights and safety, or connected with a corporate transaction.

These providers process information under their own terms and privacy policies and may operate in countries other than yours.

Your choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal information, or to object to certain processing. You may also withdraw consent where consent is the legal basis for processing.

  • You can change the product analytics preference in Loot's Settings. This preference controls Firebase Analytics and Mixpanel product events.
  • On iOS, campaign measurement that requires Apple's tracking permission is also controlled through the system permission prompt and device settings.
  • You can manage notifications through your device settings.
  • You can manage or cancel subscriptions through your App Store or Google Play account.

To exercise a privacy right or request account deletion, email support@lootai.app. We may need to verify your request before completing it.

Data retention

We retain information only for as long as reasonably necessary to provide Loot, maintain security, meet legal or accounting requirements, resolve disputes, and enforce our agreements. Retention depends on the type of data, why it was collected, and applicable obligations. Some limited information may remain temporarily in backups, fraud-prevention records, or service logs after an account or item is deleted.

Security

We use technical and organizational safeguards intended to protect information, including authenticated access controls, app-integrity checks, encrypted network connections, scoped cloud-storage paths, and access rules tied to user identifiers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

Loot and its providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers and take steps designed to protect information in accordance with this policy and applicable law.

Children's privacy

Loot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate. A higher minimum age may apply in some countries.

Changes to this policy

We may update this policy as Loot, our providers, or applicable laws change. We will publish the revised policy on this page and update the date above. If a change materially affects your rights, we will provide additional notice when required.

Questions or requests

Contact us

For questions about this policy or your personal information, contact the Loot team at support@lootai.app.