Privacy Policy

Bricklayers, MB, a Lithuanian small partnership (mažoji bendrija), legal entity code 308133831, registered office: Laisvės al. 85E-5, LT-44297 Kaunas, Lithuania. Registered in the Register of Legal Entities of the Republic of Lithuania. Contact: help@bricklayersapps.com.

We are the controller of personal data processed to operate CloserLook. This notice covers website visitors, account holders, people who contact us, and people whose information is submitted to or appears in a search, report or coach conversation. You do not need a CloserLook account to exercise your data-protection rights.

We apply the EU General Data Protection Regulation (GDPR) and applicable Lithuanian data-protection law. Contact help@bricklayersapps.com for privacy questions, a copy of your information, a correction, deletion or an objection to processing.

• Account and support information: your email, account identifier, sign-in and account status, preferences, and the messages and attachments you send to support.
• Guided-experience and search inputs: your quiz answers and relationship concerns, the name, username, age, approximate location, phone number, profile links and photo you choose to supply, and any email or preference submitted in the flow. Available fields vary by feature; many are optional.
• Public-source information: public profile names, handles, biographies, photos, counts, follower samples, posts, professional or education details, web-search results and source links. Sources may include Instagram, Facebook, LinkedIn and publicly accessible websites, obtained directly or through search and data-retrieval providers. Someone requesting a search may provide the initial identifying details.
• Reports and AI inferences: collected evidence, possible profile matches, summaries, assessments, source references and generated reports. These can concern someone who has never used CloserLook and can be inaccurate.
• Coach content: messages, conversation history, uploaded screenshots or images, AI replies and associated timestamps. Your uploads may contain other people’s information.
• Technical and usage information: browser and request information, which may include IP addresses in infrastructure logs, session identifiers, language, requested URLs, error records, security events and records of feature use and generation.
• Order information: the offer you select, entitlement or subscription status and related confirmations. The current payment preview does not collect card details or charge you. If paid checkout is introduced, its payment provider and the payment-data handling will be disclosed before payment.

A photo selected in the quiz is initially held in your browser. If you continue to start a report, a reduced copy can be submitted with the report request. Some guided-flow answers and contact details are passed in page URLs, which can appear in browser history and server logs. Avoid sharing a full personalised flow URL.

• Providing a service you request: account creation, authentication, saving your work, providing reports and coach replies, and handling service-related support. For your own data that is necessary for these activities, the basis is performance of a contract or steps you request before a contract (GDPR Article 6(1)(b)).
• Public-information research about other people: our and our users’ legitimate interests in organising relevant public information and assessing possible profile matches (Article 6(1)(f)), only where the processing is necessary and those interests are not overridden by the person’s rights and freedoms. Your contract with us does not itself provide a contractual legal basis for processing someone else’s data.
• Other people’s information in coach submissions: our and our users’ legitimate interests in providing contextual assistance with a conversation the user chooses to discuss (Article 6(1)(f)), only where necessary, proportionate and not overridden by the other person’s rights. Submit only relevant information and remove unnecessary identifying details. A user’s contract or consent does not automatically cover another person.
• Security, reliability and resolving disputes: our legitimate interests in preventing misuse, diagnosing problems, protecting accounts and defending legal claims (Article 6(1)(f)). We limit this processing to what is necessary for those purposes.
• Legal obligations: responding to valid legal requests, exercising data-protection duties and, when applicable, keeping required accounting records (Article 6(1)(c)).
• Optional consent-based activities: where consent is required for promotional messages or non-essential tracking, Article 6(1)(a). Creating an account, receiving a report or accepting terms is not, by itself, marketing consent. You may withdraw consent without affecting earlier lawful processing.

Required information is identified by the relevant form. Without an email we cannot provide email-based account access; without useful search details we may be unable to find relevant public information. You can leave optional fields blank. Refusing optional marketing consent does not prevent use of the Service.

Publicly accessible information is still personal data. Its availability is not blanket consent to collection, profiling or redistribution. The context, necessity, reasonable expectations and possible effects on a person matter when assessing legitimate interests. Information and generated inferences can be shown to the user who requested the relevant report or conversation.

If your information appears in CloserLook, email help@bricklayersapps.com to ask about its source, access it, correct a mistaken identity, request erasure or restriction, or object to our use of it. Include only enough detail to help us locate the relevant profile or report. We may ask for proportionate verification before disclosing data or making a change. Removing data from our systems does not remove the original information from an unrelated website.

When we obtain information indirectly, GDPR Article 14 may require us to notify the person individually, generally within one month or earlier on the first relevant communication or disclosure. Making this policy public does not automatically replace that duty. An exception can apply only where its specific legal conditions are met.

Do not submit unnecessary health information, intimate content, political or religious beliefs, criminal-record information or other particularly sensitive data. Public-source material and conversations can nevertheless contain such information. A legitimate interest alone is not sufficient to process GDPR special-category data: a separate Article 9 condition is required. Information is not “manifestly made public” by the person merely because another person published it or an AI inferred it.

To create a report, we send relevant subject details and collected evidence to an AI provider. For a coach reply, we send relevant conversation history and, where the feature supports images, recent uploaded images. Earlier images may remain in your saved conversation even when they are not included in a later AI request.

AI analysis may constitute profiling, for example when it proposes identity matches or summarises interests or behaviour from public activity. The output is probabilistic and may be wrong. We do not use these reports or coach replies to make decisions about you with legal or similarly significant effects, and our terms prohibit users from using them for eligibility decisions such as employment, credit or housing.

A coach conversation is not a confidential professional consultation. Avoid including information that is unnecessary for your question, and redact third-party details from screenshots where possible. You may challenge inaccurate information through the contact above.

Access is limited by the purpose of processing. Our current technical integrations include the following providers; which AI route is used depends on the feature and service configuration:

• Supabase: account authentication, application database and storage for reports, conversations and uploaded media.
• Apify and relevant actor providers: retrieving public profiles and web information using submitted identifiers, profile URLs and search queries.
• Anthropic: processing relevant report inputs, public-source evidence and coach content to generate AI responses.
• Vercel: website infrastructure and, where configured, its AI Gateway routing requests to the AI provider.

Information may also be available to authorised staff, hosting and email-delivery providers, and professional advisers where necessary for their work. The requesting user receives the relevant report or coach response and can retain a downloaded copy. We may disclose information to authorities when legally required, to establish or defend legal claims, or as necessary for a business reorganisation subject to appropriate confidentiality and data-protection duties.

Providers processing data on our behalf are subject to applicable data-processing obligations. Some providers also act as independent controllers for their own legal or security purposes. Third-party platforms and sites that you visit through a link apply their own privacy notices. Contact us for details of the recipients relevant to your data.

Providers and their subprocessors may process information outside Lithuania or the European Economic Area, including in the United States. We do not represent that all data stays in the EU. Locations depend on the relevant provider, hosting arrangement and processing route.

A transfer outside the EEA must have a valid GDPR transfer mechanism, such as an applicable European Commission adequacy decision or appropriate safeguards, including standard contractual clauses and any necessary supplementary measures. You may contact help@bricklayersapps.com to ask where your data is processed and obtain information about, or a copy of, the safeguards applicable to a particular transfer, with confidential details protected where necessary.

CloserLook uses cookies and similar browser storage for account access, language preferences and continuity of the guided experience. The current website does not load advertising pixels or a separate analytics or heatmap tracker. If we introduce non-essential tracking, we will provide the required information and obtain consent before using it where required by law.

A saved item becoming too old to use is not necessarily immediate physical deletion from your browser. You can clear cookies and site storage in your browser settings; doing so can sign you out or remove saved progress. Clearing browser storage does not delete information already submitted to our servers.

We retain personal data for the purpose for which it is needed, taking account of the type of information, ongoing account access, deletion requests, legal obligations and unresolved disputes. The criteria differ by category:

• Accounts, saved reports and conversations: for the period needed to provide your account and saved features. There is currently no fixed automatic expiry for server-stored reports or coach history. You can ask us to close your account or delete particular information; we assess what must be removed and whether a lawful retention exception applies.
• Source evidence and uploaded media: for as long as needed to deliver, explain or correct the associated result or saved conversation, resolve a dispute, or meet a legal obligation. We assess these records as part of a relevant deletion request.
• Support and security records: for the time needed to handle the issue, investigate misuse and deal with related claims, taking account of applicable limitation periods.
• Accounting and legal records: where applicable, for the period required by the relevant tax, accounting or other legal obligation. Such a requirement does not justify keeping all report or conversation content for the same period.
• Browser storage: as described in section 8. Browser-only expiry does not determine server-side retention.

Deletion from active systems may precede expiry of restricted backup copies or provider records retained under a separate lawful obligation. We can explain the retention applicable to your request. Where we must keep particular information, we will explain the reason rather than treating account closure as immediate deletion of every record.

We use access controls, authenticated account access and restricted storage for customer reports and uploaded media. Access to private files is limited through authorisation checks and time-limited file links. We take proportionate technical and organisational measures to protect information, but no internet service can guarantee absolute security.

Protect your email and sign-in links, avoid sharing private report links, and sign out on shared devices. Report a suspected security problem to help@bricklayersapps.com.

Subject to the conditions in applicable law, you can request access to your personal data and a copy, correction, erasure, restriction of processing, and portability of data you provided where processing is automated and based on consent or contract. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

You may object to processing based on legitimate interests because of your particular situation. We must stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need the information for legal claims. An objection to direct marketing must be honoured without this balancing exercise.

Email help@bricklayersapps.com and describe your request. You do not need to purchase a report or create an account. We will respond without undue delay and normally within one month. For complex or numerous requests, we may extend by up to two further months, explaining the reason within the first month. We may ask for additional information where reasonably needed to verify identity. Requests are normally free; any lawful exception will be explained.

You can complain to the Lithuanian State Data Protection Inspectorate (VDAI), or to the competent supervisory authority where you live, work or believe an infringement occurred. You do not have to contact us before making a complaint. Judicial remedies remain available.

CloserLook is intended for adults aged 18 and over. Our terms prohibit using it to investigate children. Public material or user submissions may nevertheless include a child’s information. If you believe we hold such information, contact help@bricklayersapps.com so we can investigate, restrict use where appropriate, and remove information where required.

We will update this notice when our practices or legal requirements change. The date above identifies the current version. For significant changes we will provide an appropriate notice, and obtain new consent where required before beginning a new consent-based use. Contact help@bricklayersapps.com if you need clarification about this English version or the handling of your information.