Eagle Consultancy, trading as LooView (Chamber of Commerce 52403157, Galerij 17, Naarden), is the controller for the personal data processed on looview.io. Questions or requests: info@looview.io. We have no separate data protection officer; LooView's size does not call for one. This policy describes what we process, why, with whom and for how long. Version 2026-10-06. The Dutch text is the binding one.
Anyone who only browses the map and the toilet pages enters nothing. Our hosting (Vercel) and Firebase then process technical data such as your IP address, browser and the pages requested, in logs kept briefly and used only to run the site and to recognise abuse (legitimate interest). We build no profile from it. The map itself comes from Google Maps; see the cookie policy.
To measure you need an account. We then process your e-mail address, your display name, a hashed password (at Google's Firebase Authentication) or, if you sign in with Google, the e-mail address and name Google gives us, plus the time of creation and sign-in. Legal basis: the contract (the terms of use). You receive a welcome mail and, with an e-mail account, a confirmation link; we send those through Resend. We send no newsletters and no advertising. You can cancel your account at any time via info@looview.io; we delete it within 30 days.
With a measurement we process your photos, the GPS location and time, your answers to the questions, and the device type. Faces, reflections and documents our model recognises are pixelated before a photo leaves your phone. Photos and measurements are stored at Firebase (Google). For the assessment the photos go to Anthropic, our AI provider, which uses them only for that assessment and not to train models. A measurement is published with your display name, unless you measure anonymously. Legal basis: the contract, and for the authenticity checks (GPS, time, duplicates) our legitimate interest in a reliable register. If you delete your account, your measurements stay in the register anonymously, detached from your name; see the terms of use.
If you take part in a paid programme, such as the founding inspector programme in Amsterdam, we also process your legal name, your IBAN, your confirmation that you are 18 or older, your acceptance of the programme terms and the payouts. Legal basis: the contract and our legal (tax) obligations. We keep these records for seven years after the last payout, the statutory retention period for business records. Your profile shows your IBAN only in masked form.
If you fill in the contact form, request an inspection as an operator or sign up as a founding inspector, we keep your name, e-mail address, message and, where given, the name and address of your venue, with the time and the browser you sent it from. The message reaches us by e-mail (through Resend) and we reply to the address you gave. Legal basis: our legitimate interest in answering you, or the steps towards a contract. We keep these messages as long as needed to handle them and delete them afterwards. If location services fail on your phone during a measurement, the app sends a short technical note to our logs (which error, not where you are) so we can fix it.
We sell no data and show no advertising. We use these processors, each under a data processing agreement: – Google (Firebase Authentication, Firestore and Storage for accounts, measurements and photos; Google Maps for the map). – Vercel (hosting of the site and the logs). – Anthropic (assessment of measurement photos). – Resend (e-mail). – Google Analytics, only if you consent; see the cookie policy. Google, Vercel, Anthropic and Resend process data (also) in the United States. The statutory transfer safeguards apply: the EU standard contractual clauses or a certification under the EU-US Data Privacy Framework. Beyond that we share data only when the law requires it, for instance with the Dutch tax authority about payouts, or with the police and prosecutors in case of a serious criminal offence.
– Account: as long as it exists; deleted within 30 days after cancellation. – Measurements and photos: as long as they are part of the register, anonymously after cancellation. – Programme records and payouts: seven years after the last payout. – Contact messages and requests: until they have been handled. – Technical logs: briefly, at most a few weeks. – Your cookie choice: in your own browser, until you clear or change it.
All traffic with looview.io is encrypted. We never store passwords ourselves; Firebase Authentication keeps them hashed. Access to the admin console is limited to LooView's administrators. Faces and documents are pixelated before upload, so the original never reaches us or Anthropic. If you find a leak or a weakness, e-mail info@looview.io.
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on our legitimate interest. Consent (for Google Analytics) can be withdrawn at any time on the cookie page. E-mail your request to info@looview.io from the address of your account; we respond within one month. Decisions of our AI model about a photo or measurement are reviewed by a person on request; the terms of use explain how. If you are unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
LooView is not meant for children. An account is possible from 16 years; paid programmes from 18. If we notice that a younger child holds an account, we delete it.
We update this policy when LooView changes or when the law requires it. This page always shows the current version with its date. For a material change, such as a new processor or a new purpose, we e-mail account holders in advance and ask for consent again where needed.
