Privacy policy
StealTheLook, by Goals and Gambles LLC. Last updated 2026-08-22. Applies to the website (stealthelook-api.onrender.com), the installable web app, and the Android app (package com.goalsandgambles.stealthelook).
What the app does
You give StealTheLook a reel, short, or screenshot and, optionally, a photo of yourself. It describes what is in the clip and links it to stores. Optionally it renders clothing onto your photo. Makeup Atlas shows each country's trending look, and can render that makeup onto a selfie if you give it one.
The app has four modes, and the mode decides what the detector is asked to describe: Steal the Look (clothing, shoes, bags, jewellery), Big Back Activities (food and drink), Cool Tech (gadgets, tools, appliances) and Who is dis?, which reads social media handles that are already written on the screen.
We do not identify people
We do not perform face recognition, face matching, or any other biometric identification, in any mode. No face template is created, stored, compared or sent anywhere. The detector is instructed in every mode to describe objects and on-screen text only, and never to describe, assess or identify a person.
"Who is dis?" finds an account by reading text that the video is already displaying - the creator handle overlaid on the video, an @mention in the caption, an @mention in a visible comment, or a watermark - and offers to open that account on TikTok, Instagram, YouTube or X. If no handle is written on the screen, it returns nothing. It cannot and does not identify anyone from their face or appearance.
Data we process
- Your photo / selfie. Kept in your browser's local storage on your device. It is sent to our server only when you ask for a render, forwarded to our rendering provider (Perfect Corp YouCam) for that render, and not stored by us afterwards.
- The reel, short, or screenshot. Sent to our server and to our detection provider (Google Gemini) to describe what is in it, according to the mode you chose. Detection describes objects and on-screen text only; it never identifies or analyses the people in the clip. Not stored by us.
- Age range (Makeup Atlas). A range such as 18-24, never a date of birth, kept only in your browser. Users under 13 are blocked.
- Clicks on shopping links. We record that a link was clicked, the destination store, the search phrase, the product mode (clothes, food, tech), a two-letter country code, and the time. No account is needed and no identifier is attached to the click.
- Anonymous scan trends. When a scan runs we record which mode asked, which surface (web or app), a two-letter country code, how many items were found, and the item descriptions themselves (for example "blue satin slip dress") - never the image, and never anything about a person. These rows carry no account, device or install identifier of any kind, so they can answer "what is trending" but never "what did this person look at".
- Account and credits (optional). If you create an account: email address, a password hash, and a credit ledger. Payments are handled by Stripe; we never see card numbers.
- Server logs. IP address and request metadata for rate limiting and abuse prevention, retained briefly.
Android app permissions
- Display over other apps: draws the floating StealTheLook button and results panel. We draw only our own views.
- Screen capture (MediaProjection): when you tap the button, captures a short burst of up to five frames of your screen across about one second, so you can scrub to the moment you meant. Nothing is captured without your tap. Android shows a persistent notification the entire time capture is enabled, and you can stop it in one tap. We never read other apps' data and never inject anything into other apps.
- Detecting that a video is playing: while capture is on, the app compares a very coarse 16x16 brightness grid of the screen about once a second, purely to know whether to light up the button. That grid never leaves your phone and is never stored. An optional setting (off unless you turn it on) uses Android's Usage Access to check whether the app in front is a feed app, so the button stays dark elsewhere.
Affiliate links
Shopping links are affiliate links (Amazon Associates and, where configured, Sovrn Commerce). We may earn a commission on qualifying purchases at no cost to you. This is disclosed next to every link.
Third parties
Perfect Corp (YouCam) for rendering, Google (Gemini) for detection, Render for hosting, Stripe for payments, Amazon and Sovrn for shopping links. Each processes data under its own policy; we send them only what the feature needs.
Your choices
- Clear your photo and age range any time with "clear my data" in the app, or by clearing site data in your browser.
- Delete your account and credit ledger by emailing the address below.
- Revoke the Android permissions in system settings; the app then runs as a plain web app.
Children
StealTheLook is not directed at children under 13, and Makeup Atlas refuses users who state they are under 13.
Contact
Goals and Gambles LLC, goalsandgambles@gmail.com.