Privacy Policy

At Lookal, we believe in transparency and trust. This Privacy Policy explains how we collect, use, and protect your personal information when you use our rental platform.

Personal Information:

• • Name, email address, and phone number
• • Profile photo (optional)
• • Government-issued ID and facial biometric data for identity verification (processed by our third-party verification service provider, Didit)
• • Tenants: Phone and ID verification required before requesting property viewings
• • Landlords: ID verification required to list properties

Property Information:

• • Property listings, photos, and descriptions
• • Location data and addresses
• • Rental rates and availability

Usage Information:

• • Messages between tenants and landlords
• • Viewing requests and appointments
• • App usage patterns and preferences

• • To connect tenants with landlords
• • To facilitate viewing requests and appointments
• • To verify user identities through Didit and build trust
• • To enable secure messaging between users
• • To send important notifications about viewings
• • To improve our services and user experience
• • To prevent fraud and ensure platform safety

We DO NOT sell your personal data. Your information is only shared in these limited circumstances:

• • With other users when necessary for transactions (e.g., landlords see tenant names when viewing is requested, tenants see landlord contact info)
• • With Didit for identity verification purposes (ID documents and biometric data)
• • With service providers who help us operate the platform (hosting, analytics, push notifications)
• • When required by law or to protect rights and safety

You have the right to:

• • Access your personal data
• • Correct inaccurate information
• • Request deletion of your account and data
• • Opt-out of non-essential communications
• • Export your data in a portable format

Verification Data:

• • For data processed by Didit (ID documents, biometric data), you must contact Didit directly for access, correction, or deletion requests
• • Lookal can delete verification status records but cannot delete data stored by Didit

We implement industry-standard security measures to protect your data, including:

• • Encrypted data transmission (HTTPS/SSL)
• • Secure password storage with encryption
• • ID documents and biometric data processed by Didit (not stored on our servers)
• • Regular security audits and updates
• • Limited access to personal information
• • Webhook signature verification for all third-party integrations

We retain your personal information only as long as necessary to provide our services and comply with legal obligations.

Lookal Data:

• • When you delete your account, we remove your personal data within 30 days, except where we must retain it for legal reasons
• • Verification status records (verified/pending/rejected) are retained for audit purposes

Didit Data:

• • ID documents and biometric data are retained by Didit according to their policies
• • Didit may retain data for compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations

Lookal is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by email. Continued use of Lookal after changes means you accept the updated policy.