FIRST LOOK · YOUR PERSONAL DATA

Privacy policy

Understand what you share, control your visibility and manage your data.

Last updated: 7 October 2026 · Web, Android & iOS

Publisher and data controller: La Folle Image66 Avenue des Champs Élysées, 75008 PARIS, France
contact@lafolleimage.com

1. What we use and why

First Look lets adults discover people nearby, send a First Look and chat after acceptance. Data comes from you, your device and the sign-in and notification services.

Account and sign-in: Account identifier, chosen first name and session information. For SMS sign-in, your number and the code you enter are sent to Twilio Verify. First Look stores a protected fingerprint of the number and verification information, without saving the code in its database. On Android, you can allow autofill from a single received text message through Google Play Services. The full message is processed only on your phone to extract the code; First Look does not store it or send it to its server. Invited beta numbers are also held in an access list. Web sign-in with ChatGPT may supply an identifier, email address and name; only the identifier is saved in the First Look account database.
Photo and adulthood: Photo, upload time and visibility settings. Your entered birth date is used to check that you declare you are at least 18; it is not kept in the profile database. This is a self-declaration. Depending on your device, the photo file may contain embedded metadata; new photos submitted for automatic checking have this metadata removed before storage and analysis; this does not retroactively remove it from older photos.
Radar: Latest latitude, longitude, estimated accuracy and measurement time, to calculate proximity and radar visibility. We do not build a history of your journeys.
Looks and conversations: Participants, look and match status and dates, message text, sent and read times. This information delivers your exchanges and shows unread messages.
Notifications and safety: Device notification identifier or browser subscription, language, preferences, delivery status, blocks and report reasons. Protected counters linked to a number or IP address limit sign-in attempts and abuse. Hosting and service providers may process technical connection logs.

Legal grounds

Account administration, SMS verification and exchanges necessary to provide the requested service rely on performance of that service. Security and abuse prevention rely on our legitimate interest in protecting users. Responding to data-rights requests and requirements imposed by law relies on legal obligations.

Radar and its continuation in the background are optional and rely on your decision to activate them and your consent to this use of location. Device permissions control technical access; they do not replace information about the purpose. Advertising access to your device that requires consent is subject to your choices in the advertising form.

A first name, a birth date used to check adulthood, and valid sign-in allow you to create a profile without a photo. The profile stays invisible until you add a daily photo and activate the radar. Permissions can be prepared before this step without sending a location to the service. Refusing location prevents radar from working; refusing notifications does not prevent you from reading exchanges in the app.

2. You choose your visibility

Radar shows visible profiles within an estimated 20-metre radius. Relevant users see your first name, photo and estimated distance and direction. Raw GPS coordinates are not sent in radar results, but proximity and direction can allow others to infer your location.

You can pause visibility and revoke location permission in device settings. Background radar requires separate activation; its session is limited by your visibility expiry, up to 12 hours. It stops, in particular, when disabled, when you sign out or when the session expires.

12 hours refers to radar visibility, not deletion of your data. Your name and photo remain accessible to people with whom a look exists, even if expired or declined, and to your matches, unless blocked or the profile is deleted.

Camera and notification permissions are requested to take your photo and deliver your chosen alerts. Notifications sent to delivery services contain neither your message text, photo nor GPS coordinates.

3. Advertising and privacy choices

First Look integrates Google AdMob in mobile versions equipped with this feature. The test configuration uses test ads. Ad requests are configured as non-personalised; this does not mean there is no data collection.

Depending on configuration and your choices, Google’s SDK may process IP addresses, device or advertising identifiers, ad interactions and diagnostics to deliver ads, measure performance and prevent fraud. Google SDK data details.

First Look code does not send AdMob your first name, number, photo, conversation content or precise GPS location. Google’s consent management form is shown when required. You can change your choices using the advertising privacy options in your profile when available. Refusing advertising consent does not block the app’s meeting features.

This privacy page does not include the advertising SDK. About non-personalised ads.

4. Who can access data?

Other users only access the information provided through proximity and exchange features. La Folle Image and technical providers operate and protect the service. Authorised moderators can review proposed photos and evidence attached to reports. A basic server-side filter checks certain prohibited expressions in names and messages, without an external classification provider. Access controls protect messages; messages are not end-to-end encrypted.

When automatic checking is enabled, your permission is requested for each new photo before it is sent to OpenAI (Moderation API). Embedded metadata, including any GPS metadata, is removed before this transfer. Only the image is sent: no phone number, radar coordinates or conversations. This check detects certain sexual, violent or self-harm content categories; it does not verify identity or age. You may refuse: your profile remains usable without a new photo, but that photo cannot be published and does not renew your visibility.

A photo that passes the automatic check may be published without prior human approval. A rejected photo or a failed check leaves the new photo private. Contact contact@lafolleimage.com to appeal a decision for human review. The permission, its date and the decision are attached to the photo case for its retention period. Reports and their conversations are not sent to this API. Read the OpenAI API data processing and retention rules.

Cloudflare — hosting, database and private photo storage (Workers, D1, R2). Privacy policy.
OpenAI / Sites — web hosting platform and ChatGPT sign-in when used on the website. Privacy policy.
Twilio Verify — sending and checking SMS verification codes, with telecommunications operators. Privacy notice.
Google / Firebase / AdMob — push notification delivery, mobile advertising and advertising consent management, depending on the features enabled. Privacy policy.
Apple — notification delivery on Apple devices. Privacy policy. Mozilla — web notifications when Firefox is used. Firefox privacy notice.

Data may also be disclosed to authorities when legally required. Avoid sharing unnecessary sensitive information in your photo, messages or reports. A recipient may keep a copy or screenshot of what you share.

International processing

These services use international infrastructure: data may be processed outside the European Economic Area, including in the United States. Their notices linked above describe the countries, recipients and transfer mechanisms they use, including adequacy decisions and standard contractual clauses where applicable. This page does not guarantee exclusively European hosting. Contact La Folle Image for details about safeguards applicable to your data or a copy of the available safeguards.

5. How long is data kept?

On the website, a secure session cookie keeps you signed in with SMS for up to 30 days; on mobile, the token is held in the device’s secure storage and removed when you sign out. Local storage also remembers preferences and demo state. Advertising identifiers are managed separately according to your advertising choices.

Data	Retention in First Look
Account, photo, exchanges	Kept while the account exists, unless removed through an in-app action. There is currently no automatic deletion for inactivity. A newly approved photo replaces the previous file; a copy may temporarily remain in a moderation case. Looks, matches and messages are not erased after 12 hours.
Location	Only the latest reading is stored. After 90 seconds without an update, it no longer determines your presence. Pausing clears coordinates; stale coordinates are cleaned up during later service requests, without a guarantee of physical erasure at exactly 90 seconds.
SMS sign-in	A code is valid for 10 minutes and a session for up to 30 days. Expired verification, session and rate-limit records are cleaned up during subsequent sign-in requests.
Notifications	Subscriptions are linked to the account. First Look stops new delivery attempts when the look expires, or after 24 hours for a message. An already transmitted notification may arrive later or remain visible on the device. Technical queues are cleaned up during later requests. This does not delete the conversation’s message.
Blocks and reports	Blocks remain while the accounts exist. Blocking deletes the shared conversation. Reports may retain the reason, photo and up to 30 messages from that conversation for 90 days, including after account deletion. Photo review cases expire after 24 hours; an approved photo remains attached to the profile until replaced or deleted. Account restrictions and a protected phone fingerprint may remain for 90 days to prevent suspension evasion. Cleanup runs during service requests. The accepted rules version and date are retained until account deletion.
Local preferences	Language, welcome flow, sound and vibration remain on the device until changed or local data is cleared. The demo also stores its state locally. Account deletion does not erase all these items.

Logs, backups and data processed by providers follow their retention rules according to the service, security needs and legal obligations. The validity periods above do not promise simultaneous erasure of all their copies.

6. Delete your account and data

In the app, open Me → Delete my profile and data, then confirm. This removes your profile, stored photo, looks, matches, messages, notification subscriptions and associated records from the First Look database, together with the linked SMS identity.

You can also request deletion by email, including if you cannot sign in or did not finish creating a profile. Include the identifier or number used for your account only in your private email. Never send your SMS code or password.

Request deletion by email

The moderation evidence and restrictions described above may remain until their expiry. Uninstalling alone does not delete your account. Deleting your profile does not delete your ChatGPT account, copies kept by other users, local preferences or automatically remove you from the beta invitation list. You can also request removal from that list by email.

7. Your rights and contact

Subject to the conditions in applicable law, you can request access, correction or erasure of your data, restriction of processing, portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting processing already carried out.

Email contact@lafolleimage.com or write to La Folle Image, 66 Avenue des Champs Élysées, 75008 PARIS, France. We may request only the information needed to verify that the request concerns your account. You can also lodge a complaint with the CNIL or your local data protection authority.

First Look is for people aged 18 and over. If you believe a minor is using the service, report it in the app or contact us. This policy is updated when the service or data processing changes; its revision date appears at the top.