Last updated: October 27, 2026 · Look Within is made by Ticex Labs
This policy explains how Ticex Labs ("we", "us") handles consumer health data in the Look Within app and on lookwithin.co. We apply it to every Look Within user, wherever you live. It is written to meet the health privacy laws that protect our users, including Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370), the Connecticut Data Privacy Act, California's Confidentiality of Medical Information Act, Canada's PIPEDA, Quebec's Act respecting the protection of personal information in the private sector (Law 25), and the private-sector privacy laws of Alberta and British Columbia. Our general Privacy Policy covers everything else.
Privacy officer: The Privacy Officer of Ticex Labs is responsible for protecting your personal information. Contact: info@lookwithin.co.
Look Within is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone under 18.
We collect only what you choose to enter in the app, plus the few things listed below that are needed to run it:
| Category | Examples |
|---|---|
| Recovery profile | Your first name, age, gender, what you're recovering from, your recovery goal, start date, streaks, goal days and subscription plan |
| Daily check-ins | Whether you stayed clean, mood, energy, meditation minutes, notes you write |
| Journal entries | What you write, emotions, triggers, coping strategies, gratitude |
| Honesty reflections | Your honesty check-in scores, reflections and commitments |
| Coping toolkits and items | Toolkits and the items in them. They are private unless you choose to make a toolkit public (see section 4). |
| Emergency contacts | Names and phone numbers of other people you add, used only to show them to you |
| Achievements | Milestones you reach and when |
| Support messages | Anything you write in a support request, which may include health details |
| Approximate location or city | Only when you use Find Centers Near Me. Your location is rounded to about 10 km on your phone before it is sent, and we don't store it. |
| Error reports | Crashlytics error messages, linked to your account ID. They never include your journal, check-ins or other content. |
| Website early-access list | Your email address. Signing up for a recovery app could suggest something about your health, so we treat it as consumer health data too. |
We do not collect biometric or genetic data, your contacts list, or advertising identifiers, and we do not use geofencing of any kind. We do not use analytics or advertising trackers in the app or on our website. We do not infer health information from other data, and we do not use your data to train AI models.
We use your consumer health data only to provide the Look Within features you ask for:
If we ever want to collect a new category of health data or use it for a new purpose, we will update this policy and ask for your consent again first.
We do not share your consumer health data with third parties or affiliates, and Ticex Labs has no affiliates. We do not sell it, rent it or trade it for anything of value.
To run Look Within we use the following processors. They handle data only on our behalf, under written contracts that limit them to our instructions:
| Processor | What it does | Data it handles |
|---|---|---|
| Google LLC (Firebase) | Sign-in, secure database storage, website hosting, app integrity checks (App Check), error reports (Crashlytics) | All categories in section 1 |
| Google LLC (Gemini via Firebase AI Logic) | Finding treatment centres when you use Find Centers Near Me or search by city | Only your approximate location or the city you type, and the search request |
| RevenueCat, Inc. | Subscription status | Your subscription status, linked to your account ID. No health data. |
| Google Play / Apple App Store | Payments | Purchase details, under their own policies. No health data. |
| Microsoft (Microsoft 365) | Delivering and storing support email | Only what you include in a support request or email to us |
Public toolkits: if you make a coping toolkit public, other signed-in Look Within users can see it and the display name you choose. They never see your email. Nothing else you enter is ever visible to other users.
Where your data is stored: Google stores Look Within's data on its servers in the United States. Before choosing Google we assessed how well it protects your information, including for users in Quebec and the rest of Canada, and our contract with Google requires it to protect your data and use it only on our instructions. US authorities may be able to access data stored in the United States under US law.
We never disclose your health information without your written permission, except where the law requires or allows it. We never use it for marketing. We may disclose data if the law requires it (for example a valid court order). We disclose only what is legally required and, where we are allowed to, we will tell you first.
When you first open Look Within, we ask for your separate, opt-in consent before you can enter any health information. You can withdraw it at any time in the app under Support > Your health data > Withdraw consent, or by emailing us. Once you withdraw, we stop collecting your health data. What you saved earlier stays in your account, unused, until you delete it, or you can ask us to delete it straight away.
Before your first treatment centre search we also ask whether you are happy for your approximate location or city to be sent to Google's Gemini AI. You can ask the app to check with you again at any time.
You have the right to:
We may ask you to confirm the request from your account email so we know it is really you. We respond within 30 days. If we need more time we will tell you why within those 30 days, and the extension will be no more than another 30 days. Requests are free (at least twice in any 12 months). We will never treat you differently, charge you more or offer a worse service for using your rights.
Deletion: deleting your account in the app removes your records from our live database immediately, including any public toolkits. Support emails are removed from our database as soon as they are delivered to our inbox. Anything not deleted instantly (for example a request sent by email) is deleted within 30 days of your request. We also tell our processors to delete your data. Any copy held in a backup or archive is deleted within six months.
Appeals: if we decline your request, you can appeal by replying to our decision or emailing info@lookwithin.co with the subject "Appeal". We will answer within 30 days and explain our reasons. If we still decline, you can complain to your regulator: in the US, your state Attorney General (for example the Washington Attorney General); in Canada, the Office of the Privacy Commissioner of Canada, or in Quebec the Commission d'accès à l'information. You can also contact us with any privacy complaint at any time, and we will look into it.
We keep your data only as long as we need it to run Look Within for you: while you have an account, so your history is there when you need it. You can delete your account at any time. Your location is never stored. Support messages are removed from our database once delivered to our inbox. Early-access emails are deleted when you ask or once the list is no longer needed. We may keep limited purchase records where tax or accounting law requires it; these contain no health data.
If we change this policy we will update the date at the top. If a change means collecting a new category of health data, using it for a new purpose or sharing it, we will ask for your consent in the app before it applies to you.
Ticex Labs
Privacy Officer, Ticex Labs
info@lookwithin.co