Privacy Policy

Summary

This policy explains what personal data Ocufuse collects, why, where it is kept, who else handles it, and the rights you have. It covers the Ocufuse apps (iPhone and web) and this website.

Who is responsible

Ocufuse is provided by SPINATON L.L.C., a company registered in Kosovo. We decide how and why your personal data is used, so we are the data controller responsible for it.

Company

SPINATON L.L.C., Kosovo

Address

SPINATON L.L.C., Rexhep Malaj, Prishtina, Kosovo

Email

hello@ocufuse.com

Phone

+1 (561) 652-2011

Write to us about anything in this policy, including requests to use your rights.

Ocufuse isn't intended to diagnose, measure, treat or monitor any condition. See our Terms of Use.

What we collect

The games list

To unlock Shade Hunt, Dot Chase and Edge Spot on ocufuse.com, you give us your email address and agree to game emails. We use it only to send news about Ocufuse games and updates, at most twice a month, and never sell or share it for advertising. It is sent through our form relay, FormSubmit, and kept in our email inbox. Every email has a way to unsubscribe, or write to hello@ocufuse.com and we remove you. We keep it until you unsubscribe. Whether the games are unlocked is remembered only in your browser.

What we don't collect

• We don't track your location. An appointment's place is only the place you pick.
• We don't read or upload your address book, and we don't read data from Apple's Health app.
• The apps don't collect advertising identifiers or track you across other companies' apps or websites.
• The apps have no advertising tools and no third-party analytics. The web app keeps anonymous daily totals of how often a few features are used, such as a game finished or a photo saved. Nothing that identifies you, your account, your device or your IP address is stored with these totals.
• We don't run facial recognition and don't create face templates or biometric identifiers from your photos (see Eye photos and on-device analysis).
• The website uses Google Analytics only if you accept it in the cookie banner. Without your consent it sets no analytics cookies. Guides and blog articles on the website show ads from Google AdSense (see This website, below). The apps show no ads.

Health information and your consent

Your eye photos, journal entries, care records and prescriptions are information about your health. Data protection law treats this as a special category of personal data, and some US state laws treat it as consumer health data or sensitive personal information. We only process it with your explicit consent (GDPR Art. 9(2)(a)).

When you set up Ocufuse, the consent screen asks you to:

• confirm that you are 18 or older;
• accept the Terms of Use and this Privacy Policy;
• give your explicit consent for us to store and use your health information to run Ocufuse for you. This is required, because keeping that record is what Ocufuse does;
• decide separately whether to allow eye photos. You can withdraw this consent at any time in the app. Withdrawing it deletes your eye photos.

We record your choices on your profile, with the date and the version of the wording you agreed to.

To withdraw your consent for health information, delete the entries you no longer want us to keep, delete your account (Settings > Data & privacy > Delete account), or email us and we will delete it for you. Withdrawing does not affect what we did before.

We do not use your health information for advertising, sell it, or share it with anyone except the providers who host and run Ocufuse for us (see Who handles your data). We do not use it to train AI models.

Eye photos and on-device analysis

• Your photos. Before upload, each photo is resized and saved again as a new image, which removes hidden camera data such as the location where it was taken. Photos are kept in private storage, in a folder that belongs to your account. Only you can see them through the app.
• Finding your eyes. In the iPhone app, the camera guide and the eye markers use Apple's face landmark detection, which runs on your iPhone, to find where your eyes are. It does not create or store a face template or anything used to recognise who you are, and it is never used to identify you.
• Marker points. We save only a few points on each photo, such as the centre of each pupil, the light reflection, the eyelid edges and the eye corners, as positions on the image, so you can see and adjust them later. They are deleted with the photo or your account. To show your photos quickly, your iPhone may also keep eye positions on the phone only; they are removed when you log out.
• No diagnosis. Ocufuse does not diagnose or measure your eyes.

Eye prescriptions

You can add an eye prescription by typing it in, scanning a paper copy with your camera, or importing a photo or PDF. When you scan or import one, the text is read on your iPhone to fill in the form; it is not sent anywhere to be read. You check the values before you save them.

We store the values you save. We keep the original photo or PDF only if you choose to, in your account's private storage. Deleting a prescription deletes its file too.

How we use it

• To create and secure your account and sign you in.
• To store your photos and entries and show them back to you: your timeline, comparisons, checklist, practice log, level and points.
• To build a Doctor Brief or a records export (PDF, CSV or text) when you ask for one. On iPhone, these files are made on your phone and only leave it if you share them.
• To provide Ocufuse Plus: check whether your account has an active subscription, trial or lifetime purchase, unlock Plus on both iPhone and web, and answer billing and refund questions.
• To keep the service working and secure, fix errors, and prevent abuse.
• To answer your messages and send essential service emails, such as sign-in links and account deletion confirmations.

We do not sell your data, use it for advertising, share it with data brokers, or use your photos or entries to train machine learning models. We do not make automated decisions about you that have legal or similarly significant effects.

Legal bases

Under the EU General Data Protection Regulation (GDPR) and comparable laws, we rely on:

• Contract (GDPR Art. 6(1)(b)): to provide your account, the features you use and, if you subscribe, Ocufuse Plus.
• Explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)): to store and process your health information, including eye photos, journal entries, care records and prescriptions. See Health information and your consent.
• Legitimate interests (GDPR Art. 6(1)(f)): to keep the service secure, prevent abuse, answer messages you send us, and keep the care contacts you choose to save.
• Legal obligation (GDPR Art. 6(1)(c)): where we must keep or disclose information by law, such as tax and accounting records for subscriptions.

You can withdraw your consent at any time. Withdrawing your eye-photo consent deletes your photos. Because Ocufuse cannot work without the health information you add, withdrawing that consent means we delete it, or your account. Withdrawal does not affect processing that happened before.

Payments

On the web, Stripe takes the payment for Ocufuse Plus and for one-off tips. Stripe receives your card details, billing country and payment history; we receive your subscription status and a customer reference.

We never see your card or bank details.

Who handles your data

We do not sell or rent your personal data, and we do not share it for advertising. We use a small number of service providers who process data on our behalf, under contracts that require them to protect it and use it only on our instructions.

Apple, Google and Stripe also act on their own account for parts of their service, under their own privacy policies.

Nothing leaves your account unless you send it yourself, for example a Doctor Brief or export you give to your clinician. Ocufuse never contacts anyone for you: messages to your doctors open in your own apps, such as Messages, Mail or WhatsApp. Once you share something, the person you share it with is responsible for how they handle it.

We may disclose data if required by law or to protect someone's safety, and we will tell you unless the law prevents it. If Ocufuse's business is transferred, this policy continues to protect your data.

International transfers

Your account, photos, journal entries and other records are stored in the EU (Ireland). Ocufuse is run from Kosovo, and some providers above are based in the United States or work worldwide, so data may be accessed from outside your country. Where personal data is transferred outside the EU or European Economic Area, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (with the UK Addendum for UK data).

How long we keep it

• Account, photos and entries: until you delete them or your account. When you delete an entry or photo, it is removed from the live database and storage straight away.
• Eye photos after you withdraw photo consent: deleted straight away.
• After you delete your account: your login, profile, every entry and every file in your account's folders (photos, prescriptions and appointment images) are removed from live systems straight away.
• On your iPhone: cached photos, settings and export files are removed when you log out or delete your account, and when you delete the app.
• Security logs: up to 90 days.
• Subscription and payment records: as long as tax and accounting law requires (often up to 10 years), even after you delete your account. These records hold billing details only, never your photos or entries. Apple, RevenueCat and Stripe keep their own purchase records as their terms and the law require.
• Messages to us: up to 24 months after the conversation ends, then deleted.
• Inactive accounts: if you don't sign in for 24 months, we email you, and delete the account 30 days later if you don't respond.

When you delete your account, we erase your personal data within 30 days, including from backups. The exceptions are: security logs, kept up to 90 days to protect the service; messages you send us, kept up to 24 months so we can answer follow-ups; and anything the law requires us to keep (for example records of purchases for tax and accounting), kept only as long as required. We use these for nothing else.

Security

Data is encrypted in transit (TLS) and at rest. Access rules in the database (row level security) mean each account can only read and change its own records, and files are kept in private storage, with one folder per account, that requires your signed-in session. The keys that can get around these rules exist only on our server, never in the app. Passwords are stored only as secure hashes.

To prevent abuse, we limit how often sign-in can be tried, how many emails can be sent and how many entries can be added, and we limit the size of uploads. On iPhone, cached photos and export files use iOS's strongest file protection, so they can't be read while your phone is locked. Access to production systems is limited to keeping the service running or helping you when you ask.

No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the supervisory authority as the law requires.

Your rights

You have the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that is wrong.
• Delete your data, which you can do yourself from the app (see how). Cancel any Ocufuse Plus subscription first: deleting your account does not cancel a subscription.
• Receive your data in a portable format. The app's export gives you your entries in a machine-readable file. For a complete copy, including photo files, email us.
• Restrict or object to processing based on legitimate interests.
• Withdraw consent at any time, including your separate consent for eye photos (see Health information and your consent).

Email hello@ocufuse.com or use the contact form to make a request. We answer within one month (for complex requests we may need up to two more months, and will tell you why). We may ask you to confirm the request from the email address on your account. Using your rights is free.

Please tell us first if you are unhappy, so we can try to fix it. You can also complain to a data protection authority:

• Kosovo: Information and Privacy Agency (Agjencia për Informim dhe Privatësi), aip.rks-gov.net
• EU and EEA: the authority in the country where you live or work (list of authorities)
• United Kingdom: Information Commissioner's Office, ico.org.uk
• Switzerland: Federal Data Protection and Information Commissioner, edoeb.admin.ch

Your privacy choices

You can change how this website uses your information at any time with Your Privacy Choices, linked at the bottom of every page. Your choices are saved in your browser on this device, so set them again if you use another browser or device, or after you clear your browser data.

Open your privacy choices

• Analytics cookies. Google Analytics stays off unless you turn it on, and you can turn it off again at any time.
• Non-personalised ads. Ads on guides and blog articles are non-personalised by default, so they are not chosen from a profile of your interests. If you switch this off yourself, Google may use cookies to personalise the ads you see. Health information from your Ocufuse account is never used for ads.
• Do not sell or share my personal information. Ocufuse does not sell personal information. If you opt out, we record your choice anyway, turn off analytics and keep ads non-personalised in that browser.
• Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information, with the same effect. The choices window shows when the signal is detected.
• Limit the use of my sensitive personal information. We use health information only to provide the service you ask for (see Health information and your consent). You can record a request to limit its use in the choices window or by email.

California (CCPA, as amended by the CPRA)

If you live in California, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be treated differently for using these rights. Ocufuse does not sell personal information and uses sensitive personal information only to provide the service.

EU, EEA and UK (GDPR and UK GDPR)

You can access, correct and delete your personal data, get a copy in a portable format, restrict or object to processing, and withdraw consent at any time, as described in Your rights. You can also complain to a data protection authority.

How to make a request

• A copy of your data: in the web app, open Settings to export your entries. For a complete copy, including photo files, email us.
• Deleting your account: see Delete your account.
• Anything else: email hello@ocufuse.com or use the contact page. We may ask you to confirm the request from the email address on your account, and we answer as described in Your rights.

Notices for US residents

We do not sell your personal information, including health information, or share it for cross-context behavioural advertising, and we have not done so in the past 12 months. Ads on the website are non-personalised unless you choose personalised ads yourself. We use sensitive personal information only to provide the service you ask for. To opt out or to limit the use of sensitive personal information, use Your privacy choices.

California

Under the CCPA as amended by the CPRA: in the past 12 months we collected identifiers (email address, account ID, IP address and, on this website with your consent, cookie IDs); personal records (name); characteristics of protected classifications (age or date of birth and sex, if you add them); commercial information (subscription status and purchase history); internet or network activity (server logs and, with your consent, website analytics); and sensitive personal information (account login and health information). Sources, purposes and retention are described above. We disclose these categories only to the providers in Who handles your data for business purposes. You have the right to know, access, correct and delete your personal information, and not to be treated differently for using these rights. You can use an authorised agent; we will verify requests through the email address on your account.

Washington, Nevada and other consumer health data laws

Our Consumer Health Data Privacy Policy explains how we handle consumer health data under the Washington My Health My Data Act, Nevada's consumer health data law and similar laws. We do not sell covered information as defined by Nevada law.

Other US states

If you live in a state such as Virginia, Colorado, Connecticut, Utah, Texas or Oregon, you may have the right to access, correct, delete and get a copy of your data, and to opt out of sale, targeted advertising and profiling (we do none of these). You can appeal our decision on your request by replying to it. If your appeal is denied, you may contact your state Attorney General.

Biometric privacy laws

We do not collect biometric identifiers or biometric information to identify you, as covered by laws in states such as Illinois, Texas and Washington. The on-device face landmark detection and the marker points described in Eye photos and on-device analysis are used only to show your eyes on your own photos. They are never used to recognise anyone, never sold, never disclosed except to our hosting provider, and deleted with the photo or your account.

Children

Ocufuse is for adults aged 18 or older and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

This website

ocufuse.com is a static website. Our hosting provider, Cloudflare, processes the IP address of each visit to deliver the page and protect the site from attacks. Our typefaces are served from this website itself, so loading them sends nothing to Google. The status line in the footer checks that our services are running by contacting Supabase, which receives your IP address. If you use the contact form, your message is sent through FormSubmit to our inbox.

The free browser games keep your best score in your browser's local storage, together with your light or dark mode, eye comfort mode, cookie choice and privacy choices. This stays on your device and is never sent to us. Clearing your browser data removes it.

Analytics cookies

If you click Accept in the cookie banner, the website loads Google Analytics 4 to measure which pages and links are used, how far pages are scrolled, which FAQ questions are opened, which free games are started and finished (with the score), and which Plus plan buttons are clicked. Google Analytics sets cookies (named _ga and _ga_*) that last up to two years. We do not send your name, email address, phone number or anything from your Ocufuse account, and the web app at app.ocufuse.com never uses Google Analytics; it only keeps the anonymous daily totals described above. If you click Decline, nothing is loaded. You can change your choice at any time with "Cookie settings" in the footer.

Ads on the website

The website loads Google AdSense on every page, and shows ads on guides and blog articles. Google receives your IP address and information about your browser and the page, and may set or read cookies to show ads, limit how often you see them and count clicks. By default we ask Google for non-personalised ads, so ads are not chosen from a profile of your interests (you can change this in Your privacy choices), and we never give Google anything from your Ocufuse account or your health record. Visitors in the EU, UK and Switzerland are asked for their choice through Google's consent message first. Google explains how it uses data in How Google uses information from sites that use its services. The web app and the iPhone app show no ads.

Changes to this policy

If we make material changes, we will update the date at the top and tell you in the app or by email before the changes take effect, and ask for your consent again where the law requires it. Earlier versions are available on request.