Privacy Policy

1. Introduction

EyeCare ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service.

2. Information We Collect

Personal Information

We collect information you provide when creating an account, including your email address and authentication credentials. If you sign in with Google, we receive your email address from Google's authentication service.

Health Information

With your explicit consent, we store eye health data including contact lens prescriptions, wear session logs, inventory records, eye exam details, and scanned documents. This data is transmitted over TLS-encrypted connections and protected by our hosting provider's encrypted storage.

Device Information

We collect device type, operating system version, and app usage analytics to improve our service. We do not collect precise location data.

3. How We Use Your Information

• To provide and maintain the core functionality of the app (wear tracking, inventory management, document storage)
• To send push notifications for lens replacement reminders and low-stock alerts
• To sync your data across devices through our secure cloud infrastructure
• To improve our service through aggregated analytics
• To communicate with you about service updates and support inquiries

4. Data Storage and Security

Your data is stored using Supabase, a PostgreSQL-based backend with Row-Level Security (RLS). This ensures you can only access your own data. Authentication is handled by Supabase Auth with support for email OTP and Google OAuth.

EyeCare stores the text you enter or confirm from OCR. Camera images used during scanning are temporary inputs and are not uploaded or retained by the text-only prescription workflow. On the mobile app, OCR-extracted text is field-encrypted on your device before it is stored or synced.

We implement industry-standard security measures including HTTPS/TLS encryption for all data in transit. Data at rest is encrypted by our cloud hosting provider.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share anonymized, aggregated data for analytics purposes that cannot identify individual users.

We may disclose information if required by law or to protect our rights, privacy, safety, or property, or that of our users.

6. Your Rights and Choices

• Access: You can access all your data through the app or request a data export
• Deletion: You can delete your account and all associated data from the Settings page
• Correction: You can edit or update your data within the app
• Portability: You can export your data as a JSON file at any time
• Withdraw Consent: You can disable notifications or stop using the app at any time

7. Children's Privacy

Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us through the support channels available in the app or by emailing support@eyecare.app.