Privacy Policy

01 · Camera and face information

With your permission, the app uses a compatible iPhone’s front TrueDepth camera and ARKit face tracking to estimate pupillary distance and viewing distance, and help assess lighting and positioning. Images and face-tracking information are processed on your device for the measurement session. The current flow does not upload or save camera photographs, video or a face mesh, use them to identify you, serve advertising or train AI models, or capture camera audio.

You can revoke Vision Lab’s camera permission in iPhone Settings. Camera-dependent measurements will then be unavailable; browsing the laboratory does not require this permission.

02 · Personal records on your device

The app stores completed measurements and existing prescriptions you enter manually, including a record identifier, date, pupillary distance and samples, left/right-eye fields and any notes you enter. Unmeasured values remain empty. Age entered during preparation determines the current flow and optional near-vision check.

App users do not need an account. Existing personal records and manually entered prescriptions stay on the device and are not uploaded automatically. There is no record-cloud synchronization. Personal records use iOS file protection and are excluded from system backup. We cannot restore data held only on your device; new test results you agree to send are handled separately as described below.

03 · Invitation tests and the receiving merchant

Starting a new refraction test requires a valid invitation code from a merchant. After checking the code online, the app shows the inviting merchant, usage rules and result-sharing information. You enter that merchant’s test flow only after explicitly agreeing. We use the code to associate test access and the receiving merchant; the app does not request your name, contact details or order number. A code alone cannot retrieve past measurement results.

After the complete test, the app sends a result identifier, completion time, final pupillary distance, left/right spherical equivalent, contrast sensitivity, astigmatism finding, measured cylinder and axis, optional near-vision addition, and the necessary protocol version to the Vision Lab service. Unmeasured fields remain empty. Age, notes, the three raw pupillary-distance samples, camera images, face data and existing records are not uploaded with the result. Even without a name, this is personal measurement information associated with an invitation code.

The merchant may manually add a name, nickname, gender, phone number and notes voluntarily provided by the user to an invitation code. These fields are optional, visible only to that merchant, editable and removable. Notes are retained for 90 days from their last modification, then hidden and periodically removed. They are not sent to the app or copied from local records. Merchants should obtain consent and record only necessary information. Linking a name or contact detail to a code allows the merchant to identify the person associated with its results.

A signed-in merchant can view only its own invitation codes and the latest submitted result for each code. The server stores the results and state needed to deliver them, check retries and manage test counts and time limits. Local saving and merchant receipt are separate states when offline. A test authorized to start can be sent later and is not automatically reassigned to another merchant.

04 · Experiment storage and sharing

The laboratory can save experiment settings and an experiment archive in local web storage. These are separate from the app’s personal refraction records. When you choose to export or share an experiment file, it goes to the application or location you select and is then subject to that recipient’s practices.

Photo-library access is limited to the experiment-image saving feature you choose to use. Only import or share content you are entitled to use, and manage files you save elsewhere or send to other applications at their destination.

05 · Website, portal and experiment resources

The website provides product information, help and a Merchant Portal entry; refraction tests run in the iPhone app. The portal processes merchant names, codes, login names, password hashes and login sessions to provide restricted access. Necessary cookies support login and security checks. Hosting and network providers, including Cloudflare, process technical information needed to deliver content, protect the service and troubleshoot, such as IP address, requested path, time, browser information and error records. Application logs must not include passwords, full credentials or measurement content.

The app prioritizes packaged experiment resources. Designated resources that are not packaged are retrieved over HTTPS from lab.loify.ai. The resource service receives the network information needed to handle those requests, which do not contain personal refraction records. Consult the relevant service’s privacy information when visiting the external laboratory or other links.

06 · Support, sharing and processing locations

When you contact august1293@hotmail.com, we process your email address, message and the information you choose to provide to respond, troubleshoot and handle privacy requests. Include your device model, operating-system and app versions, and error text in an initial message. Please do not send face photographs or complete health records.

We use Cloudflare hosting services and a PlanetScale database to store and deliver test results you agree to send, with result access limited to the corresponding inviting merchant. We do not sell measurement information or use it for advertising, cross-app tracking or AI model training. Hosting, database, security and email providers process information necessary for their services, potentially outside your country or region. Merchants have their own applicable privacy practices for information they separately obtain or retain, as do Apple’s distribution and system services and third-party destinations you choose for sharing.

07 · Retention, deletion and choices

Personal records stay on your device until you delete them in Records or remove the app. Swipe left on a record and confirm to delete it. Removing the app removes its local records; this service does not provide local-record recovery. Please do not uninstall the app to troubleshoot a records problem. Deleting a local record does not automatically withdraw a result already sent.

Measurement content from each submitted test is retained for 90 days from the time the server receives it. It becomes unavailable through the portal at expiry, and expired content is cleaned up periodically. Content is also no longer displayed after a verified deletion request has been processed. Retries cannot recreate deleted results or make earlier results reappear. Test counts, status and deduplication identifiers without measurement content may be retained to enforce limits and prevent duplicate writes; deletion does not restore test uses. Contact the merchant about copies it has separately retained.

Residual backup copies follow the backup rotation and deletion procedures of the actual deployment; we do not promise immediate removal from every backup when a request is made. A backup restoration must still apply existing deletion state so deleted results are not displayed again.

Web experiment archives remain in the relevant device or browser storage; clearing that storage removes them. Manage exported, saved or shared copies separately at their destination. Technical records and support emails are retained only as needed for service delivery, security, disputes or legal obligations.

Contact support to request applicable access, correction, deletion or other privacy rights. Deleting a server result requires verifying that the request relates to your test; a code alone cannot authorize deletion of another person’s result. We will explain the necessary verification steps. We cannot remotely inspect or erase personal records held only on your device.

08 · Young users and policy changes

The current refraction flow is unavailable to users under 17. Users aged 17 who have not reached their local legal age of adulthood should use it with guardian involvement and appropriate professional guidance. An age gate is not a claim of clinical suitability. Contact us if you believe we received information about a minor through support that we should not retain.

We update this page’s date when our practices change and provide additional notice where appropriate. A policy update does not automatically turn existing local records into cloud-collected data. For privacy questions, contact august1293@hotmail.com.