OcuScreen is built around one simple idea: what happens on your phone, stays on your phone. This page explains what we do (and don't) collect, why we ask for the permissions we do, and how you can remove everything at any time.

What OcuScreen is — and isn't

OcuScreen is a wellness and screening tool. It is not a medical device. It has not been reviewed or cleared by the FDA, the EU MDR system, or any other medical regulator. It does not replace an eye doctor.

OcuScreen helps you notice things about your vision and the look of your eyes, between visits to a real eye-care professional. It cannot determine any condition, and nothing in the app substitutes for seeing an optometrist or ophthalmologist. If you're worried about your eyes or your vision, please see a doctor.

Where you are matters

OcuScreen adjusts which privacy rules apply to you based on your region:

EU/EEA, UK, and Switzerland: handled under GDPR.
US and Canada: handled on an on-device-first basis. OcuScreen is not a HIPAA-covered service.
Everywhere else: OcuScreen applies whichever of the above rules is strictest.

Permissions we ask for — all of them optional

OcuScreen only asks for what a given check actually needs, and every permission below is optional. Say no to any of them, and the rest of the app keeps working.

Camera

Three checks — Pupil size and symmetry, Eyelid symmetry and Eye alignment — take a photo of your eyes. The photo is used on your iPhone during that check and then discarded: OcuScreen never saves it and never sends it anywhere. On an iPhone with a TrueDepth camera, the front camera also measures how far your face is from the screen during checks that need a set distance — Face data and the TrueDepth camera explains exactly what that involves.

Microphone (optional)

Three checks let you answer out loud instead of tapping the screen. The microphone stays off unless you turn this on, and nothing you say is ever recorded or uploaded — your speech is recognized entirely on your iPhone.

Location (optional)

Location powers the "find eye care nearby" map, centering it on where you are. Without it, the map still works — you can just search for a place manually instead.

Face data and the TrueDepth camera

On an iPhone with a TrueDepth camera — the front camera system that also powers Face ID — OcuScreen uses Apple's ARKit face tracking for one purpose only: to measure how far your face is from your iPhone during a check. Checks are designed for a particular viewing distance, so a check waits until you're holding your iPhone at that distance and pauses if you move out of range.

Face tracking is used in Sight clarity, Near vision, Contrast sensitivity, Colour vision, Central vision and Astigmatism signs, and to position your iPhone before the photo in Pupil size and symmetry, Eyelid symmetry and Eye alignment.

What OcuScreen reads: only where your face is relative to the camera, which it turns into a single number — the distance in millimetres. It doesn't use the 3D shape of your face, your facial expressions, where you're looking, or any image or depth data from the TrueDepth camera, and it never uses face data to recognize or identify you.
Where it's processed: entirely on your iPhone, and only while a check that needs it is on screen. Face tracking stops when the check ends.
What's kept: the live distance readings are held in memory and discarded as new ones arrive. The one thing OcuScreen saves is the distance at which you completed a check, stored on your iPhone with that check's result together with whether it was measured or confirmed by you, so a result can show the conditions it was taken under. It's a single number, not an image or a map of your face, and it can't be used to identify you.
Who it's shared with: no one. Face data is never sent to us or to anyone else, never shared with or sold to third parties, and never used for advertising, marketing, analytics or profiling. The summary you can choose to send to an eye-care professional contains no face data.
How long it's kept: the saved distance stays with its result on your iPhone until you delete the OcuScreen app, which removes it together with all your results.
Your choice: face tracking only runs after you allow OcuScreen to use the camera. Where it can't measure — for example, on an iPhone without a TrueDepth camera — the check asks you to confirm the distance yourself and records the distance it asked for instead of a measurement.

How your data is stored

Everything OcuScreen records — your results, including the distance each check was taken at — stays on your iPhone, protected by the system's built-in file encryption. Photos are never saved. None of it is uploaded to any OcuScreen server.

Your credit balance is the one exception, and it isn't health data — it's stored in your iPhone's Keychain. With iCloud Keychain turned on, that balance can follow your Apple ID to your other devices. OcuScreen never syncs your results through iCloud; only your purchase and credit record does. If you back up your iPhone to iCloud or a computer, your results are part of that backup, like every other app's data.

No tracking, no ads, no analytics

OcuScreen reads no information from Apple Health, gathers no usage statistics, and carries no advertising and no tracking of any kind. We're not in the business of watching what you do — we're just here to help you keep an eye on your eyes.

OcuScreen asks for your consent once, before you use it for the first time. There's no maze of per-purpose toggles, because your data is never reused for anything beyond the check you ran it for.

Deleting your data

Deleting the OcuScreen app deletes everything it stored on your device — every result, including the saved distances. Right now, there's no in-app option to erase individual results one at a time; removing the app is how you clear everything at once. A backup of your iPhone made before that keeps its copy until you delete the backup.

Questions about this policy

If anything here isn't clear, or you'd like to ask us about your data, email ocuscreen@stopra.cz.