Legal · Data Protection

Privacy Policy

Last updated: August 2026 · Surya Productions · ocuscan1@gmail.com

01What data we collect

When you complete a screening session, we collect the results of the tests you take:

👁 Visual Acuity — Snellen label, logMAR (per eye)

📖 Near Vision — reading acuity score (per eye)

🌫 Contrast Sensitivity — score, both eyes together

🔭 Diopter — estimated refractive power (per eye)

Estimated viewing distance (derived from iris diameter; approximate only).
Device calibration data (pixels-per-mm, set from your on-screen ruler match).

We do not record, store, or transmit any video or images from your camera. All camera processing happens locally in your browser — only the numeric results above ever reach our server.

02How we use it

Session processing: Results are computed on our server and returned to you as your report. Session data is deleted after 4 hours.
Anonymous research: After your session, a stripped copy of your results — with no name, no session ID — is stored in our research database to improve screening accuracy. This copy contains only numeric result fields and a timestamp.

03Legal basis

We process your data on the basis of your explicit consent (obtained on the consent screen before any test begins), in accordance with India's Digital Personal Data Protection Act 2023 and the EU General Data Protection Regulation (GDPR).

04Data retention

Named session data (including your PDF report parameters) is deleted from our servers within 4 hours of your session.
Anonymised research records are retained for 2 years from the date of submission, then automatically deleted.

05Your rights

You have the right to:

Access the anonymised research record associated with your session.
Request deletion of your research data at any time.
Withdraw consent — this will not affect any processing already completed.

To exercise these rights, email ocuscan1@gmail.com with the subject line "Data Request".

06Third-party services

MediaPipe (Google): Face mesh library loaded from cdn.jsdelivr.net. No data is sent to Google — the model runs entirely in your browser.
Railway: Our server is hosted on Railway.app (US). Data in transit is encrypted via HTTPS/TLS.
Supabase: Anonymous research data is stored in Supabase (EU region). Supabase is GDPR-compliant.

07Children

OcuScan Pro is not intended for users under 13. We do not knowingly collect data from children without parental consent.

08Contact

Data controller: Surya Productions. Email: ocuscan1@gmail.com