LensTrackerPrivacy Policy
1. Who we are
LensTracker (the "app") is published by Imran Moolla, an individual in South Africa ("we", "us"). For the purposes of South Africa's Protection of Personal Information Act (POPIA) and, where it applies, the GDPR and UK GDPR, we are the responsible party / controller for the personal information described here.
Contact for anything in this policy: imran.moolla@gmail.com.
2. What we collect
Account and profile
- Your email address and password. The password is handled by Amazon Cognito; we never see it.
- Your first and last name, phone number, and address details (city and postal code) given when you create your account or edit your profile.
- An optional profile photo, if you add one.
Lens care records
- The lenses you track: which eye, when each was opened, and its replacement cycle; the history of lenses you have replaced.
- Your lens stock: brand, product, box size, how many lenses remain, and purchase and expiry dates.
- Your prescriptions: for each eye, sphere, cylinder, axis, base curve, diameter, brand and replacement cycle.
Prescription details are health-related information. We use them only to provide the app to you, and we treat them as sensitive.
Stored on your device
- Your sign-in session (in the iOS Keychain or Android Keystore), cached copies of your records, widget data, and your reminder and notification choices. Reminders are scheduled on your device.
- If you turn on Face ID, Touch ID or fingerprint sign-in, the check is done by your device. We never receive your biometric data.
Advertising
The app is free and shows one banner ad on the Dashboard, supplied by Google AdMob. See section 5.
Technical information
Our servers record which part of the service was called and whether it succeeded, so we can keep it running and fix faults. These records do not contain your name, email address, prescription or other lens data, and they are deleted automatically after 30 days.
3. How we use your information
- To create and run your account, and to keep your records in sync across your devices.
- To show you your lens status and send the reminders you ask for.
- To show advertising that supports the app (section 5).
- To keep the service secure, prevent abuse, and fix problems.
- To answer your questions and requests.
We do not sell your personal information. We do not use it to make automated decisions about you, and we do not share your lens, prescription or profile information with advertisers.
Where the GDPR or UK GDPR applies, our legal bases are: performing our agreement with you (providing the app), your consent (ads where consent is required, and notifications), and our legitimate interest in keeping the service secure and working.
4. Who we share it with
| Provider | What for | What it receives |
|---|---|---|
| Amazon Web Services (AWS) | Sign-in (Cognito), database (DynamoDB), photo storage (S3), servers (Lambda) | Everything you store in the app. Held in AWS's Africa (Cape Town) region. |
| Google AdMob | The banner ad | Device and ad-interaction information described in section 5. Not your lens, prescription or profile data. |
| Apple and Google | Delivering the app, and the consent and notification features of your phone | Information governed by their own policies. |
We do not currently use analytics or crash-reporting services. If that changes we will update this policy first. We may also disclose information when the law requires it.
5. Advertising and your choices
Google AdMob may collect and use your device's advertising identifier, IP address, approximate location, device information and how you interact with ads, to choose, show and measure ads. The app also tells AdMob your country and some general keywords about eye care so the ads are relevant. See how Google uses information from apps and Google's Privacy Policy.
Where the law requires consent (for example in the European Economic Area and the United Kingdom), we use Google's consent form and do not request ads until you have answered. You can review or change your choice at any time in the app under Profile, Ad privacy choices (shown wherever the choice applies to you). You can also limit ad personalisation in your phone's settings, and reset or delete your advertising identifier there.
6. How long we keep it, and deleting it
- We keep your information for as long as your account exists.
- You can delete your account at any time in the app (Profile, Delete account). This immediately and permanently deletes your lenses, history, stock, prescriptions, profile, profile photo and sign-in. If you cannot open the app, see Delete your account.
- Our database keeps automatic backups for up to 35 days so we can recover from faults. Deleted information can remain in those backups until they expire, and is not used for anything else.
- Information on your own device is removed when you delete your account in the app, or when you uninstall the app.
7. Your rights
Under POPIA, and the GDPR and UK GDPR where they apply, you may ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, and (where applicable) move it to another service. You may withdraw consent at any time. You can correct your profile in the app, and delete your account as described above. For anything else, email imran.moolla@gmail.com. We will reply within 30 days.
If you are unhappy with how we handle your information you may complain to the Information Regulator (South Africa) at inforegulator.org.za, or, if you live in the EEA or UK, to your local data protection authority.
8. Security
Information is sent over encrypted connections and encrypted at rest in AWS. Sign-in tokens are kept in your phone's secure storage. Each account can only reach its own records. No system is perfectly secure, so please use a strong, unique password.
9. Where your information is processed
Your account data is stored in South Africa (AWS Cape Town). Google may process advertising information in other countries, under its own safeguards.
10. Children
LensTracker is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
11. Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app.