Consumer Health Data Privacy Policy

About this policy

This policy applies to consumer health data as defined by the Washington My Health My Data Act, Nevada's consumer health data law (NRS chapter 603A as amended by SB 370) and similar laws. It adds to our Privacy Policy.

Company: Spinaton L.L.C., Rexhep Malaj, Prishtina, Kosovo
Email: hello@ocufuse.com

Write to us about anything in this policy, including requests to use your rights.

Consumer health data we collect

Only what you choose to enter or capture in the app:

Eye photos and the marker points on them (where your pupils, light reflections, eyelids and eye corners sit on each photo).
How your eyes feel, symptoms, your answers to follow-up questions, severity and notes.
Sleep, and context you log such as caffeine, smoking, vaping, meals, supplements, medication, stress and screen time.
Your condition as you describe it, which eye turns, vision correction, sex, height, weight and date of birth, if you add them.
Treatments and procedures, medications and eye drops, eye prescriptions (and the photo or PDF if you keep it), appointments, questions for your doctor, and exercises a clinician assigned.
Practice sessions and how comfortable they felt.
Because Ocufuse is about eye health, we also treat the fact that you use Ocufuse, and your account details, as consumer health data.

We do not collect precise location, and we do not use geofencing around health care facilities.

Why we collect and use it

Only to provide the app to you: to keep your record, show it back to you, show trends, send reminders you set, and create the Doctor Brief and exports you ask for. We do not use it for advertising, we do not sell it, and we do not use it to make decisions about you.

Where it comes from

From you: what you type, photos you take or choose, and documents you scan or import. Also from the processing on your iPhone that finds your eyes on a photo or reads a prescription you scan. That processing happens on your phone.

We do not sell consumer health data, and we do not share it with third parties or affiliates. We disclose it only to our processors, which store and run the service for us under contract and may not use it for anything else:

Supabase, Inc. (database, sign-in, storage and server functions; data stored in Ireland, EU).
RevenueCat, Inc. (checking App Store purchases): your Ocufuse account ID and purchase information only, never your health record.

Apple sells Ocufuse Plus to you directly through the App Store, and Stripe processes payments on the web, so they know that you bought it; their own privacy policies apply to that. If you sign in with Apple or Google, they know that you use Ocufuse. On this website, Google Analytics runs only if you accept it in the cookie banner, and we never send it anything from your Ocufuse account.

If this ever changes, we will ask for your separate consent before sharing.

Your rights and how to use them

Confirm and access: ask whether we collect, share or sell your consumer health data, and get a copy of it, with a list of all third parties and affiliates it was shared with (today: none) and their contact details.
Delete: delete entries, photos or your whole account in the app (Profile & settings > Data & privacy > Delete account), or ask us. We delete it from our systems and, where needed, ask our processors to delete it. Copies in backups are deleted as the backups expire, within 30 days.
Withdraw consent to our collection at any time, by deleting your data or account, or by emailing us. Withdrawing your eye-photo consent in the app deletes your eye photos.

Email hello@ocufuse.com from the address on your account. We will confirm it is you and answer within 45 days. If we need more time (up to another 45 days), we will tell you why. Using these rights is free and will not change how we treat you.

Appeals

If we refuse your request, reply to our answer with "Appeal" in the subject. We will answer within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov), or the Attorney General of your state.

Changes

We will post changes here and update the date at the top. We will not use or share consumer health data in a new way without your consent.