Privacy Policy for Calmeye

Last updated: July 6, 2026

Calmeye is a wellness app for resting and relaxing tired eyes after screen time. It is built to be private by design: there is no account, no advertising, and no cross‑app tracking. Most of your activity is processed and stored on your device. Two optional features send limited data off the device — the AI Eye Coach (a cloud AI chat) and anonymous analytics — and this policy explains exactly what, to whom, and when.

Short version: No account. No ads. No cross‑app tracking. Eye‑fatigue scans run on your device and camera frames are never saved or uploaded. The AI Eye Coach is optional and, only after you agree, sends the text you type to a cloud AI service to generate a reply. We use Firebase for anonymous usage analytics and crash reports, and Apple/RevenueCat for subscriptions. You can turn the AI Coach off and delete your on‑device data at any time.

1. Camera & Face Data — Eye‑Fatigue Scan (on device only)

The optional eye‑fatigue scan uses your device's front camera together with Apple's on‑device Vision framework to estimate signs of eye strain and tiredness. This is the only feature that uses the camera or any face data, and it is entirely optional.

What face data is collected: while the scan is running, Apple's Vision framework detects facial‑landmark points around your eyes (eye contours and pupils) in each live camera frame and returns their coordinates to the app in memory. From those coordinates the app derives only numeric comfort metrics — how open your eyes are, blink rate, squint, and gaze steadiness. The app does not build a face model, faceprint, or face‑geometry template, does not use the TrueDepth face mesh or ARKit face tracking, and does not perform face recognition or identification.
How it is used: the numeric metrics are combined on your device into a single wellness "eye‑fatigue" comfort score (0–100) that is shown to you. That is the only use of the face data.
Sharing / third parties: none. All camera frames and facial‑landmark data are processed live on your device and are never transmitted to us, to the AI Eye Coach, or to any third party. Face data never leaves your device.
Retention: camera frames and facial‑landmark points are held only transiently in memory during the scan and are discarded immediately after each frame is processed — they are never photographed, written to storage, or uploaded. Only the resulting numeric comfort score is saved locally on your device, and you can delete it at any time via Settings → Delete all data.

The camera permission is requested only when you tap to start a scan, and you can skip the scan entirely and still use the app.

2. AI Eye Coach (cloud AI service)

The AI Eye Coach is an optional in‑app chat that answers questions about eye comfort, tiredness and breaks. Because the replies are generated by an artificial‑intelligence model that runs in the cloud, using the coach sends data off your device. We show a consent screen and ask for your permission before any message is sent, and you can withdraw that permission at any time (see below).

What is sent: the message text you type into the coach (including the recent messages of the current conversation, so the coach has context), a per‑installation device identifier (Apple's identifierForVendor), your interface language, and whether you have an active subscription. Your eye‑fatigue scans, photos and camera frames are not sent — they never leave your device.
Who it is sent to: our own cloud gateway hosted on Cloudflare Workers, which forwards your message to a third‑party AI model provider, OpenRouter, that generates the response and returns it to the app.
What it is used for: solely to generate the coach's reply to you. Your messages are not used for advertising, are not sold, and are not used to build an advertising profile of you.
Retention: our gateway does not store the content of your messages beyond the short time needed to process the request; it keeps only basic anonymous counters for rate limits. The AI model provider processes your message to produce the reply under its own privacy policy.
Please note: the AI Coach provides general wellness tips only and is not a medical consultation. Please do not enter sensitive personal or health information in the chat.
Your control: the coach only sends data when you actively write to it. You can turn it off at any time in Settings → AI Coach → Cloud replies; when off, no data is sent to the AI service.

Any third party that processes data for this feature is contractually required to provide the same or equal protection of your data as stated in this policy.

3. Location (optional)

If you enable Sunset / circadian features (Pro), the app uses your approximate location on the device to time gentle morning and evening eye‑care suggestions around your local sunset. Your location is used only for this calculation on your device and is never transmitted to us.

4. Calendar & Focus (optional)

If you enable Smart Autopilot, the app checks whether you're in a meeting (Calendar) or in a Focus mode so it won't interrupt you with a break reminder. This check happens on your device and the data is never stored or transmitted.

5. Notifications

If you allow notifications, the app schedules local reminders (such as the 20‑20‑20 break) on your device. These are local notifications and are not sent through any external server.

6. Analytics & Crash Reports

To understand how features are used and to fix crashes, Calmeye uses Google's Firebase Analytics and Crashlytics. This collects anonymous, aggregated product events (for example, which screen was opened or which exercise was started) and crash diagnostics, together with a device identifier and basic device data. This data is not linked to your identity (there is no account), is used only to improve the app, and is not used to track you across other companies' apps or websites. We do not use advertising SDKs and do not sell your data.

7. Subscriptions & Purchases

Calmeye Pro is sold as an auto‑renewing subscription or a one‑time lifetime purchase. Purchases are processed by Apple. We use RevenueCat to validate and restore purchases; RevenueCat receives a randomly generated app user identifier and your purchase/transaction status (not your name or email). See Apple's and RevenueCat's privacy policies for details.

8. Data We Collect — Summary

Identity / contact data: none. No account or sign‑in.
Health / medical data: none. Calmeye does not use HealthKit.
Face data: transient on‑device facial‑landmark points used only to compute an eye‑fatigue comfort score; never stored as images or faceprints, never linked to your identity, and never shared or transmitted off the device (see Section 1).
AI Coach messages: the text you type is sent, only with your consent, to our cloud gateway and the AI model provider to generate a reply (see Section 2).
Usage analytics & crash reports: anonymous product and crash data via Firebase (Google), not linked to your identity and not used for cross‑app tracking (see Section 6).
On‑device content: your exercise history, streak, eye‑comfort test results and settings are stored only on your device (and your private App Group container, shared with the Calmeye widget).
Purchase status: handled by Apple / RevenueCat as described above.

9. Third Parties We Share Data With

We share the limited data described above only with the following processors, each of which is required to provide the same or equal protection of your data:

Cloudflare — hosts our AI gateway.
OpenRouter — AI model provider that generates AI Coach replies.
Google Firebase — anonymous analytics and crash reporting.
RevenueCat and Apple — subscription processing.

10. How Long We Keep Data & Deleting It

On‑device data stays until you remove it. Open Settings → Delete all data in the app to erase your sessions, history and test results, or delete the app to remove all locally stored content. To stop sending data to the AI service, turn off Settings → AI Coach → Cloud replies. AI Coach message content is not retained by our gateway beyond processing.

11. Children

Calmeye is not directed to children under 13 and does not knowingly collect data from them.

12. Wellness Disclaimer

Calmeye is a wellness and relaxation app — it is not a medical device and does not diagnose, treat, or cure any condition, and does not measure eyesight or visual acuity. Scores and estimates are for comfort and habit‑building only. For any health concern, consult a qualified professional.

13. Changes to This Policy

We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above.

14. Contact

Questions about privacy? Email [email protected].