Privacy Policy

The short version

Your eye photo is analyzed on your device and is never uploaded to us or used to identify you. The Android app keeps a working copy only in its private temporary cache and loads its analysis engine and models over HTTPS. Limited technical telemetry may be processed by our service providers, and color-only text and a stateless result URL leave the app only when you choose to share them. If you purchase a pack on the website or in a supported mobile app, derived color data, your delivery email, and a purchase record are processed as described below; your eye photo still stays on your device.

What we are — and what we are not

• We do not perform identity verification, iris recognition, or biometric matching.
• We do not create an iris ID or store iris templates.
• Iris Analyzer is a color and aesthetic analysis tool, not a biometric identification system.

The analysis extracts color information (dominant hues, percentages, palette) from your photo. It does not extract, compute, or retain any feature that could be used to recognize or identify you.

How the analysis works

On the website, image processing runs locally in your browser. In the Android app, a restricted in-app browser loads the Iris Analyzer engine, MediaPipe model, and any OpenCV fallback from our HTTPS origin; the photo is passed to that local engine in memory and is not sent to a photo-upload endpoint. Loading those files creates ordinary HTTPS requests, so our host may receive technical request data such as an IP address, user agent, timestamps, and requested paths, but not the eye photo.

If you choose to generate a paid pack on the website or in a supported mobile app, we send only the derived color data (color names, hex codes, percentages, and similar metrics) and the delivery email you provide to our servers to create and deliver your content. The photo itself stays on your device. In the Android app, sharing is always user-initiated: tapping Share gives the system share sheet color-summary text and a stateless result URL, never an eye photo. The app receiving that share handles the data under its own terms.

What we store on your device

On the website, your photo and analysis results are kept in encrypted browser storage so you do not lose them between pages; clearing browser data removes that copy. In the Android app, a captured or selected photo is copied to an app-private temporary cache for the current analysis. The app removes temporary files when they are replaced, when you clear the session, or during its next startup, and the operating system may evict cache files sooner. A result remains in memory for the current session. Only if you tap Save does the app place a color-only profile — derived palette values, labels, and rarity context, never the photo or capture metadata — in the device's encrypted SecureStore. You can delete that profile from Data & Privacy. We do not have a copy of these locally stored photos or profiles.

What we collect when you purchase

• Email address — used to deliver your purchased content and provide purchase support.
• Payment and purchase information — website payments are processed by Stripe; supported mobile purchases are handled by Google Play or the Apple App Store and validated through RevenueCat. We receive purchase status and transaction identifiers needed for fulfillment, support, fraud prevention, accounting, and refunds, but we never see or store your card or bank details.
• Derived color data — the non-identifying color metrics described above, used only to generate and deliver your content. The eye photo is never included.

Third-party services

• Stripe, Google Play, the Apple App Store, and RevenueCat — payment processing, purchase validation, fraud prevention, purchase analytics, support, and refund administration. Store providers handle your payment-account details; RevenueCat receives a pseudonymous app customer ID and purchase history, not your eye photo.
• AI providers (via OpenRouter) — receive only derived color data to generate pack content. They never receive your photo.
• Email delivery — used to send purchased content to the address you provide.

Analytics, diagnostics, and hosting

We use privacy-focused product analytics on the website. For the Android app's HTTPS-loaded engine, Sentry and Fly.io act as service providers. They collect and process limited app-interaction data for app functionality and analytics, plus crash, diagnostic, and performance telemetry for analytics and service reliability. Depending on the event or request log, this may include the engine page or feature used, timestamps, error details, performance timing, IP address, and device, browser, app, or operating-system information. We configure monitoring not to include eye photos, analysis images, or a saved color profile. We do not sell this data.

Retention, deletion, and your rights (GDPR / CCPA)

You control the Android app's temporary session and optional saved color profile with its Data & Privacy controls, and you can clear website data in your browser. We retain purchase records for support, accounting, fraud prevention, refunds, and legal obligations. Stripe, Google Play, the Apple App Store, RevenueCat, Sentry, Fly.io, and our delivery providers may retain records under their configured or legally required periods; deleting the app does not by itself delete data already held by a service provider. To request access, correction, or deletion of personal data we control, email support@irisanalyzer.com. We may ask for enough information to verify and locate your data, and we may retain limited records where security, legal, tax, dispute, or compliance obligations require it. Store purchase records may also remain subject to the store provider's legal and accounting obligations. We honor applicable rights under the GDPR, CCPA, and similar laws.

Children

Iris Analyzer is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes & contact

We will update this page if our practices change, and we will never weaken the core guarantee — your eye photo stays on your device — without clear, prominent notice. Privacy questions or access, correction, and deletion requests: support@irisanalyzer.com.