Privacy Policy

Last updated: September 2, 2026

1. Data Controller

Tarek Loutfi

2. What data we process

a) Camera data for eye exercises

EyeUnlock uses your iPhone's front camera via Apple's ARKit framework to detect your eye movements during exercises. This processing happens entirely on your device — no camera images, video, or derived raw data ever leaves your iPhone, is transmitted to us or any third party, or is stored anywhere. We never see this data at any point.

b) In-app usage data

To power the core function (earning minutes, lock windows, streaks, history), the app stores locally on your device: number of completed exercises, minutes earned and spent, chosen lock windows, and the last 90 days of your history. This data stays on your device unless you actively choose to share it (e.g., in a support request).

c) Family Controls / Screen Time API

EyeUnlock uses Apple's Family Controls framework to lock the apps you select and unlock them once an exercise is completed. Apple does not give us visibility into which specific apps you've chosen or how you use them — that information stays within Apple's encrypted system.

d) Waitlist / contact data

If you join the waitlist, we store your email address to notify you about the launch. This is stored via our backend and is never shared with third parties for advertising purposes.

e) Website analytics

Our landing page uses Google Analytics (GA4) to understand how visitors reach the site. IP addresses are processed in anonymized/truncated form.

3. Why we process this data

Camera data: to power the app's core function (detecting the eye exercise) — legal basis Art. 6(1)(b) GDPR (contract performance).
Waitlist email: to contact you about the launch — legal basis consent, Art. 6(1)(a) GDPR.
Website analytics: legitimate interest in improving our product, Art. 6(1)(f) GDPR.

4. Sharing with third parties

We do not sell or rent user data. Camera data is never shared, since it never leaves your device in the first place.

5. Retention period

Camera data: processed in real time, never stored.
In-app usage data: rolling 90 days, then automatically deleted.
Waitlist emails: until launch or until you unsubscribe.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Contact us at hello@eyeunlock.app to exercise any of these.

7. Children

EyeUnlock is not directed at children under 13. If you believe we've inadvertently processed a child's data, please contact us right away.

8. Changes to this policy

We may update this policy from time to time; the "last updated" date at the top will reflect the most recent change.

9. Contact

Questions about privacy? hello@eyeunlock.app