Privacy
Privacy Policy
Version 3 — Effective September 24, 2026
Introduction
EyeReset is made by Yeshivsher (Raphael Ben-Hamo). This policy explains, in plain language, what the app collects, why, and how you can see or delete it. If anything here is unclear, email [email protected].
What stays on your device
Your exercise history, streaks, and progress are stored on your device only. They are never uploaded anywhere. If you delete your data from our server (see “Your rights” below), this on-device history is not affected — it's a separate thing, entirely under your control, and removed only if you uninstall the app or clear its data yourself.
What we collect (analytics)
EyeReset sends a small amount of usage data to our database so we can see which features people actually use and fix what's broken. Specifically:
- A random identifier, generated when the app first runs. It is not your device ID, not an advertising ID, and is not linked to your name or any real-world identity.
- Platform (iOS or Android), app version, and device language.
- Usage events — which features you use and what happens in them (for example “exercise completed” or “reminder tapped”), and when. Each event carries its name, a timestamp, and a few fixed, non-identifying details about the action itself — for example which exercise was played and its category, your break interval in minutes, how long a break ran, whether you allowed notifications, where a relief session or the evening check-in was opened from, which app link opened the app, and the NAME of a setting you changed (never the value you chose) — never your symptom ratings, never free text, never anything you type, and nothing about your health. If the app hits an error, it records only the screen it happened on.
- A record of what your analytics setting was when your identifier was created, and that creation date. This is a snapshot from that moment, not a live tracker — your off switch works entirely on your device. The one exception: switching analytics off sends one final “analytics off” event, then nothing. That event is how we count how many people opt out.
That's the entire list. Nothing else is collected.
What we never collect
We do not collect your name, email address, phone number, postal address, contacts, or location. We do not access your camera, microphone, or any health data. There are no advertising identifiers (no IDFA, no AAID) anywhere in the app, because there are no ads and no ad SDKs.
Analytics are on by default — here's why
Analytics are on by default, and you can turn them off with one tap at Settings → Privacy. We chose on-by-default deliberately: if analytics were opt-in, only a small, self-selected slice of users would ever turn it on, and that slice doesn't look like our user base as a whole — it would give us a misleading picture and lead us to build the wrong things. Turning analytics off costs you nothing: the app is fully functional whether analytics are on or off, and it also works fully offline.
Who processes this data
We use as few outside companies as possible, and every one of them is listed here:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and anonymous app identity | European Union (Frankfurt) |
| Apple / Google | App distribution | Per their own privacy policies |
We add a new provider only when it's genuinely needed, and this page is updated before that provider goes live.
Legal basis for processing (GDPR)
We process analytics data under legitimate interest — first-party audience measurement used only to understand and improve the app. We never use it to profile or target individuals, and we never sell it. You can object at any time by turning analytics off in the app; see “Your rights” below.
How long we keep data
- Usage events are deleted automatically after 13 months.
- Your random identifier is kept for as long as you keep using the app. If the app goes 13 months without sending any activity for that identifier, the identifier itself is deleted too.
Your rights, all available in the app
Go to Settings → Privacy to:
- Download my data — get a JSON file of your profile record and all usage events.
- Delete my data — your usage events and profile are erased immediately, and your device forgets its identifier right away. The now-empty account record itself is cleared from our systems within 30 days. This cannot be undone.
- Turn analytics off — the same toggle also serves as your objection to processing.
If you're in the EU, EEA, or UK, you also have the right to lodge a complaint with your national data protection authority.
No ads, no tracking, no selling
- No ads and no ad SDKs of any kind.
- No advertising identifiers.
- We never sell or rent your data, to anyone.
- No data brokers.
- No cross-app or cross-site tracking.
- No cookies or tracking pixels.
Looking ahead
Today, EyeReset does not ask for your email address and has no purchases or subscriptions. If that ever changes — for example, an optional email field for feedback, or a paid tier — those features will be opt-in, and this page will be updated to describe them before they ship.
Children's privacy
EyeReset is rated 4+ and is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to this policy
Material changes to this policy get a new version number, and we'll ask you to review it again in the app rather than assume you've already agreed to it.
Contact us
Questions about this policy or your data: [email protected]
Governing law
This policy is governed by the laws of Israel.
Previous versions: Version 2 was in effect from August 28, 2026 until September 24, 2026. Version 1, in effect before August 28, 2026, described an app that stored all data locally with no server component. Earlier versions are available on request at [email protected].