Legal
Privacy Policy
1. Who is responsible
Lentes is an independent app developed by Ezequiel França in Portugal. For privacy questions, requests, or complaints, use the support link below. This policy covers the Lentes iPhone app and lentes.ezequiel.app.
2. The short version
Lentes has no account, cross-app tracking, third-party health analytics, or developer-operated health-data server. The free version may show privacy-preserving app recommendations from Kickstart Exchange, and RevenueCat handles the optional Lifetime Pro purchase. Neither service receives prescription values, scans, calendar events, or reminder schedules. Prescription values are normally handled on your device and, when you choose, in Apple Health.
3. Prescription and Health data
With your permission, Lentes reads and writes Vision Prescription records in the Apple Health app. These records may include sphere, cylinder, axis, add power, pupillary distance, issue and expiration dates, provider or description, and an attached prescription image or PDF.
Apple Health data is managed by iOS and your Apple account settings. Lentes never uses Apple Health data for advertising, marketing, profiling, data brokerage, or unrelated analytics, and does not disclose it to the developer or other third parties.
4. Scans, photos, files, and PDFs
Camera scans and selected images or PDFs are copied into protected temporary app storage. Apple Vision performs the first recognition pass on-device, and on-device Foundation Models may refine missing values when available. Lentes never uploads the original image or PDF for recognition. If you save the prescription with an attachment, the file is added to that Apple Health record; the temporary working copy is then removed. If you cancel or remove it, Lentes removes the working copy.
On supported iOS 27 devices, Private Cloud Recognition is off by default. If you explicitly enable it in Settings, extracted prescription text — not the original image or PDF — may be processed by Apple Private Cloud Compute to refine missing values. The developer does not receive it, and Lentes falls back to on-device recognition when the private-cloud route is unavailable. You can turn this option off at any time.
Recognition can be wrong. You must review every value before saving or relying on it.
5. Local app data and optional integrations
Eye-exam dates, clinics, family profiles, linked glasses, contact-lens prescriptions, supply counts, wear history, low-stock thresholds, receipts, display choices, and reminder preferences are stored locally. A compact copy of the selected contact-lens supply is placed in Lentes’ private App Group so its widget can display and update it. This data remains on the device until you delete it or remove the app, subject to device backups you control.
Clinic lookup sends the text you enter to Apple Maps. Calendar or Reminders access is used only when you choose to add or edit an exam or refill item. Notifications and their contact-lens actions are scheduled and handled locally. Lentes does not request continuous or precise device-location access.
6. Website and support data
The website does not intentionally use analytics, advertising, or tracking cookies. It is hosted by Cloudflare Pages, so Cloudflare may process standard server information such as IP address, browser details, and request timestamps to operate and secure the service.
If you contact support, the information you choose to send is used to answer and resolve your request. Do not send prescription images or health values unless they are necessary and you are comfortable doing so.
7. Legal bases and recipients
App processing happens at your direction to provide the features you request. Optional protected-data access relies on the permissions you grant in iOS. Support communications are processed to respond to your request and, where applicable, to perform the service or pursue the legitimate interest of operating and securing it.
Apple supplies the Apple Health app, Vision, Foundation Models, optional Private Cloud Compute, Maps, Calendar, notifications, and App Store distribution. RevenueCat processes anonymous purchase and entitlement status. Kickstart Exchange processes app-level recommendation delivery and interaction data for about 30 days without identifying a person or device. Cloudflare hosts the website. Their processing is governed by their own policies. None of these recipients receives prescription or Apple Health values from Lentes.
8. Retention, deletion, and permission withdrawal
Delete prescriptions in Lentes or Apple Health. Delete local metadata in the app where offered or by removing the app. Remove calendar events in Calendar and notifications in iOS settings. Revoke Health, Calendar, Camera, Photos, or notification permissions at any time in iOS Settings or the Health app.
Support messages are kept only as long as reasonably needed to resolve the request, maintain necessary records, prevent abuse, or meet legal obligations. Hosting security logs follow the host’s retention practices.
9. Your rights
Depending on where you live, you may have rights to access, correct, erase, restrict, object to, or obtain a portable copy of personal data, and to withdraw consent. Most app data is controlled directly on your device and is not available to the developer. For support data, submit a request through Support. EU/EEA users may complain to their local authority; in Portugal, this is the CNPD.
10. Security, children, transfers, and changes
Lentes uses Apple platform protections, complete file protection for temporary scans, and optional device authentication. No method is perfectly secure. Lentes is not directed to children and does not knowingly collect children’s data through an account or server.
Apple and Cloudflare may process service data internationally under their published safeguards. Material policy changes will be posted here with a new effective date. Continued use after a change means the new policy applies from that date.