HeartLens Privacy Policy

1. Information We Collect

Depending on the features you use, HeartLens may collect and process the following information:

• Account and service information returned by our backend, such as an account token, user identifiers, membership status, and device registration status.
• Measurement information, including heart rate, signal quality, confidence, measurement status, timestamps, and face-measurement result channels.
• Camera-derived measurement data needed to process fingertip or face measurements. The app does not intentionally save camera photos or videos as user media.
• Device and app information, including device model, iOS version, app version, language, bundle identifier, IDFV or another app-scoped device identifier, and the app user-agent string.
• Advertising and attribution identifiers or authorization status when available, including AppsFlyer ID and App Tracking Transparency status.
• Purchase and subscription information needed to validate App Store transactions and membership status.

Some measurement history and preferences may remain on your device for local display. Account, device, measurement, purchase, and attribution information may also be sent to the services described below.

2. Camera and Measurement Processing

Fingertip measurement uses the rear camera and flashlight to read color changes in a covered fingertip. Face measurement uses the front camera to capture camera-derived signals from your face. Camera access is used only after you grant permission and only while the relevant measurement flow is active.

• The app does not intentionally save measurement camera frames as photos or videos in your photo library.
• Face measurement uses the DeepAffex/Anura measurement SDK and service. Camera-derived measurement payloads may be transmitted to that service to process the selected study and return results.
• Fingertip measurement is processed through the app's camera pipeline and may be associated with your account and measurement history.
• If you deny camera permission, measurement features will not work, but you can still view existing local records and settings.

3. Where Data Is Stored and Sent

HeartLens uses its application backend at api.letshealth.cn for account/session, device, membership, measurement, and purchase-related services. Face measurement also uses the DeepAffex service at api.deepaffex.ai for authorization, study configuration, measurement processing, and result delivery.

Local records may be stored on your device. Network services may process data on servers operated by us or by the applicable service provider. Exact hosting locations, international transfer mechanisms, and provider retention periods must be confirmed by the operating entity before publication.

4. How We Use Information

We use information for the following purposes:

• Providing, authorizing, and improving fingertip and face measurements.
• Displaying measurement results, history, summaries, and membership features.
• Creating and maintaining account, device, subscription, and purchase records.
• Measuring app performance, attribution, campaign effectiveness, and product usage through Facebook and AppsFlyer where enabled.
• Preventing fraud, protecting service security, troubleshooting failures, and complying with law.

We do not sell health measurement records as a standalone product. We may disclose information to the service providers described in Section 8 when necessary to provide the app, measure attribution, process purchases, secure the service, or comply with law.

5. Choices, Deletion, and Permissions

You can deny or revoke camera permission in iOS Settings, although measurement features will then be unavailable. You can clear local measurement records through the app where that control is provided. You can also limit tracking through App Tracking Transparency and iOS privacy settings.

To request access, correction, deletion, or information about account and server-side records, contact the operating entity using the details in Section 10. Deleting local records or uninstalling the app may not delete records already held by our backend or service providers; those requests must be handled through the applicable account and privacy process.

6. Data Security and Retention

We use access controls, encrypted network transport where supported, Keychain storage for sensitive local credentials, and data minimization appropriate to the service. No method of transmission or storage is completely secure.

Local data is retained until you delete it or uninstall the app, subject to device backups. Account, measurement, purchase, and attribution data is retained only as long as needed for the stated purposes, legal obligations, dispute resolution, and security. The operating entity must set and publish specific retention periods before release.

7. Children's Privacy

HeartLens is intended as a general wellness reference tool and is not designed to collect personal information from children. Minors should use the app only with guidance from a parent or guardian. The app should not be used to evaluate the health of children, infants, or newborns.

8. Third-Party Services

HeartLens currently includes or may use the following service providers:

• DeepAffex/Anura: face-measurement authorization, study configuration, camera-derived signal processing, and measurement results.
• Facebook SDK: app activation and attribution/analytics features configured by the app.
• AppsFlyer SDK: app attribution, analytics, uninstall measurement, and campaign performance features.
• Apple: App Store purchase and subscription processing.

Each provider may process information under its own privacy terms. The operating entity must maintain appropriate contracts, verify each provider's data practices, and publish links to the current provider policies before release.

9. Policy Updates

We may update this Privacy Policy due to changes in product features, laws, platform requirements, or operational practices. When updated, the “Last updated” date at the top of this page will change. Continued use of the app means you accept the updated policy.

10. Contact and Legal Review

Before public release, replace this section with the developer or operating entity's valid contact information, such as a support email, company name, registered address, or App Store developer page.

Example: support@example.com