Privacy Policy
Last updated: May 2026
Overview
RetinaReset is designed with minimal data collection. This policy describes what we process and why.
Data Stored on Your Device
The App stores locally on your device:
- Protocol progress, streak, and settings
- Install date (for trial calculation)
- Entitlement tier (trial, full, or free)
- Optional purchaser email for restore access
This data stays on your device unless you explicitly use features that contact our servers.
Data Sent to Our Servers
AI Assistant
When you use the AI chat, your messages are sent to our API and forwarded to our AI provider (Azure OpenAI or OpenAI) to generate replies. Do not share personal health identifiers you are not comfortable processing through third-party AI services.
Payments (Stripe)
When you purchase or restore access, we send your email to our server, which communicates with Stripe to create checkout sessions and verify subscriptions. Stripe processes payment data under their own privacy policy.
We store a minimal entitlement record (email, subscription status, plan, expiry) in Cloudflare KV to support restore access and subscription lapse handling.
Analytics (Google Analytics 4)
If enabled, anonymous usage events (e.g. paywall views, purchase funnel) may be sent to GA4 using a measurement ID configured at build time. No personally identifiable information is intentionally included in these events.
Location
The App may request location permission to calculate local sunrise and sunset for the circadian protocol and to estimate current sky conditions (clear vs overcast) for the morning light session.
Your coordinates are not uploaded to our own servers. To compute these values, approximate coordinates are sent directly from your device to third-party services — a sunrise/sunset provider (sunrise-sunset.org) and a weather provider (Open-Meteo) — which return the requested times and cloud-cover data under their own privacy policies. When these services are unavailable, the App falls back to an on-device approximation.
Notifications
Reminder notifications are scheduled locally on your device. We do not receive the content of your reminders.
Data Retention
Server-side entitlement records are retained while your subscription is active or as needed for restore access. You may request deletion by contacting support with your purchase email.
Children's Privacy
The App is not directed at children under 13.
Changes
We may update this Privacy Policy. Material changes will be reflected in the App.
Contact
For privacy questions, use our contact form.