eyeform ("we", "us", "our") provides a mobile client-records app for lash technicians. This policy describes what information we collect when you use eyeform, how we use it, and the choices you have.
1. Information we collect
Information you give us
- Account information: your email address, a securely hashed password, and optional profile details such as display name, business name, and phone number.
- Client records you enter: information about your clients that you choose to add, including names, contact details, social handles, allergy flags, and free-form notes.
- Lash set records: date of visit, styling specifications (style, eye shape, lash condition, curl, diameter, length), per-visit notes, uploaded photos, and lash maps.
Information collected automatically
- Technical data: basic device information, crash reports, and diagnostic logs required to keep the app stable. We do not use advertising or behavioral-tracking SDKs.
- Authentication metadata: session tokens and sign-in timestamps, used to keep you logged in securely.
2. How we use your information
- To provide the core service: storing and syncing your client book across your devices.
- To authenticate you and keep your account secure.
- To respond to support requests and service-related communications.
- To diagnose and fix crashes or bugs.
We do not sell your personal information. We do not use your data or your clients' data to train machine-learning models. We do not share it with advertisers.
3. Where your data is stored
Your data is stored using Supabase, our backend hosting provider. Supabase hosts data on infrastructure located in the region associated with your account. Data in transit is encrypted with TLS, and access is enforced at the database level by per-user row-level security, so no other eyeform user can read or modify your records through the app or API.
4. Who at eyeform can access your data
Row-level security prevents other users from ever seeing your records. A small number of authorised eyeform operators have administrative access to the database and can technically view records when needed — for example, to help you with a support request, diagnose a bug, investigate a confirmed abuse report, or comply with a valid legal demand. We do not browse customer data casually, we do not use it to train machine-learning models, and we do not share it with third parties beyond what is described in section 6.
5. How long we keep it
We keep your account and records for as long as your account is active. When you delete your account (see section 8), we remove your account and all associated records (profile, clients, lash sets, notes, photos, and lash maps) from our live systems. Some limited information may persist in encrypted backups for up to 30 days before being fully purged.
6. Who we share it with
- Infrastructure providers (Supabase) who process data on our behalf under a data processing agreement.
- Authorities when legally required, for example in response to a valid subpoena or court order. We will notify you unless prohibited from doing so.
We do not share client records you entered with third parties for any other purpose.
7. Your clients' data
Any information you enter about a client belongs to you and your business relationship with that client. You are responsible for obtaining any consent required under your local law before storing another person's contact information, photos, or health flags (such as allergies) in eyeform. We act as a processor of that data on your behalf.
8. Your rights and choices
Regardless of where you live, you can:
- Access or export your data by contacting support.
- Correct or update your data directly inside the app.
- Delete your account at any time from Settings → Delete Account, or by following the steps at eyeform.app/delete-account.
- Opt out of non-essential email by replying to any message from us.
If you are in the EU, UK, or California, you also have the right to restrict or object to certain processing, and to lodge a complaint with your local data protection authority.
9. Security
Passwords are hashed using industry-standard algorithms (bcrypt). All traffic is encrypted end-to-end with TLS. Database records use row-level security to ensure no user can access another user's data. We review our access controls regularly. No system is perfectly secure, and we cannot guarantee that determined attackers will never succeed, but we take reasonable steps to reduce risk.
10. Children
eyeform is a professional tool for licensed lash technicians. The service is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can remove it.
11. Changes to this policy
We will update this page when our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced in-app or by email to your account address before they take effect.
12. Contact
Questions, requests, or complaints about this policy can be sent to support@eyeform.app.