Privacy Policy
1. About this policy
This Privacy Policy explains how EyesOn handles personal information. EyesOn is provided by Luke Davoli, a sole trader trading as Davoli Software, ABN 12 245 887 016, in Victoria, Australia (EyesOn, we, us or our).
It applies to the EyesOn app, related services, support and safety processes, and EyesOn pages on the Davoli Software website. EyesOn is for people aged 18 and over.
2. Information we collect
Depending on how you use EyesOn, we may collect and hold:
- Account and profile information: contact details, profile details and images, account identifiers and settings, age confirmation, verification status, and policy-acceptance records.
- Authentication information: identifiers and provider details supplied by Auth0 and any sign-in provider you choose. EyesOn does not receive your Google or Apple password.
- Member content and activity: connections, audience selections, goals, progress, measurements, check-ins, photos, comments, reactions and notifications.
- Safety and support information: reports, reported content, moderation records, support messages, feedback, screenshots and relevant diagnostics.
- Technical information: app, device, authentication, security, request, delivery and reliability information needed to operate and protect the service.
- Device-held information: secure sign-in credentials, cached app information, prepared photos and unsent reports retained for retry.
3. Sensitive information
Content you choose to share may reveal health, mental-health, recovery, disability, religious, sexual-orientation or other sensitive information. EyesOn does not require a diagnosis or sensitive details to create a goal.
You choose what to share and which audience to select. A goal's updates, photos and related interactions follow that goal's audience controls. EyesOn is not a medical or clinical service, and member content is not professional advice.
4. How and why we handle information
We collect information directly from you, automatically through the app and service, from authentication and platform providers, and from other members when they connect, interact with or report you.
We handle information to:
- create, authenticate, secure and administer accounts;
- provide EyesOn's profiles, goals, sharing, social and notification features;
- apply audience, blocking and privacy choices;
- process photos and other member content;
- prevent abuse, investigate reports and enforce the Terms;
- respond to support, privacy and feedback enquiries;
- diagnose faults, maintain security, improve EyesOn and recover from failures; and
- comply with law and protect legal rights.
We may use rewritten, genuinely de-identified summaries of member experiences to explain or promote EyesOn. We will obtain separate permission before using a member's exact words or photos in marketing, or where a story cannot reasonably be de-identified.
5. Sharing and overseas processing
Member content is visible according to EyesOn's audience and relationship controls. People authorised to view content may copy or share it outside EyesOn. Safety reports are reviewed privately and may preserve reported content as it appeared when reported.
We use service providers including:
- Microsoft Azure for hosting, storage, telemetry, notifications and service email;
- Auth0 and selected sign-in providers for authentication;
- Notion for private support and safety records; and
- Apple and Google for app distribution and platform services.
These providers and their subprocessors may handle information in Australia, the United States and other countries in which they operate. We may also disclose information where reasonably necessary to comply with law, protect safety, investigate abuse, establish or defend legal rights, or transfer the service as part of a business transaction subject to appropriate protections.
We do not publish safety reports, feedback or support communications.
6. Storage, security and retention
We use technical and organisational measures designed to protect personal information, including access controls, private cloud storage, encrypted connections, environment separation, restricted administration and narrowly scoped photo access.
We retain personal information only as long as reasonably needed to operate EyesOn, provide support, maintain security, recover from failures, handle disputes and meet legal obligations. In particular:
- account information and member content are generally kept while the account or content remains active;
- deleted progress photos become unavailable through EyesOn immediately but may remain in encrypted recovery storage for up to seven days;
- deleted database information may remain in protected recovery copies for up to three months;
- safety, support and feedback records are deleted or genuinely de-identified when no longer reasonably needed; and
- operational records are kept for limited periods and ordinary telemetry does not include member-authored content.
Account deletion removes the account, its policy-acceptance history and associated member content from the active EyesOn database and schedules deletion of the associated identity-provider account. Limited records may be retained temporarily for security, recovery, disputes or legal obligations.
7. Your choices and requests
EyesOn's controls let you manage supported audiences, content, connections, blocked accounts, notifications and account deletion.
You may ask to access or correct personal information we hold about you, request deletion where applicable, withdraw a permission you previously gave, or ask about our privacy practices. Email luke@davolisoftware.com with enough information for us to verify and respond to the request.
We will endeavour to respond as soon as reasonably feasible. We may decline or limit a request where permitted or required by law and will explain the reason where appropriate.
8. Privacy complaints
If you believe EyesOn has mishandled your personal information, email luke@davolisoftware.com with enough detail for us to investigate. We will consider the complaint and communicate an outcome as soon as reasonably feasible.
You may also be entitled to complain to the Office of the Australian Information Commissioner or, for health information handled in Victoria, the Victorian Health Complaints Commissioner.
9. Children
EyesOn is not offered to people under 18. If you believe a person under 18 has created an account, contact us so we can investigate and take appropriate action.
10. Changes to this policy
We may update this policy when EyesOn, its providers or applicable requirements change. We will publish the current version and effective date and take reasonable steps to notify affected members of material changes. Where a new collection, use or disclosure requires consent, we will seek that consent.
11. Contact
- Privacy contact: Luke Davoli
- Davoli Software
- ABN 12 245 887 016
- Victoria, Australia
- Email: luke@davolisoftware.com