The Eye — Privacy Policy

Last updated: December 11, 2025
Data Controller: Antonio Ferraioli — support@onmadesoft.com
Via Bertodano 10, 13900 Biella (BI), Italy

1. Introduction

The Eye (“the App”) provides AI-generated divinations based on images captured by the user. We are committed to protecting your privacy and handling your data transparently, securely, and in accordance with the GDPR, ePrivacy rules, and Apple’s App Store guidelines.

This Privacy Policy explains what data we collect, how we use it, how we share it, and what rights you have.

2. Data Controller

The Data Controller responsible for your personal data is:

Antonio Ferraioli
Email: support@onmadesoft.com
Address: Via Bertodano 10, 13900 Biella (BI), Italy

3. Data We Collect

3.1 Images Provided by the User

When you request a divination, the image you capture is:

• sent temporarily to our server,
• forwarded to OpenAI for AI processing (model: gpt-5-nano),
• immediately discarded from our server after processing,
• never stored, logged, or retained on any server.

Your image and the generated divination text are stored only on your device. We do not store or retain these data on our servers.

3.2 Technical and Analytics Data (Anonymous)

We collect non-identifying technical and usage data through Firebase Analytics and our internal event system, including:

• device model
• app version
• language settings
• timestamps
• aggregated feature usage

This data does not identify you personally.

3.3 Crash Data

Firebase Crashlytics collects anonymous crash reports to improve stability and diagnose issues. Crash data is not linked to identifiable users.

3.4 Advertising and Consent Data

When displaying ads through Google AdMob, we process consent information collected through Google’s User Messaging Platform (UMP), as required in the EU/EEA and UK.

Depending on your choices:

• Personalized ads may use your advertising identifier (IDFA).
• If personalization is declined, we serve non-personalized ads (NPA).

3.5 Support Requests by Email

If you use the in-app support feature, the App opens your email client with a pre-filled message addressed to support@onmadesoft.com.

When sending a support email, we receive:

• your email address,
• the content of your message,
• any attachments you include.

We use this information solely to respond to your inquiry.

Retention:
Support emails are stored for up to 180 days, then deleted unless required for security or legal compliance.

Legal Basis:

• Execution of a contract (Art. 6.1.b GDPR) — responding to your request.
• Legitimate interest (Art. 6.1.f GDPR) — ensuring service quality and detecting abuse.

Support emails are not used for analytics or advertising and are not shared with third parties.

4. How We Use Your Data

4.1 Provide the Divination Service

Processing your image is necessary to generate the AI-based divination.

4.2 Improve App Performance

Anonymous analytics help us understand feature usage and improve the App.

4.3 Maintain Stability and Security

Crash and diagnostic data help detect bugs and improve performance.

4.4 Advertising

We show interstitial ads through Google AdMob (personalized or non-personalized depending on consent). No profiling is performed beyond what is necessary for advertising.

5. Legal Bases for Processing (GDPR)

5.1 Execution of a Contract (Art. 6.1.b)

Required to provide the divination service.

5.2 Consent (Art. 6.1.a)

• Consent for advertising is collected through UMP where required.
• Consent for sending the image to OpenAI is obtained through a one-time in-app notice.

5.3 Legitimate Interest (Art. 6.1.f)

Used for anonymous analytics, diagnostics, and support email retention.

6. AI Processing (OpenAI)

Your image is sent to OpenAI’s API (model: gpt-5-nano) solely to generate a divination. It is not retained, stored, or used for model training.

Our servers do not store images or divination text.

7. Sharing with Third Parties

We share data only with:

• OpenAI — for AI processing
• Google Firebase — Analytics, Crashlytics, Remote Config
• Google AdMob & UMP — advertising and consent management

We do not sell or rent your data. Support emails are not shared externally.

8. Data Retention

• Images & divinations: never stored on servers; only on your device
• Server logs (Heroku, USA): retained for up to 1 hour
• Analytics data: retained for up to 180 days
• Crash logs: according to Firebase retention policies
• Support emails: retained for 180 days

9. International Data Transfers

Our servers run on Heroku (USA). OpenAI and Firebase may process data outside the EEA.

We rely on Standard Contractual Clauses (SCCs) and other recognized safeguards to ensure lawful data transfers.

10. Your Rights (GDPR)

You may request:

• access, rectification, deletion,
• restriction or objection to processing,
• data portability,
• withdrawal of consent (where applicable),
• to lodge a complaint with a supervisory authority.

Contact: support@onmadesoft.com

11. Children’s Privacy

The Eye does not knowingly collect data from children and does not require registration.

12. Security

We apply reasonable measures such as:

• no server-side image retention,
• HTTPS encryption,
• minimal data retention,
• separation of analytics from identifying data.

13. Changes to This Policy

This policy may be updated as needed. Changes will be available within the App and on our website.

14. Contact

For privacy inquiries:

Email: support@onmadesoft.com
Address: Via Bertodano 10, 13900 Biella, Italy
Data Controller: Antonio Ferraioli