Privacy policy

What we hold, what we do not, and how to get rid of it.

Last updated 27 July 2026

This policy covers the Eye Digital mobile app and the client area at eye.digital. It is written to be read, not to be survived.

The short version

We hold the information needed to show you your own projects, invoices and requests. We do not track you, we do not run advertising, and we do not sell or share your information with anyone for their own purposes.

What we hold

• Who you are — your name, email address and phone number, because an account needs an owner and an invoice needs a contact.
• Your work with us — projects, tasks, approvals, delivery dates and the messages between us.
• Money — invoices, what has been paid, and what is outstanding. We never see or store your card or bank details. Payments happen outside the app.
• Things you send us — files and photographs you attach to an approval or a support request.
• Your shop, if we built you one — orders, products and stock, including your customers' order details, which we process on your behalf and never use for anything else.
• Technical — a device token if you turn on notifications, and ordinary server logs including your IP address.

What we do not do

• No advertising identifiers, no ad networks, no third-party analytics SDKs in the app.
• No tracking you across other companies' apps or websites.
• No selling your information. Ever, to anyone.
• No using your business data to train anything.

The assistant

The app includes an assistant called Iris. When you ask it something, your message and the account data needed to answer are sent to our language model provider so a reply can be generated. It is scoped to your account — it cannot read another client's data. Your conversations are not used to train models. If you would rather not use it, simply do not open it.

Who else sees it

Only suppliers who help us run the service, and only as much as their job needs: our hosting provider, our email delivery provider, our language model provider, and Apple and Google for app delivery and notifications. We may also disclose information where the law requires it.

Where it lives

On our own dedicated server in Finland, operated by Hetzner. Traffic is encrypted in transit. Passwords are stored hashed with argon2 — we cannot read yours, which is why we can only ever reset it.

How long we keep it

Your account data lasts as long as your account. Invoices and payment records are kept for as long as accounting and tax law requires, even after an account closes — they are financial records rather than personal preferences, and we are not permitted to discard them on request.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. In the app, Account → Close my account does it immediately. If you cannot sign in, use the deletion request form. Either way, or for anything else, email [email protected] and a person will answer.

Children

This is a tool for businesses we work with. It is not intended for anyone under 16 and we do not knowingly collect their information.

Changes

If this policy changes in a way that matters, we will say so in the app rather than quietly editing this page.