Privacy
Last updated 10 October 2026
The short version
- Only the cropped close-up of your iris leaves your phone. No name, no account, no other photos.
- It goes through our server to Google's Gemini API (paid tier), which analyses it and creates your portrait. The close-up is deleted after processing.
- Your portrait and reading are deleted from our server within 7 days. After that, they're only on your phone.
- Nothing is used to train AI, by Google or by us.
- There's no account. Purchases go through Apple; we never see your name or payment details.
- The app counts how people use it with TelemetryDeck, anonymously.
- This website uses no cookies and no analytics.
Who we are
irisma is made by an independent developer, the seller named on its App Store page, who is responsible for your data (the "controller"). Contact: support@irisma.app.
What we process, why, and for how long
| What | Why | How long |
|---|---|---|
| The close-up of your iris (a square crop, no location or other metadata) | To make your free reading and your portrait | For a reading, it isn't stored: it goes to Google and is discarded when the answer is back. For a portrait, it's stored only while the portrait is made and deleted when that ends (an automatic clean-up removes anything left after 1 day). |
| Your reading, the iris and pupil circles, and the measured colours | To show your reading and make the portrait | Deleted within 7 days |
| Your portrait | So it can reach your phone | Deleted within 7 days |
| A random install ID made by the app, and a one-way scrambled version of your network address | To count free readings and stop abuse | 2 days |
| The purchase: Apple's transaction ID, the product and how many portraits it has paid for | To check the purchase is real and used only once, and for our accounts | As long as the law requires us to keep sales records |
| Technical logs (errors, timings, costs per job) | To run and fix the service | A few days |
We don't use your photo to identify you, and we don't sell or share your data for advertising.
Legal bases. Before your first upload, the app asks for your consent and explains what happens to your photo (GDPR Art. 6(1)(a), and Art. 9(2)(a) to the extent an eye photo counts as sensitive data). Purchases are handled to perform our contract with you (Art. 6(1)(b)). Abuse prevention and anonymous analytics rely on our legitimate interest in running a fair, working service (Art. 6(1)(f)). Sales records are kept because the law requires it (Art. 6(1)(c)).
Who processes it for us
- Google (Gemini API, paid tier) analyses the close-up and creates the portrait. Under Google's paid-tier terms, requests are not used to train or improve Google's models. Google may keep requests for a limited time only to detect abuse and meet legal obligations.
- Cloudflare runs our server, storage and this website. Our data is stored on Cloudflare servers in the United States.
- Apple handles App Store purchases and refunds under Apple's privacy policy.
- TelemetryDeck (Germany) receives the app's anonymous usage signals.
Google and Cloudflare are US companies. Transfers to them rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
On your iPhone
- Your portraits, their colour measurements and their labels stay on your phone until you delete them in the app or delete the app. They're never uploaded again.
- The app keeps your last free reading, including its close-up, for up to 6 days, so you can still unlock it once your free readings are used. It's deleted when you buy it, when a newer reading replaces it, or after 6 days.
- While a paid portrait is being made, its close-up stays on your phone so a closed app doesn't lose a portrait you paid for. It's deleted when the portrait arrives.
- Photos: irisma asks only to add images to your library. It can't see your photos.
- Camera: used only while you take the close-up.
- The app keeps a random install ID and a random purchase token (which Apple attaches to your purchases, so support can find them) in your iPhone's Keychain.
Analytics
The app sends anonymous signals to TelemetryDeck when you reach steps such as taking a photo, seeing your reading, opening the paywall, buying and sharing, together with the app version, iOS version and device model. TelemetryDeck gets a one-way scrambled identifier, never your photo, your reading, your name or your Apple ID. There are no ads and no tracking across other apps or websites.
This website
No cookies, no analytics and no third-party scripts. Cloudflare processes your IP address to deliver pages and protect the site from attacks.
Children
irisma isn't meant for children. If you're under 16, please ask a parent before using it.
Your rights
You can ask us to access, correct or delete your data, to restrict or object to its use, or for a copy of it, and you can withdraw consent at any time (it doesn't affect what was done before). To delete everything at once, use Settings > Delete all my data in the app: it deletes your portraits, readings and photos on your phone and on our server (a portrait still being made is deleted once you repeat it after it arrives). Because there's no account, for anything else the quickest way is to write from the app (Problem with a purchase? fills in your app account ID) or to support@irisma.app. Most data deletes itself within 7 days anyway.
You can also complain to the data protection authority where you live.
Changes
If this policy changes, we'll update the date above. If what we send or keep changes, the app asks for your consent again before your next upload.