1. Who is responsible
Computer Force SRL is the operator and data controller for NuanceLens AI. Before commercial launch, this notice will be completed with the company registration number, registered office and Romanian supervisory-contact details following legal review. Privacy questions can be sent to Contact the privacy team.
2. Scope and people in a video
This notice covers the mobile app, nuancelensai.com and related support. An account holder must obtain the informed consent of the one adult participant shown before analysis. The participant may be different from the account holder. NuanceLens AI is not designed for minors, covert recording or groups.
3. Data we process
Account and access
- Firebase user identifier, email address and verification state;
- chosen language, accepted policy versions and basic account timestamps;
- Google or Apple sign-in identifiers when you choose those providers.
On-device video analysis
The selected or newly recorded video, face and body landmarks, and intermediate vision output are processed on the device for the analysis. A camera recording begins only after you tap Start recording and is stored temporarily by the operating system. The system camera may include audio, but NuanceLens AI does not analyze it. NuanceLens AI does not send raw video, frames or audio to its servers.
Android MediaPipe metrics
On Android, NuanceLens AI uses Google MediaPipe to process video on your device. The Android SDK may send Google usage and performance metrics, including app identification and version, device or system information, and analysis-processing statistics, to maintain and improve MediaPipe. This processing is separate from the original video and from an optional cloud AI explanation. See Google MediaPipe terms and privacy details.
Derived observations and reports
If cloud narration is used, the app sends derived, time-bounded events such as the type of visible movement, timing, normalized strength, quality and confidence. Each observation has a random evidence identifier. The service also processes the selected language, analysis mode, duration and any optional short context note you enter. It returns and stores an evidence-linked report in your account. Although the service does not perform identity recognition or create an identity template, facial and gesture-derived data may receive special legal protection depending on context and jurisdiction.
Purchases and operations
- product identifier, store, transaction identifier, entitlement period and verification state;
- credit grants, reservations, usage and refunds in an immutable account ledger;
- security, abuse-prevention and error information needed to operate the service. Advertising profiles and third-party advertising trackers are not used.
4. Why we process data
- Contract: create and secure your account, provide analyses, reports, credits and purchases.
- Consent: process optional camera/video analysis and optional cloud narration where consent is the appropriate basis. You can stop before starting or cancel an analysis.
- Legitimate interests: protect accounts, prevent fraud, diagnose failures and improve reliability, balanced against user rights.
- Legal obligations: maintain required tax, transaction and consumer-protection records.
We do not use the service to make automated decisions that produce legal or similarly significant effects about a participant.
5. Service providers and transfers
The app integrates Firebase account and backend services, RevenueCat purchase reconciliation, and Apple App Store or Google Play payments. Optional narrative adapters support OpenAI and Google Gemini; which adapter is active depends on the server configuration. The final provider inventory, region settings and contractual safeguards must be verified for the release. Providers receive derived events and context for narration, not raw video through our service.
Sign-in providers process data under their own notices. Some providers may process data outside the EEA. Before release we will document the selected regions, subprocessors and transfer arrangements in the production version of this notice.
6. Retention — pre-release review
Deleting your account removes your account data and reports. A minimal pseudonymous record remains to prevent an old request from recreating the account; its retention and cleanup policy is still being finalized. Store subscriptions, external-provider records, service logs and support records are separate. Deleting the account does not cancel a store subscription and does not guarantee removal by every external provider. Final retention periods, accounting requirements and backup handling remain under review; this draft does not promise an expiry schedule.
7. Your choices and rights
Depending on applicable law, you can ask for access, correction, deletion, restriction, portability, withdrawal of consent or objection. Account-deletion controls are in the app. The web deletion page shows whether online deletion is enabled and provides other deletion routes. You may also contact Contact the privacy team. We may need to verify your identity. You can complain to the Romanian National Supervisory Authority for Personal Data Processing or your local EEA authority.
8. Security and children
We use authenticated access, server-side purchase checks, App Check, access rules and data-minimization boundaries. No system is completely secure. The service is for adults aged 18 or over and is not knowingly offered to children.
9. Changes
Material changes will be dated and shown in the app or on this page. Where required, we will ask for consent again. This pre-release draft must be completed and reviewed before commercial processing begins.