1. Who is responsible
Computer Force SRL is the operator and data controller for NuanceLens AI. Before commercial launch, this notice will be completed with the company registration number, registered office and Romanian supervisory-contact details following legal review. Privacy questions can be sent to [email protected].
2. Scope and people in a video
This notice covers the mobile app, nuancelensai.com and related support. An account holder must obtain the informed consent of the one adult participant shown before analysis. The participant may be different from the account holder. NuanceLens AI is not designed for minors, covert recording or groups.
3. Data we process
Account and access
- Firebase user identifier, email address and verification state;
- chosen language, accepted policy versions and basic account timestamps;
- Google or Apple sign-in identifiers when you choose those providers.
On-device video analysis
The selected video or live camera frames, face and body landmarks, and intermediate vision output are processed on the device for the analysis. NuanceLens AI does not send raw video, frames or audio to its servers. Live analysis does not record the camera stream. The app does not use the microphone.
Derived observations and reports
If cloud narration is used, the app sends derived, time-bounded events such as the type of visible movement, timing, normalized strength, quality and confidence. Each observation has a random evidence identifier. The service also processes the selected language, analysis mode, duration and any optional short context note you enter. It returns and stores an evidence-linked report in your account. Although the service does not perform identity recognition or create an identity template, facial and gesture-derived data may receive special legal protection depending on context and jurisdiction.
Purchases and operations
- product identifier, store, transaction identifier, entitlement period and verification state;
- credit grants, reservations, usage and refunds in an immutable account ledger;
- security, abuse-prevention and error information needed to operate the service. Advertising profiles and third-party advertising trackers are not used.
4. Why we process data
- Contract: create and secure your account, provide analyses, reports, credits and purchases.
- Consent: process optional camera/video analysis and optional cloud narration where consent is the appropriate basis. You can stop before starting or cancel an analysis.
- Legitimate interests: protect accounts, prevent fraud, diagnose failures and improve reliability, balanced against user rights.
- Legal obligations: maintain required tax, transaction and consumer-protection records.
We do not use the service to make automated decisions that produce legal or similarly significant effects about a participant.
5. Service providers and transfers
We expect to use Google Firebase in European regions for authentication, database and server functions; Google Gemini as the primary optional narrative provider; OpenAI as a fallback narrative provider; and Apple App Store or Google Play for payment. Sign-in providers process data under their own notices. Only the data needed for a request is sent. Cloud narrative providers receive derived events, never raw video through our service.
Some providers may process data outside the EEA. Before release we will document the selected provider regions, contractual safeguards, subprocessors and transfer mechanism in the production version of this notice.
6. Retention
- Account profiles, derived reports and current entitlements are kept while the account is active, until you delete them or the account.
- Short-lived operational logs are retained only as long as reasonably needed for security and reliability; final periods will be published before launch.
- Store transaction and accounting records may be retained for the period required by Romanian and EU law, then deleted or irreversibly separated from the app account where possible.
- Deletion is propagated to active systems promptly. Encrypted backups rotate out on the documented production backup schedule.
7. Your choices and rights
Depending on applicable law, you can ask for access, correction, deletion, restriction, portability, withdrawal of consent or objection. You can delete the account in the app or through the web deletion page. You may also contact [email protected]. We may need to verify your identity. You can complain to the Romanian National Supervisory Authority for Personal Data Processing or your local EEA authority.
8. Security and children
We use authenticated access, server-side purchase checks, App Check, access rules and data-minimization boundaries. No system is completely secure. The service is for adults aged 18 or over and is not knowingly offered to children.
9. Changes
Material changes will be dated and shown in the app or on this page. Where required, we will ask for consent again. This pre-release draft must be completed and reviewed before commercial processing begins.