PRIVACY NOTICE · VERSION 2026-09-21
Eye data deserves restraint.
Who controls the data
IRISPECTRA operates this research website and determines why and how personal data submitted through the site is processed. Privacy and data-rights requests can be submitted through the contact form.
What we collect
Depending on the feature you use, we may process your first and last name, email address, age, optional country or broad region, consent choices, iris photographs, camera-derived pupil measurements, technical image and device metadata, derived structural measurements, submission references, request logs and security/audit events.
Iris photographs and measurements are treated as sensitive research data. Where they qualify as biometric or other special-category personal data under applicable law, we apply the corresponding higher-protection standard.
Why we process it
We process data only to run the feature you request, generate the experimental measurement shown to you, maintain system security and integrity, respond to your requests, and—only when you make a separate optional choice—support research or future model development. We do not use iridology maps to infer organs, disease, personality or personal history.
Legal basis and consent
The minimum processing needed to provide an iris measurement is separated from optional research uses. Where explicit consent is required for sensitive or special-category data, the relevant choice is requested before that processing. Optional research consent is not required to receive the basic measurement and can be withheld independently.
Storage and access
Stored submissions use private database and object-storage services. Access is restricted to authorised operators through server-side credentials. Data is transmitted over HTTPS. We do not publish original iris photographs or attach them to routine notification email.
Written interpretation requests
If you actively request the optional Iris Structure written interpretation, the two iris photographs you uploaded and the contact details needed to return the reply are sent privately for that one-time review. This transfer occurs only after the separate review consent shown beside the request button.
Retention
Stored research submissions are retained until you withdraw them or the relevant research programme closes, unless a shorter period is stated at the point of collection or longer retention is required by law. Security logs may be retained only as long as reasonably needed for abuse prevention, legal obligations and deletion evidence. Truly anonymised aggregate results that can no longer be linked to a person may not be reversible.
Service providers and transfers
Hosting, private database/object storage and transactional-email providers may process limited data on our behalf to operate the service. Their access is limited to what is necessary for that function. Cross-border processing or transfer, where applicable, must use the safeguards required by the relevant data-protection law.
Your choices and rights
You can decline optional research uses, request access or correction where applicable, object or restrict processing where the law provides that right, and request deletion or withdrawal of consent. Use the withdrawal page with your reference and matching email for a stored submission, or use the contact form for privacy questions and other rights requests.
Adults only
IRISPECTRA is currently intended for adults aged 18 or older. Do not submit another person's eye image or personal data unless you are legally authorised to do so.
Research, not medical care
IRISPECTRA is an experimental research platform. Its outputs are not medical diagnoses, clinical advice or a substitute for an eye examination or other professional healthcare.