Skip to main content
Ocura

Privacy Policy

Last updated: July 2026

Overview

Ocura (“we,” “our,” or “us”) is committed to protecting your privacy. This policy describes how we collect, use, and safeguard your information when you use the Ocura mobile application and website.

Camera Data

Ocura's blink analysis feature uses your device's front-facing camera. All camera processing happens entirely on your device. We do not record, store, or transmit any video or images from your camera. Only computed metrics (blink count, blink rate, blink completeness) are saved locally by default. If you create an account, those metrics may be synced to enable cross-device access; video and images are never recorded, stored, or transmitted.

Information We Collect

When you use Ocura, we may collect:

  • Screening results: Blink metrics and questionnaire responses, stored on your device by default.
  • Account information: If you choose to create an account, your email address and authentication credentials.
  • Health profile: Optional health information you provide (conditions, medications) to improve screening accuracy.
  • Website analytics: When you visit the website, we may collect minimized page path, minimized referrer origin/path, coarse browser family, and interaction events such as download clicks or FAQ expansion. We do not intentionally collect query strings, URL fragments, raw user-agent strings, or cross-site session identifiers in first-party website event logs.
  • Website diagnostics: When configured, Sentry may receive error, performance, and masked session-replay telemetry. Session replay samples 10% of website sessions and sessions with a captured client error. Text and form inputs are masked, media is blocked, and default PII collection is disabled in the Sentry configuration.
  • Contact and newsletter information: If you submit a website form, we collect the information you provide so we can respond or send requested updates.

Website Services

The website may use Cloudflare services, including Workers, D1, and Turnstile, to host pages, store website event/contact records, and reduce spam. Contact form emails may be processed through Resend. Plausible Analytics may be used as an optional privacy-focused analytics sink when it is enabled for the site. Plausible receives page views and mirrored custom events for aggregate reporting; Ocura does not use Plausible to build advertising profiles. Sentry may be used for error monitoring, performance telemetry, and privacy-masked session replay as described above. These services process website data only for operating, securing, measuring, and improving Ocura.

Data Storage and Sync

In guest mode, screening records and health-profile data are not synced to an account. Limited operational analytics and crash diagnostics may still be transmitted to operate and improve the app. If you create an account, screening data may be synced to our secure servers to enable cross-device access and longitudinal analysis. You can delete your account and associated data at any time.

Data Sharing

We do not sell your personal information. We do not share your screening data with third parties for marketing purposes. We may use anonymized, aggregated data for research purposes.

Data Retention

Account deletion immediately locks the account and starts removal of associated screening, health-profile, and activity data. Failed cleanup steps remain marked for automatic retry and are permanently removed within 30 days. You can request data export or deletion by contacting us. Website analytics and form records are retained only as long as needed for site operations, abuse prevention, support, and product analytics.

Delete Your Ocura Account

In the Ocura app, go to Profile > Account > Delete Account, review the deletion notice, and confirm the request. This deactivates the account, clears local app data from that device, and starts deletion of associated account information, screening records, health-profile data, and activity data from our systems.

Server cleanup is completed within 30 days. Limited records may be retained only when required for security, fraud prevention, or legal compliance. If you cannot access the app, email privacy@ocuramedical.com from the address associated with your account and request account deletion.

Contact

For privacy inquiries, contact us at privacy@ocuramedical.com.