Our privacy baseline. EYEMOTION AI is free, contains no advertising SDK, does not sell raw biometric data, and does not use eye images for advertising. Raw eye images are processed temporarily and are designed to be deleted automatically after analysis.
1. Who We Are
Black Diamond Co., Ltd. / 株式会社ブラックダイヤモンド (“Black Diamond,” “Aurix,” “we,” “us,” or “our”) operates EYEMOTION AI and is responsible for the handling of personal information described in this Policy.
Black Diamond Co., Ltd.
8-14-9 Ginza, Chuo-ku, Tokyo, Japan
Corporate Registration No. 0105-01-024173
Privacy and support email: manager@aurixnetwork.com
2. Scope
This Policy applies to the EYEMOTION AI mobile application, the EYEMOTION AI legal and account-deletion webpages, customer support, and related services operated by us. It does not govern independent third-party websites or services that have their own privacy policies.
3. Age Eligibility
EYEMOTION AI is intended only for adults aged 18 and over. We do not knowingly collect personal information from persons under 18. If we learn that an underage person has provided information, we will take reasonable steps to delete it.
4. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address, internal user ID, password hash, email verification status, account status | Create, secure, and manage your account |
| Eye Scan input | Camera-captured eye images, eye-region data, facial or eye landmarks, eye openness, gaze-related signals, scan quality and technical metadata | Perform Eye Scan processing and generate wellness insights |
| Wellness-related information | Fatigue-, focus-, stress-signal-, recovery-, physical-, cognitive-, and emotional-wellness indicators, Wellness Composite Score, reports and guidance | Provide non-medical wellness insights, history, and guidance |
| Usage and technical data | App version, device and operating-system information, IP address, request timestamps, security logs, error information, network status | Operate, secure, troubleshoot, and improve the Service |
| Consent records | Consent type, document version, language, acceptance or withdrawal time, source of consent | Record and manage your privacy choices |
| Support communications | Email messages, deletion requests, questions and issue details you submit | Respond to you and resolve requests |
In the current version, we do not intentionally collect payment information, contact lists, precise location, advertising identifiers, or data for behavioral advertising.
5. Eye Images and Biometric-Related Signals
EYEMOTION AI processes eye images and biometric-related signals for non-medical wellness analysis. The current consumer wellness version does not use eye images to uniquely identify you, authenticate your legal identity, or create a public biometric identity.
Raw image handling. Raw eye images are uploaded securely for temporary analysis, are not sold, are not provided to advertising networks, and are designed to be deleted automatically after analysis. A failed or interrupted processing file may remain temporarily for technical recovery but will be deleted no later than 24 hours after upload unless retention is required by law or you separately request technical investigation.
Derived analytical results and privacy-protected feature data may be retained with your account to provide scan history, reports, trends, and guidance.
6. How We Use Information
- create, verify, and manage accounts;
- receive and process Eye Scan input;
- generate non-medical wellness results, reports, and lifestyle guidance;
- display scan history and progress information;
- remember and enforce consent choices;
- send verification, security, deletion, and service-related emails;
- protect accounts, prevent misuse, detect security incidents, and maintain logs;
- diagnose technical problems and improve reliability and usability;
- respond to support and legal requests and comply with applicable law.
We do not use Eye Scan input or wellness results for advertising, credit, insurance, employment, medical underwriting, or automated high-impact decisions.
7. Legal Bases
Depending on your location, we rely on one or more of the following legal bases:
- Contract: processing needed to create your account and provide requested service functions.
- Explicit consent: processing eye images and wellness-related data where consent is required, including where such information may be treated as sensitive data.
- Legitimate interests: security, fraud prevention, service reliability, and limited internal improvement, balanced against your rights.
- Legal obligations: compliance with applicable law, lawful requests, and dispute handling.
You may withdraw consent at any time. Withdrawal does not affect processing lawfully completed before the withdrawal.
8. Sharing and Service Providers
We do not sell personal information or raw biometric data. We share information only as reasonably necessary with:
- Amazon Web Services: cloud hosting and infrastructure, including AWS Lightsail, with primary application hosting in Tokyo, Japan.
- AWS SES (Amazon Simple Email Service): delivery of verification and service-related email. Email delivery metadata may be processed in the AWS region configured for the service.
- Authorized technical providers: limited providers that support security, maintenance, infrastructure, or incident resolution under confidentiality and data-protection obligations.
- Authorities or professional advisers: where required by law, court order, lawful process, protection of rights, or security response.
- Business succession: in connection with a merger, reorganization, or transfer, subject to appropriate confidentiality and continued protection.
We do not provide raw eye images to partners for independent marketing or advertising use.
9. International Data Transfers
Our primary service infrastructure is located in Tokyo, Japan. If you use EYEMOTION AI from another country, your information may be transferred to and processed in Japan and in locations where approved service providers operate.
Where applicable law requires additional transfer safeguards, we use appropriate contractual, organizational, or legal measures. Users in the EEA, United Kingdom, or other regulated jurisdictions may contact us for information about applicable transfer safeguards.
10. Retention
| Data | Standard retention |
|---|---|
| Raw eye images | Deleted automatically after analysis; failed or interrupted files deleted within 24 hours |
| Derived wellness results and scan history | While your account remains active, or until deletion or consent withdrawal requires removal |
| Account and consent records | While the account is active and for the minimum additional period reasonably needed for deletion verification, disputes, security, or law |
| Routine security and access logs | Normally up to 90 days; longer only for an active security incident, legal obligation, or dispute |
| Support communications | Normally up to 24 months after resolution, unless a shorter deletion request or longer legal need applies |
| Backup copies | Removed through the backup rotation process no later than 90 days after deletion from active systems |
We may retain a minimal record that a deletion request was completed when reasonably necessary to demonstrate compliance, prevent fraud, or resolve disputes, without retaining raw eye images or ordinary wellness history.
11. Security
We use reasonable technical and organizational safeguards, including HTTPS/TLS transmission, password hashing, access controls, secure token storage, restricted administrative access, rate limiting, logging, and temporary-file deletion. No system can guarantee absolute security, but we continually review protections appropriate to the nature of the data.
You should use a unique password, protect your device, and contact us promptly if you suspect unauthorized access.
12. Your Rights and Choices
Subject to applicable law, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your account and associated data;
- withdraw eye-image and wellness-data consent;
- request restriction, object to certain processing, or request portability where applicable;
- receive information about service providers or international transfer safeguards;
- lodge a complaint with a competent data-protection authority.
To exercise a right, use the app settings, visit the account deletion page, or email manager@aurixnetwork.com. We may verify that the request comes from the account holder.
13. Account and Data Deletion
You can request deletion in the app or through the public account deletion page. After verification:
- access to the account is disabled promptly;
- active account data, wellness history, derived results, and consent data are deleted or de-identified within 30 days;
- backup copies are removed through normal rotation within 90 days;
- limited information may be retained only where required for security, legal compliance, or dispute resolution.
We will never ask you to send your password or eye images by email to complete a deletion request.
14. Consent Withdrawal
You can withdraw consent for future eye-image and wellness-data processing without deleting the whole account. After withdrawal, new Eye Scans will be disabled. You may separately request deletion of previously stored derived wellness results.
15. Cookies and Local Storage on These Pages
These legal pages do not use advertising cookies or analytics. They may save your English/Korean language choice in your browser’s local storage so the same language can be shown on your next visit.
16. Changes to This Policy
We may update this Policy to reflect changes in the Service, law, security practices, or data handling. Material changes will be announced through the app, website, email, or another reasonable method. Where required, we will request renewed consent before applying a materially different sensitive-data purpose.
17. Contact and Complaints
Privacy Contact
Black Diamond Co., Ltd.
8-14-9 Ginza, Chuo-ku, Tokyo, Japan
Email: manager@aurixnetwork.com
You may also contact the data-protection authority in your country or region. In Japan, privacy oversight is provided by the Personal Information Protection Commission.