Privacy notice

Who we are

oculirx.com and the OculiRX service are operated by Centaris Health Inc., a Delaware corporation. This notice covers the public website, the provider portal and the patient screening. It does not replace any notice of privacy practices your eye-care provider gives you.

What we collect

Website visitors. We do not use advertising or analytics cookies or trackers. The site keeps only what it needs to work, such as your cookie-banner choice. Our hosting provider processes standard request data, including your IP address, to serve and protect the site.

Register interest. If you register interest on the monitoring page, we store your email address and the page you came from. We send you a confirmation email and send our team a notification with your address. A bot check (Cloudflare Turnstile) receives your IP address, and we store your IP address to limit repeated sign-ups.

Patients. You take the screening only through a link from your eye-care provider. Your provider's practice enters your name, date of birth and contact details; new records are encrypted before they are stored, and a medical record number is stored only as a one-way hash. During the screening we record the measured acuity for each eye, screen calibration, viewing distance, and test-quality signals (such as whether your face stayed in view and how long each answer took). While you read the letters, your webcam records video without audio; it is encrypted before it is stored. Your provider's practice can see these records, and every access is logged. In your browser, the screening keeps its progress in session storage, which is cleared when you close the tab.

Providers. For portal accounts we store your name, email address, NPI, role, two-factor authentication settings, and sign-in session details (including IP address and browser). When you sign off a result we record the time, IP address and browser with your e-signature. Feedback you send from the portal is stored with your account.

How we use it

• To run the screening and let your provider review it.
• To operate provider and practice accounts, including sign-in and e-signature.
• To answer you when you register interest or contact us.
• To keep the service secure, prevent abuse, and fix errors.
• Where the law requires it.

We do not sell personal information and do not use it for advertising.

Who processes it for us

• Cloudflare, Inc. (Cloudflare), United States: hosting, database, encrypted video storage, the Turnstile bot check, and sending email.
• Functional Software, Inc. (Sentry), United States: when error reporting is enabled, technical error and performance data from the browser and server, which can include data being handled when an error occurred.
• Google LLC (Google Cloud Storage), United States: your browser downloads the face-distance model from Google during the screening.
• jsDelivr (see its privacy policy): your browser downloads the face-distance software from this public open-source CDN during the screening.
• Atlassian Pty Ltd (Jira Service Management), Australia: support tickets you submit through our support page.

The camera image used to measure distance is processed in your browser.

Patient records are shared with the provider practice that invited you. We may disclose information when the law requires it.

How long we keep it

We do not yet delete records automatically. We keep them until they are deleted on request or as the law or your provider's record-keeping requires. You can ask us to delete your register-interest email at any time.

Your choices

You can ask to see, correct or delete your information by emailing privacy@oculirx.com. For screening records, contact your eye-care provider as well, since their practice controls its patient records. Depending on where you live, you may have further rights under local law.

Children

The screening is for adults aged 22 to 40. The site is not directed to children, and we do not knowingly collect information from children under 13.

Security

Connections use TLS. New patient demographic records and session video are encrypted before storage, access is limited to the patient's provider practice, and access to patient data is logged. No system is perfectly secure.

Changes

We will post changes on this page and update the effective date above.

Contact

Centaris Health Inc., 15021 Seven L Trail, Helotes, TX 78023. Email privacy@oculirx.com.