Privacy notice
Version: 2026-11-01
Draft: this text has not been through legal review yet, and the final version may differ.
1. The data controller
The controller is the provider of LensHint (details in the Imprint). For privacy matters, write to privacy@lenshint.com.
2. What we handle, why, and on what legal basis
Account: email address, a hash of your password, with Google sign-in the identifier and profile data Google passes on (name, profile picture address), the interface language, the time of registration and sign-in. Purpose: running the account. Legal basis: performance of the contract.
Gear bag and saved recipes: the cameras, lenses, settings and notes you enter. Purpose: syncing between your devices. Legal basis: performance of the contract.
Entitlement and order identifiers: the end of the trial, the Pro status and its activation time, the Lemon Squeezy order and customer identifiers, how often checkout is attempted. Purpose: providing the Pro license and preventing abuse. Legal basis: performance of the contract and legitimate interest.
The accepted version of the Terms and this notice, with its time. Purpose and legal basis: proving the contract, legitimate interest.
Feedback: the message, its type (bug, idea, complaint, other), the language, the account's email address for the answer, and only if you tick the box technical data (browser identifier, plan, app version). Legal basis: performance of the contract and legitimate interest (fixing bugs, answering), for complaints a legal obligation (Hungarian Consumer Protection Act, 17/A).
Technical logs (IP address, time, request data) at the hosting and database providers. Purpose: operational security and investigating abuse. Legal basis: legitimate interest.
Camera light meter: the camera is only on while measuring, the microphone is never used. Frames never leave your device and are neither stored nor sent: only their average brightness is calculated.
3. How long we keep data
Account data, gear, recipes, entitlement and feedback are kept until the account is deleted.
Deleting the account erases them from the database immediately. The exception is a complaint: the message and the reply address stay in the complaints register for five years, without the account (Hungarian Consumer Protection Act, 17/A); its technical data is erased.
Deletion does not reach copies outside the database: emails about feedback and requests can remain in the support@ mailbox and the email provider's logs, and data can remain in the providers' backups and logs, for their own retention periods. You can ask for the emails in the mailbox to be erased at privacy@lenshint.com.
4. Who can access the data
Processors: Supabase (database and sign-in, data stored in the EU, Frankfurt), Microsoft Azure (hosting and logs, EU, Sweden Central), Resend (sending email), GoDaddy / Titan (the support@, privacy@, billing@ and security@ mailboxes, which receive feedback and requests).
Independent controllers: Lemon Squeezy and its payment partners such as Stripe (payment, invoice, VAT), and Google if you sign in with your Google account. They handle your data under their own notices.
We do not sell your data, and currently do not use it for advertising.
5. Transfers outside the EU
Supabase, Microsoft, Lemon Squeezy, Stripe, Google, Resend and GoDaddy are US companies or groups, so the data may also be accessed from outside the EU (for example through support or subcontractors). Such transfers rest on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Your rights
You can request access to your data, rectification, erasure, restriction and portability, and you can object to processing based on legitimate interest. We answer within one month.
In the Account window you can download your data (JSON) and delete your account at any time; deleting needs a sign-in no older than 15 minutes, otherwise you sign in again first. The download does not include order data (handled by Lemon Squeezy), the checkout attempt counter or technical logs; for these and anything else, write to privacy@lenshint.com.
You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, https://naih.hu), and you can also go to court.
7. Children
Only people over 16 can create an account.