Privacy Policy — JustSee

Last updated: July 23, 2026 · Version française

1. Data controller

The JustSee application is published and operated by:
IEYES, a French simplified joint-stock company (SAS) with a share capital of €1,000
Registered with the Bordeaux Trade and Companies Register under number 929 510 238
Registered office: 28 rue Rochambeau, 33000 Bordeaux, France
Represented by its President, Kévin Derôme
Contact (questions and exercise of your rights): contact@ieyes.fr

2. The short version

JustSee describes your surroundings from photos, using artificial intelligence. To do so, the images you choose to have described are sent to our servers, processed, and the description is returned to you. We do not sell any data, display no advertising, and use no advertising trackers. Face recognition, if you enable it, runs entirely on your device: no biometric data ever leaves your iPhone.

3. Data we process and why

a) Images and conversations. When you request the description of a photo (capture, burst, import or photo library) or chat with the Iko assistant, the image and your messages are sent to our server, which relays them to the artificial-intelligence provider (see section 5) to generate the description. Purpose: providing the requested service. Images are used solely to produce your description — never to train models, never for advertising.

b) Installation identifier. On first use, the app generates a random identifier (UUID), stored securely on your device. It is sent with each request to: apply the free daily usage quota, link your treat purchases to your device, and keep the service secure. This identifier is not linked to your name, your Apple account, or any identity data.

c) Purchases. Payments are processed exclusively by Apple; we never have access to your banking details. Our server receives a signed transaction proof from Apple (transaction identifier, purchased product, environment) in order to credit your treats. We keep the history of transactions and balances, including treat purchase and expiry dates (treats stay fresh for 12 months).

d) Technical logs. Our server logs request metadata (timestamp, installation identifier, IP address, status, duration) for security, abuse prevention and billing purposes. The content of requests (images, messages) is not kept in these logs.

e) Face recognition (optional). If you enable this feature, the face models you create are computed and stored on your device only. This biometric data is never sent to our servers or anyone else, and is deleted with the app.

f) Camera and photo library access. The app accesses the camera and your photos only for the features you trigger. No photo is saved on your device by the app without your action, and none is transmitted unless you request a description.

4. What JustSee does not do

• No sale, rental or commercial sharing of data.
• No advertising, no advertising trackers or SDKs, no profiling.
• No use of your images to train artificial-intelligence models.
• No collection of location or health data.

5. Recipients and processors

Your data passes through the following providers, strictly to deliver the service:

• Our servers (hosted in the European Union): request handling, quota and treat management.
• An artificial-intelligence infrastructure provider established in the United States, acting as a processor for description generation. It is not authorised to use your data for its own purposes or for training. Its identity can be obtained on request at the contact address given in section 1.
• Apple: in-app purchase processing, under Apple's privacy policy.

If you configure your own API key (Gemini, OpenAI, Claude, Mistral, Grok, OpenRouter) or a personal Ollama server, your images are sent directly to the provider you chose, under your own account and its terms; our servers never see them. In "Iko (local)" mode, processing happens entirely on your device, with no transmission at all.

6. Transfers outside the European Union

Description generation involves a transfer of data to a provider located in the United States, governed by the applicable compliance mechanisms (European Commission standard contractual clauses and/or the EU–US Data Privacy Framework). Transferred data is limited to the images and messages you voluntarily submit for description.

7. Retention periods

• Images and conversations: processed transiently to produce the description; they are not kept after the request has been handled. In the event of a technical incident, temporary diagnostic logs may be enabled on a one-off basis, then deleted within 30 days.
• Technical logs (metadata, no content): 12 months maximum.
• Installation identifier, balances and treat lots: lifetime of the service; the identifier is reset by deleting the app.
• Transaction records: 10 years (French accounting obligations).

8. Legal bases (GDPR)

• Performance of the contract (art. 6.1.b): providing descriptions, managing treats and purchases.
• Legitimate interest (art. 6.1.f): service security, abuse prevention, quotas.
• Legal obligation (art. 6.1.c): accounting retention of transactions.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability over your data. You can exercise them by writing to contact@ieyes.fr. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

10. Security

All communications are encrypted (HTTPS/TLS). The installation identifier is stored in the device's secure keychain. Access to our servers is restricted and logged.

11. Children

JustSee is not specifically directed at children under 15 and does not knowingly collect any data about them.

12. Changes

Any substantial change to this policy will be announced in the app before it takes effect.