Legal

Privacy Policy

DriftPass iOS App · Effective July 1, 2025 · Last updated July 26, 2026

DriftPass is a driving fitness screening tool, not a medical device or diagnostic instrument. Results are informational only and do not constitute a clinical diagnosis.

1. Who We Are

DriftPass is developed and operated by Oculometrix, Inc. ("Oculometrix," "we," "us," or "our"), a company building scalable digital tools for physiological and neurocognitive assessment.

Questions about this policy? Email privacy@oculometrix.com.

2. Data We Collect

DriftPass collects only what is necessary to deliver the screening and improve its accuracy:

  • Eye-movement data — gaze angles, nystagmus patterns, saccade metrics, and smooth-pursuit tracking derived from Apple's ARKit framework using the front-facing TrueDepth camera.
  • Reaction-time data — tap timing measured in response to on-screen stimuli.
  • Session recordings — short video clips of the face during the screening, captured on your device. Recordings may be uploaded to secure cloud storage to assist accuracy improvements. Camera permission is requested before any recording begins.
  • Coarse location — a single location fix, obtained only when you choose to request a ride through the Uber integration. Location is not tracked continuously or in the background.
  • Anonymous usage events — non-identifiable analytics (screen views, module completions, error codes) used to diagnose technical problems.

We do not collect your name, email address, phone number, or any government-issued identifier unless you voluntarily provide them.

3. How We Use Your Data

  • To compute and display your driving fitness screening result.
  • To improve screening accuracy using aggregated, de-identified session data.
  • To generate a ride-request deep link to the Uber app if you choose to flag yourself.
  • To diagnose technical failures and crashes.

We do not use your data for advertising, sell it to third parties, or share it with law enforcement without a valid legal process.

4. Camera and Face Data

DriftPass uses the TrueDepth camera solely to measure eye movements via Apple's ARKit framework. Raw face geometry data never leaves your device; only derived metrics (angles, velocities, timing) and optional video recordings are transmitted. Face geometry is not used for identification purposes.

Apple's own privacy policies govern on-device ARKit processing. See apple.com/privacy.

5. Data Storage and Security

Session data and recordings are stored in Supabase, a SOC 2 Type II compliant cloud platform with data encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is restricted to authorized Oculometrix personnel only.

You can request deletion of your session data at any time by contacting privacy@oculometrix.com.

6. Data Retention

Session recordings and raw metrics are retained for up to 24 months to support algorithm improvement, then permanently deleted. Aggregated, de-identified statistics may be retained indefinitely.

7. Third-Party Services

  • Apple ARKit — on-device face tracking; governed by Apple's privacy policy.
  • Supabase — cloud database and storage; see supabase.com/privacy.
  • Uber — if you tap "Request a Ride," DriftPass opens the Uber app via a deep link. Oculometrix does not share your data with Uber; only the pickup location you authorize is passed via the standard Uber deep-link scheme.

8. Children's Privacy

DriftPass is intended for adults aged 16 and older. We do not knowingly collect data from children under 13. If you believe a child has used the app and data was collected, contact privacy@oculometrix.com and we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion ("right to be forgotten").
  • Object to certain processing.
  • Data portability — receive your data in a machine-readable format.

To exercise any of these rights, email privacy@oculometrix.com with "Privacy Request" in the subject line. We will respond within 30 days.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date above. Material changes will be announced in the app.

Oculometrix, Inc.  ·  oculometrix.com  ·  privacy@oculometrix.com