Who we are
OptiCareApp is online management software for opticians, published by CareApp Group. For any question about your data: [email protected].
Two different roles
For account data (practitioners and team members), CareApp Group is the data controller.
For the data of clients that the shop enters in OptiCareApp, the shop is the data controller. CareApp Group acts as a processor: it processes this data only to provide the service, on the shop's instructions.
Data we collect
Account: first name, last name, email address, phone number and team role.
Shop: name, address, contact details and logo.
Data of clients entered by the shop: identity, contact details and health information (vision prescriptions, orders and invoices).
Support and contact: the messages you send us.
Technical data: sign-in logs and error reports, with no medical content.
How we use data
To provide and secure the service, manage accounts, subscriptions and billing, answer support requests and improve OptiCareApp.
We never sell data and never use it for advertising.
Hosting and providers
Supabase (database, authentication and files), servers located in the European Union (Ireland).
Vercel (application hosting), Cloudflare (network, security and cookie-free audience measurement), Resend (service emails) and Sentry (technical error tracking).
Some of these providers are based in the United States; transfers are covered by their contractual data protection commitments.
Retention
Data is kept while the shop's account is active.
When a shop is closed, its data is archived and then deleted. Subscription invoices are kept for the legally required period.
Security
Encrypted connections (HTTPS), protected passwords, each shop's data strictly separated from the others, and access limited according to each team member's role.
Cookies
OptiCareApp only uses cookies needed for it to work: sign-in session, language and display theme.
No advertising cookies or third-party trackers. Audience measurement sets no cookie, so no consent is requested.
Your rights
You can request access to, correction, deletion or portability of your data, or object to processing, by writing to [email protected].
Clients should first contact their shop, which is responsible for their data.
You can also contact the data protection authority of your country (for example the CNDP or the CNIL).
Changes
This policy may change. The date of the last update is shown at the top of this page.