UK privacy notice
Last updated: 13 April 2026
This Policy describes how Swiftbee Ltd processes personal data in connection with EyeRevival. It is written to reflect the current EyeRevival service, including local browser storage, optional face-image uploads, contact messages, and newsletter signups.
1. Who we are
For the purposes of applicable data protection law, including the UK GDPR and the Data Protection Act 2018, Swiftbee Ltd is the controller of personal data processed through EyeRevival.
If you have privacy questions, contact support@swiftbee.co.uk.
2. What we collect
Information stored in your browser
- answers you enter in the EyeRevival onboarding flow;
- whether you completed onboarding;
- your selected rating, where given;
- your preferred site language.
This information is currently stored locally in your browser so the site can remember your progress between visits.
Image or scan selections
Depending on the feature you use, image or scan selections may either stay on your device or be uploaded to your account so we can provide personalized analysis, recommendations, and related service features.
Information you send directly to us
- your email address when you sign up to the newsletter;
- the subject and message you send through the contact form;
- the page URL and selected language sent with support and newsletter requests.
Technical and server-side information
- basic request data, error data, and service logs used to keep the site working securely;
- records needed to manage newsletter subscriptions and support handling.
3. Face data and uploaded images
EyeRevival allows users to optionally upload photos of their face, for example images of the eye area, to receive personalized analysis and treatment recommendations.
What we collect
We collect user-uploaded facial images, including photos that show facial features such as the eye area.
How we use this data
These images are used solely to generate personalized insights, recommendations, and treatment plans within the EyeRevival app. We do not use this data for advertising, profiling, or unrelated purposes.
Storage
Uploaded images are securely stored in Firebase Storage and are associated only with the user's account.
Sharing
We do not sell face data. We only share it with trusted service providers strictly for processing purposes, such as cloud storage providers, to store and process this data on our behalf.
Third-party processing (AI services)
We share user-uploaded facial images with OpenAI solely so OpenAI can analyze image features and help us generate personalized recommendations.
OpenAI receives image data solely for processing purposes and not to identify users. We do not use face data for biometric identification or authentication.
Images are not used to train AI models.
We ensure that any third-party processors handle data securely and in accordance with applicable privacy standards.
Retention
Face data is retained only for as long as necessary to provide the service. Users may request deletion of their images at any time by deleting their account or contacting support, and we do not retain face data indefinitely.
User control
Users are not required to upload images to use the app. Uploading face data is entirely optional.
Security
We take reasonable technical and organizational measures to protect uploaded images and personal data.
4. How we use personal data
We use personal data to:
- remember your local progress and preferences in the browser;
- show the EyeRevival onboarding and treatment-plan experience in a more consistent way;
- respond to support messages and follow up where needed;
- manage newsletter subscriptions;
- operate, secure, debug, and improve the Service;
- keep appropriate records and comply with legal obligations.
5. Lawful bases
We generally rely on one or more of these lawful bases under the UK GDPR:
- Legitimate interests: to operate, secure, support, and improve EyeRevival;
- Consent: where you voluntarily sign up to the newsletter or choose optional browser storage behaviours;
- Contract: where processing is needed to provide a feature you actively request;
- Legal obligation: where we need to keep records or respond to lawful requests.
7. International transfers
Some service providers may process personal data outside the UK. Where that happens, we aim to use appropriate safeguards recognised under data protection law, such as adequacy decisions, contractual protections, or provider frameworks designed for international transfers.
8. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Policy.
- browser-stored onboarding and preference data remain on your device until you clear browser storage or overwrite them;
- uploaded face images may be kept until you delete them, delete your account, request deletion, or we no longer need them to provide the service;
- support messages may be kept for customer support, record-keeping, and service protection;
- newsletter records may be kept until you unsubscribe or until we no longer need to maintain the list;
- limited technical logs may be kept for security, debugging, and operational purposes.
9. Your rights
Depending on your location and the circumstances, you may have the right to request access to your personal data, correction, deletion, restriction, objection, or portability.
You can also ask us to stop sending newsletters at any time by using the unsubscribe link in the email or by contacting support@swiftbee.co.uk.
If you want to remove onboarding answers or preference data stored locally in your browser, you can clear your browser storage for EyeRevival.
11. Security
We take reasonable steps to protect personal data, but no website or internet transmission can be guaranteed to be completely secure. You should avoid sending unnecessary sensitive information through the contact form.
12. Contact and complaints
If you have a privacy question or want to exercise a data protection right, email support@swiftbee.co.uk.
If you are in the UK and believe your personal data has been handled improperly, you may also complain to the Information Commissioner's Office (ICO).