Consumer health data · Effective November 3, 2026

Consumer health data privacy policy.

This policy covers consumer health data under Washington's My Health My Data Act: what our camera tools and the pre-visit learn about your eyes, lids and lashes. We use it to give you the reading or pre-visit you ask for, keep it beyond that only if you tick the box to keep it, never sell it and never use it for marketing.

What we collect

Close-ups of your eyes, lids, lashes and brows that you take in See what we see or the pre-visit, and what our lash AI reads in them, including signs such as redness, puffiness or flaking along the lash line and gaps where lashes look to be missing.

Your answers about your eyes: itching, soreness or a past reaction to lash glue, tint or hair dye, and whether you wear contact lenses.

What Desiree notes when she checks a pre-visit or kept close-ups, such as whether she sees the same sign or would refer you to an eye doctor.

Why we collect it and how we use it

To show you what our lash AI sees and which services and care fit. For this reading your close-ups are sent to our lash AI and the result comes back to your browser tab; nothing is kept on our side unless you choose.

To prepare Desiree for your appointment, if you send a pre-visit. It is deleted 30 days after your appointment, or 60 days after you send it if you didn't give an appointment day.

To improve our lash AI, only if you tick the box to keep your close-ups, until you ask us to delete them.

We never use it for advertising or marketing, never sell it, and never use it to decide anything about you beyond suggesting services and care.

Where it comes from

From you (your close-ups and answers), from our lash AI's reading of them, and from Desiree's notes.

Who handles it for us

Only processors that handle it on our behalf under contract: Google Cloud, which runs our lash AI (Vertex AI) and stores pre-visits and kept close-ups; Vercel, which hosts this website; and PurviewX, which builds and runs this website and our lash AI.

We share it with no other company for its own use, and we have no affiliates. Desiree's text alert for a new pre-visit names the service and day, never anything about you or your eyes.

Your rights and how to use them

You can ask us to confirm whether we hold or have shared your consumer health data, to see it along with the list of everyone who handled it, to delete it, and to withdraw your consent to keeping it.

You can act yourself at any time: untick the box on the last screen of See what we see, delete a pre-visit from its private link, or tell us your reference code. Kept close-ups and pre-visits are deleted at once and cannot be recovered.

Or email centraloasispdx@gmail.com or call or text (971) 205‑2402. We answer within 45 days and never charge for it.

If we decline a request, reply to our answer to appeal; we respond within 45 days. If you are not satisfied with the result, you can contact the Washington State Attorney General at atg.wa.gov.

A request about your health data?