Privacy Policy

Data Controller

ÖMER FARUK COŞKUN, trading as ConectLens, is the data controller for LensLink. This policy explains which personal data is processed, for what purposes, with whom it may be shared, the legal basis for processing, and your rights under applicable law. Contact: [email protected].

In Short

• —LensLink needs no account, and we never ask for your name, email address or phone number.
• —Your camera video and microphone audio travel only over your local network to your own OBS or Streamlabs. They never reach our servers.
• —Usage analytics are optional and start only after your choice. You can change it at any time in Settings → Privacy.
• —Purchases are handled by Apple or Google and validated by RevenueCat so that LensLink Pro can be unlocked.
• —We do not sell your data, show ads, or track you across other companies’ apps or websites.

What We Never Collect

Regardless of any setting, LensLink does not collect:

• —Your camera video or microphone audio, and no recordings are saved.
• —Your stream link (the address that contains your private key), which stays on your devices.
• —Your contacts, photos or files.
• —Your precise location (the app does not request location access).
• —Your advertising identifier (the app does not use it and does not show the tracking prompt).
• —Screen recordings or screenshots of what you do in the app (session replay is switched off).

Camera, Microphone & Your Video

LensLink uses your camera and, if you choose to stream sound, your microphone, only to capture the video and audio you send to OBS Studio or Streamlabs. The stream is delivered directly from your device to the computer running OBS over your local network (Wi-Fi, or a USB connection through Personal Hotspot / USB tethering) using WebRTC. It is not uploaded to, relayed through, or stored on any server operated by us, and the app does not save recordings.

Local Network Access

LensLink asks for local network access so it can advertise itself and be discovered by OBS on your network (Bonjour / mDNS) and serve the stream to the computer you pair. This access is used only for that purpose.

Data Stored on Your Device

The app keeps a few items locally on your device to work as expected:

• —Your settings and language choice
• —Your saved stream presets and the last stream address
• —A pairing token used to reconnect to your computer
• —Your privacy choice, the progress of the onboarding and in-app tour, and, if you allowed analytics, a random identifier

This data stays on your device and is removed when you uninstall the app. If you allowed analytics, the identifier is also sent to the analytics providers described below.

Optional Usage Analytics

LensLink sends usage data to Google Analytics for Firebase and PostHog so we can find problems and improve the app. Analytics start only after your choice: you tap Allow (in the European Economic Area, the United Kingdom, Switzerland, Türkiye and wherever we cannot tell the region), or, elsewhere, you continue with the pre-ticked box. You can untick it or change your choice at any time in Settings → Privacy. Nothing is sent before your choice: until then, a small number of events wait in the app’s memory only (they are never saved to storage) and they are discarded if you decline. This data is:

• —Random identifiers: IDs generated for your installation (a PostHog ID and a Google app instance ID), not your name, email or phone number. They are pseudonymous rather than anonymous, because they single out one installation over time. They reset when you turn analytics off.
• —Screens and steps you use, such as onboarding steps, the in-app tour and which screens you open, and how long you stay on them.
• —How you use streaming, such as the chosen resolution, switching cameras or the torch, connecting to OBS (and how long it took), reconnecting, and how long a session lasts.
• —Your app version, app language, platform and whether Pro is active.
• —Your device and operating system type, such as device model and OS version, and standard app events such as first open, app start and app update. PostHog also records standard properties: time zone, screen size, device manufacturer and name, whether the device is a simulator, and a session ID (not network type or carrier).
• —On iPhone and iPad, the identifier for vendors (IDFV). Google Analytics for Firebase uses it only if you allow analytics. RevenueCat’s purchase SDK also sends it with purchase requests, whether or not you allow analytics. It is not reset when you turn analytics off and it is not used for advertising.
• —Purchase-flow events sent by the app, such as viewing the paywall or starting, completing or restoring a purchase. These carry no prices or payment details. Google Analytics for Firebase also records its own standard in-app purchase event when a purchase completes (on Android at least), which can include the product ID and name, price, value and currency. We never receive your payment details.
• —Rating-prompt events: whether and when a request for an App Store or Google Play rating was shown or suppressed, together with how long ago you installed the app and how many streaming sessions you have completed.
• —Experiment data: to try out different onboarding or rating-prompt timings, the app asks PostHog which variant applies to your installation and records the variant you were given and the week you installed the app. These tests only change how onboarding or prompts are presented.
• —Error and permission outcomes, such as that a stream failed to start or that camera access was granted or denied, without any message text.
• —Your IP address, which PostHog and Google receive whenever data is sent, as with any internet request. The app asks PostHog not to derive your country or city from it. PostHog still receives the IP address with each request and stores it with the event; we do not use it to locate you. Google Analytics derives approximate location, such as country or region, from it and, according to Google, does not log or store IP addresses. We never collect your precise location.

Events follow a fixed list defined in the app. They never contain your stream link, video, audio, email address or any text you type, and no session recordings are made. The app turns off Google’s ad-personalization signals and does not read or send an advertising identifier, and we do not use analytics data for advertising.

If you allowed analytics, the PostHog ID, the Google app instance ID and the onboarding variant and flow version you were assigned are attached to your RevenueCat customer record, so that purchases can be matched with product usage. When you withdraw, the app asks RevenueCat to remove them (see “How We Ask for Your Choice”). We do not use RevenueCat’s integrations that forward purchase events to PostHog or Google, and we will update this policy before we ever do. We use this information only to understand how the app is used, fix problems and improve LensLink, never for advertising.

How We Ask for Your Choice

• —European Economic Area, United Kingdom, Switzerland and Türkiye: we ask for your consent with a pop-up at first launch, with “Allow” and “No thanks” offered equally. Analytics stay off unless you tap Allow. We decide this from the region of your device settings, which may differ from where you live; if we cannot determine it, we apply this stricter rule. You can always switch analytics off in Settings → Privacy.
• —Everywhere else: the first-launch screen shows a clearly labelled checkbox to share usage data. It is ticked by default, and you can untick it before you continue to opt out. If you skip that step instead of continuing, analytics stay off.
• —Any time: Settings → Privacy → Usage Analytics lets you turn analytics on or off. If you used LensLink before this version, analytics stay off until you switch them on there.

Withdrawing your choice. Turning analytics off stops all further collection immediately, resets your analytics identifiers on your device and asks RevenueCat to remove them (and the onboarding variant) from your customer record; that request is sent when the app is next online. Withdrawal does not affect anything done before it, and it does not delete data already received; to have that data deleted, make a request as described in “Your Rights and How to Use Them”.

Service Providers and Their Roles

We share data only with the following providers, and with public authorities where the law requires it. For analytics and purchase validation, the providers below act as our processors (service providers): they process data on our behalf, under their data processing terms, for the stated purpose.

• —Google Analytics for Firebase (Google LLC): usage analytics, only if you allow analytics. Details are in “Analytics Providers in Detail”. See Firebase privacy information and Google’s privacy policy.
• —PostHog (PostHog Inc., US cloud): usage analytics and experiments, only if you allow analytics. Details are in “Analytics Providers in Detail”. See PostHog’s privacy policy.
• —RevenueCat: validates purchases and manages your Pro entitlement. It receives a random app user identifier, your purchase and subscription status and technical information such as your IP address and, on iPhone and iPad, the identifier for vendors, whether or not you allow analytics, because this is needed to provide Pro. It also receives your storefront country and app, OS and locale details in request headers. If you allowed analytics, it also holds the analytics identifiers and the onboarding variant described above. See RevenueCat’s privacy policy.
• —Apple (App Store) and Google (Google Play): process payments and subscriptions under their own terms and act as independent controllers of your payment and account data. We never see or store your payment details.
• —Cloudflare: hosts this website and processes technical request data to deliver and secure it.
• —Supabase: our database provider, which stores newsletter sign-ups (email address and language) from this website.
• —Google Fonts (Google): delivers the web fonts of this website, so Google receives your IP address and browser details when a page loads.

We do not sell your personal data. LensLink uses no advertising, ad-attribution or affiliate services.

Analytics Providers in Detail

Both analytics providers are used only if you allow analytics, and neither is used for advertising. This is how each one works.

Google Analytics for Firebase (Google LLC)

• —Purpose: understand which screens and steps are used, find problems and improve the app.
• —Data: the events and values described in “Optional Usage Analytics”, plus the standard events and device details that Google Analytics for Firebase records itself, such as first open, session start, app update, in-app purchase, device model, OS version, app version and language, and a random app instance ID.
• —Legal basis: based on the region setting of your device: consent where the pop-up is shown, legitimate interest where the pre-ticked choice is shown, and in both cases you can opt out at any time (see “Legal Basis”).
• —Our settings: collection is switched off when the app starts and is turned on only after you allow analytics. The app turns off Google’s ad-personalization signals and does not read or send an advertising identifier, and we do not use analytics data for advertising.
• —Retention: no longer than 14 months in Google Analytics.
• —Location and transfers: Google processes data on servers in several countries, including the United States (see “International Transfers”).
• —Your control and deletion: turn analytics off in Settings → Privacy at any time, which stops collection and resets the app instance ID. To have stored data deleted, make a request as described in “Your Rights and How to Use Them”.

PostHog (PostHog Inc., US cloud)

• —Purpose: understand funnels such as onboarding and the purchase flow, run the optional experiments described above and find problems.
• —Data: the same events and values, a random PostHog ID kept on your device, device, OS, app version and language details, and your experiment variant. PostHog receives your IP address with each request and stores it with the event; the app asks PostHog not to derive your country or city from it, and we do not use the IP address to locate you. Session replay and automatic capture of taps or text are off. PostHog also records its standard properties (OS, device model, app version, locale, time zone, screen size, device manufacturer and name, whether the device is a simulator, and a session ID) and an event when a feature flag is evaluated for you.
• —Legal basis: based on the region setting of your device: consent where the pop-up is shown, legitimate interest where the pre-ticked choice is shown, and in both cases you can opt out at any time (see “Legal Basis”).
• —Our settings: the PostHog tools are not even started until you allow analytics, so nothing is requested from or sent to PostHog before then. Data goes to PostHog’s US cloud.
• —Retention: for the period set by our PostHog plan, and we can delete data on request.
• —Location and transfers: the United States (see “International Transfers”).
• —Your control and deletion: turn analytics off in Settings → Privacy at any time, which stops collection and resets the PostHog ID. To have stored data deleted, make a request as described in “Your Rights and How to Use Them”.

The PostHog ID and the Google app instance ID are random and reset when you turn analytics off (the vendor identifier on iPhone and iPad is not reset and is also held by RevenueCat), so we can find your analytics records only through identifiers that we can match to you, for example those attached to your RevenueCat customer record while analytics were on. Where we cannot identify you from the data we hold, we cannot act on a request for it, but we will tell you so.

Purchases (LensLink Pro)

Subscriptions and the lifetime purchase are processed by Apple or Google. To validate a purchase and unlock LensLink Pro on your devices, the app communicates with RevenueCat, which processes purchase data for us as described above. See our Terms of Use for how subscriptions work.

Legal Basis

• —Usage analytics: this depends on the region setting of your device, which may differ from where you live. Where the pop-up is shown (the EEA, the United Kingdom, Switzerland, Türkiye and wherever the region is unknown) we rely on your consent (GDPR / UK GDPR Article 6(1)(a), the ePrivacy rules and, for Türkiye, explicit consent under KVKK). Elsewhere, where the pre-ticked choice is shown and the law allows an opt-out model, we rely on our legitimate interest in improving the app. In both cases you can opt out at any time in Settings → Privacy.
• —Purchases and Pro access: performance of our contract with you (providing what you bought).
• —Security, fraud prevention and legal obligations: our legitimate interests and legal duties.

You can withdraw your consent at any time, as described above, without any effect on the app’s core features. Providing analytics data is never required to use LensLink; purchases need the RevenueCat identifier. We do not use automated decision-making or profiling that has legal or similarly significant effects on you.

Retention

Data stored on your device stays there until you remove it or uninstall the app. Analytics data is kept only as long as needed for the purposes above: Google Analytics keeps it for no longer than 14 months, and PostHog keeps it for the period set by our PostHog plan, and we can delete data on request. RevenueCat keeps purchase records for as long as we keep the customer record and deletes them when we instruct it to, subject to any legal retention it must apply, and Apple and Google keep payment records under their own policies. On a valid deletion request we delete the data we can match to you.

International Transfers

PostHog (US cloud), Google and RevenueCat process data outside your country, including in the United States. For people in the EEA, the United Kingdom and Switzerland we rely on the mechanisms those laws recognise, such as an adequacy decision (for example the EU–US Data Privacy Framework) or standard contractual clauses (with the UK and Swiss addenda where they apply). Analytics data goes to these providers only if you allow analytics, and nothing is sent before your choice. Where the pop-up is shown (including for a Turkish region setting), it states that your data goes to providers abroad, including the United States, and your tap on Allow is your explicit consent to that transfer. Transfers abroad under KVKK Article 9 (as amended by Law No. 7499) rely on an adequacy decision or appropriate safeguards where available and otherwise on your informed explicit consent for the specific transfer. Supabase and Cloudflare may also process website data outside your country. Contact us for details.

Your Rights and How to Use Them

Depending on where you live (GDPR, UK GDPR, Swiss FADP, Turkish KVKK Article 11 and similar laws) you have the right to:

• —Find out whether your personal data is processed and obtain a copy of it (access).
• —Have inaccurate or incomplete data corrected.
• —Have your data deleted (erasure).
• —Restrict or object to processing, and receive your data in a portable form where applicable.
• —Withdraw your consent at any time, without affecting earlier processing.
• —Learn which third parties your data was transferred to, in your country or abroad, and claim compensation for damage from unlawful processing where your law provides for it.
• —Complain to your data protection authority (for example your national authority in the EEA, the ICO in the UK, the FDPIC in Switzerland, or the KVKK Board in Türkiye).

How to exercise them: email [email protected] with the subject “Privacy request”, say what you want (access, deletion, and so on), and include your device model, operating system version, app version and roughly when you used the app, plus, if you made a purchase, the Apple or Google order number. LensLink holds no name or email for you, so this information is how we find your records. We may ask you to confirm that you control the device. We reply within 30 days.

Deletion requests: after we confirm your request, we delete the data we can match from our analytics providers (PostHog and Google Analytics for Firebase) and from RevenueCat, and then confirm by email. Because the PostHog ID and the Google app instance ID are random and reset when you turn analytics off (the vendor identifier on iPhone and iPad is not reset and is also held by RevenueCat), we can find analytics records only through identifiers we can match to you, for example those attached to your RevenueCat customer record while analytics were on; if we cannot identify you from the data we hold, we will tell you. Deleting data at RevenueCat does not cancel a subscription, which you must cancel with Apple or Google. We cannot delete payment records that Apple or Google keep under their own policies. Uninstalling the app removes the data stored on your device.

Children

LensLink is not directed to children under 13, or under 16 where your country sets that higher age for digital consent, and we do not knowingly collect their personal data. If you believe a child has provided data, email us and we will delete it.

Website

This website does not use advertising cookies or analytics scripts of its own. It is served through Cloudflare, which processes technical request data (such as your IP address) to deliver and protect the site. Its web fonts are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so Google receives your IP address and browser details when a page loads. The site saves your language choice in your browser. The footer has an optional newsletter form: if you submit your email address, we store it with your language at our database provider Supabase and use it only to send you ConectLens updates; you can ask us to remove it at any time at [email protected]. This section applies to the website only, not to the app.

Changes, Effective Date and Version History

We update this policy when our practices change. The version and effective date are at the top of this page. If a change affects how we use data for which you gave consent, we ask for your choice again in the app. Continuing to use LensLink is not consent to analytics.

• —Version 2.0, October 20, 2026: adds optional usage analytics (Google Analytics for Firebase and PostHog) with details for each provider, the consent choice, experiments, legal bases, retention, international transfers and how to exercise your rights.
• —Version 1.0, September 20, 2026: first version, for an app without analytics.

Contact

For questions about this policy or to exercise your rights, contact us at [email protected].