Privacy Policy

Last updated: 28 October 2026

This policy covers CircuitLens, the website at circuitlens.app and the CircuitLens Android app (which displays the same website). It is published by ND INOVATION GROUPE (see section 8), the data controller.

1. Data collected

The calculators, simulations, pinouts, reference tables and quizzes work without an account and collect nothing about you. The data below only exists if you use the feature concerned.

• Account: email address, password (stored hashed with Argon2id, never in plain text), your plan and what you have purchased, and the language your app is set to, so the emails about your account (confirmation code, password reset) are written in it.
• Content: photos of electronic boards you upload for analysis, and the analysis results (detected components, schematics, sourcing references you confirmed).
• Purchases: on the website, payment is handled by Stripe on its own payment page; in the Android app, by Google Play. CircuitLens never sees or stores card details. It keeps only what the payment provider reports back: what was bought, whether a subscription is active, and the provider's purchase reference (a Stripe customer id, or a Google Play purchase token).
• AI usage: for each analysis, the number of AI tokens it used, to count your monthly quota and to know what the service costs to run.
• Technical: IP address, used only for rate limiting against abuse (login attempts, uploads) and not stored with your account.
• Country: the country you connect from, as reported by Cloudflare — the country only, not your IP address, region or city. It is kept with your account to prevent abuse, to apply the right taxes and prices, and to know in which countries the service is used. Legal basis: our legitimate interest. It is deleted with your account.
• Days of use: the dates (day only, no time, page or device) on which your signed-in account opened the app, to know how many accounts come back and improve the service. Legal basis: our legitimate interest. Deleted with your account.
• Device type and photo size: the family of operating system (Android, iOS, Windows, macOS, Linux, ChromeOS) and whether it is a phone, tablet or computer — never the device model or the full browser identifier — and the pixel size and sharpness of each analysed photo, to see which devices the app must support and to tell you when a photo is too small or blurry for a good result. Legal basis: our legitimate interest. Deleted with the photo or your account.
• Feedback: anything you write in Settings → Send feedback, with the page you were on and the build number. An email address only if you choose to type one.
• Audience measurement — only if you accept it in the consent window (Settings → Privacy): your visits (date, time spent, type of device, the site that sent you and, when the link you followed carries one, its campaign tag — for example utm_source=linkedin), your approximate location (country, region and city, as reported by Cloudflare — your IP address itself is not stored), and which tabs, tools and features you use (for example: an analysis run, a question asked about a board, an export). A random identifier kept on your device links your visits together. If you are signed in, this is linked to your account.
• How you heard about CircuitLens — only if you answer the optional question at signup: the one answer you pick (for example "Google search" or "A friend or colleague"), kept with your account to know which channels bring people to the app. Legal basis: your consent, given by answering; nothing is recorded if you leave it blank. Deleted with your account.
• What you will mainly use CircuitLens for — only if you answer the second optional question at signup: the one answer you pick (for example "Studies" or "Repairs, for my job"), kept with your account to know who the app serves and what to build next. Legal basis: your consent, given by answering; nothing is recorded if you leave it blank. Removed on request, and deleted with your account.
• News emails — only if you ask for them (box at signup, or Settings): we keep that you agreed and when, which weekly emails were sent to you (so none is sent twice), and the language your app is set to, so the email is written in it. Every email has a one-click unsubscribe link.
• Notifications — only if you turn them on (Settings → Notifications): the push address your browser creates for this device (a link to your browser's push service and two encryption keys), the topics you chose (a new Journal article, the daily challenge), the app's language, and your account if you are signed in. It is used for one thing: sending those notifications, at most one of each a day, each with a title and a link into the app. The one exception: when you answer the daily challenge, the app tells us that this device is done for the day, so you are not reminded about it that evening - only the date is kept, not your answer. Nothing else about what you do in the app is sent or kept for it.
• Photos used to improve detection — only if you tick the box under the photo before analysing it (or turn the option on in Settings): that photo and its analysis may be used to train and test the CircuitLens detection model. On the free plan, which includes 1 free analysis a week, turning this permission on adds 1 more free analysis every week; the photo of that extra analysis is always used this way, since that is what it is given for. Turning the permission off again stops every use of your photos for training and removes this week's extra analysis if you have not used it yet. During the launch offer (until 14 November 2026 inclusive, UTC) the free plan instead starts with 3 free analyses, then 1 a week, and this permission adds none: no photo is then used for training unless you tick its box. Paid plans do not depend on it.
• Usage counters: a daily count of how many times each tool was opened, and of searches that returned no result. For a search, the words you typed are kept only when they look like a part number or a value (one word of letters, digits and “- . /” with at least one digit, such as “lm317t” or “10k”); any other search, an email address, a name or a phone number for example, is only counted, without its text. These are aggregate totals — no account, no identifier, no IP address and no cookie is stored with them. Each day's counts of searches are deleted after 90 days.

Cookies and local storage. One cookie keeps you signed in. Your settings (theme, favorites, recent tools, quiz progress) are kept in your own browser's storage and never sent to us. No tracking or advertising cookie is used.

2. Purpose and legal basis

Data is used to provide the service: AI board analysis, sourcing lookups, your analysis history, your account, quotas and purchases. Photos and analyses may also be looked at by the CircuitLens team to check and correct the quality of the results; they are never published. With your consent (GDPR art. 6(1)(a)), and only with it: audience measurement, to understand which features are used and improve them; news emails about new features and updates; the notifications you turned on; the optional answers you give at signup; and the use of the photos you selected to improve the detection model. Each consent can be withdrawn at any time. The answers you give at signup are removed when you write to [email protected]; every other consent is withdrawn in the app, as easily as it was given. The legal basis is the performance of the contract you enter by creating an account or buying something (GDPR art. 6(1)(b)), and our legitimate interest in protecting the service from abuse for rate limiting, in knowing the country of each account and on which days accounts come back (art. 6(1)(f)). Invoices and payment records are kept to meet accounting obligations (art. 6(1)(c)).

3. Sharing with third parties

• Anthropic (AI provider, United States): the photos you submit for analysis and the related component information, to perform the analysis. Anthropic does not use data sent through its commercial API to train its models.
• Google (Gemini API, AI provider, United States): from 15 November 2026, on the free plan and the AI Starter plan, the photo you submit and close-ups of its parts, to name the parts on it. CircuitLens uses the paid Gemini API, under which Google does not use prompts or responses to improve its products; Google keeps them for a limited period, only to detect and prevent violations of its policies. If this step fails, the photo and close-ups of its parts go to Anthropic instead.
• Mouser Electronics, LCSC/JLCPCB: a component reference, only when you ask to look one up.
• Stripe (website purchases) and Google Play (Android app purchases): the payment itself, on their own payment pages, under their own privacy policies.
• OVH (OVH SAS, Roubaix, France): hosts the server that runs CircuitLens, in a data centre in France. Everything listed in section 1 that CircuitLens stores, your account, photos and analyses included, is stored there. OVH acts on our instructions only, as our processor (GDPR art. 28).
• Our backup provider ([BACKUP PROVIDER TO BE NAMED], European Union): stores the backup copies described in section 4. They are encrypted on our server (restic, AES-256) before they leave it, with a key the provider does not have: it only ever holds encrypted data.
• Cloudflare: carries the connection between your device and our server (HTTPS), as a technical intermediary.
• Your browser's push service (Google for Chrome and the Android app, Mozilla for Firefox, Microsoft for Edge, Apple for Safari): only if you turn notifications on, to deliver them. Each notification is encrypted for your device, so the push service carries it without being able to read it.

Transfers outside the European Union (Anthropic, Stripe, Google, Cloudflare, and your browser's push service if you turn notifications on) rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. OVH and our backup provider keep the data in the European Union. The fonts, stylesheets and application code are all served from circuitlens.app, so opening a page contacts no one else.

Advertising. CircuitLens shows no advertising and requests no ad from anyone.

Your data is not sold, to anyone, for any purpose.

4. Retention

• Your account, photos and analyses are kept for as long as the account exists. You can delete a single analysis at any time.
• Deleting your account (Account → Delete my account) erases the account, its photos, its analyses and its notification subscriptions immediately. Backups are rotated, so deleted data disappears from them within 8 weeks: copies on our server are kept for at most 8 weeks, and the encrypted copies at our backup provider for up to about 5 weeks (the last 4 runs, 7 daily and 4 weekly copies). Photos of deleted accounts stay at most 30 days in a quarantine on our server, and are never sent to the backup provider.
• Payment records required by accounting law are kept for the legal period (10 years in France), by us and by the payment provider.
• Feedback messages are kept only as long as needed to deal with them.
• Audience-measurement data is kept for 13 months, then deleted automatically. Withdrawing your consent stops it at once and unlinks past visits from your account.
• News emails stop as soon as you unsubscribe (a link in every email, or Settings).
• Notifications stop as soon as you turn them off (Settings → Notifications, which also deletes this device's push address from our server at once) or block them in your browser or phone settings (the address is then deleted the next time a notification is due). They are also deleted with your account.
• A photo you allowed for training stays in the training set until you withdraw the permission or delete the photo. A model already trained cannot “forget” one photo, but it is left out of every later training.

5. Your rights

You can access, correct, delete or export your data, object to or restrict its processing, and withdraw any consent you gave. Deleting your account is available directly in the app; for anything else, write to [email protected]. We answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority of your own country.

CircuitLens is not intended for children under 15, and does not knowingly collect their data.

6. Security

All traffic is encrypted (HTTPS). Passwords are hashed with Argon2id, sessions use signed cookies, login and upload attempts are rate limited, and board photos are only served to the account that uploaded them. The database, the photos and the Journal images are backed up every 6 hours, and the copies that leave the server are encrypted first.

7. Changes

If this policy changes in a way that matters, the new version will be shown in the app before it applies. The date at the top always shows the current version.

8. Contact

ND INOVATION GROUPE, 60 rue François Ier, 75008 Paris, France — [email protected]. See the legal notice for the full publisher details.