All patient data — names, ages, scan records, images — is stored **locally on the device only**. No patient data is transmitted to CNRI servers, cloud services, or any third party. License validation communicates only the machine-generated license key and activation status; no patient identifiers are included.
The practitioner is responsible for ensuring that local data storage and any subsequent sharing of exported reports complies with applicable patient privacy laws (HIPAA, GDPR, Australian Privacy Act, etc.) in their jurisdiction.
Image Retention
Captured eye images are stored as files in the app’s local storage directory. Deleting a scan record from Scan History removes the database entry but does **not** automatically delete the image files from disk. To fully remove a patient’s data, the practitioner must also delete the associated image files from the device’s file system.
Intellectual Property
The pupil zone reference chart and clinical threshold data are based on Dr. Bryan K. Marcia’s 2004 CNRI Reference Charts. The herbal database is derived from CNRI knowledge base materials. The ONNX model (`cnri_model.onnx`) is proprietary to CNRI. All content is © 2024–2026 PupilMetrics Research. Unauthorized distribution, reverse engineering, or extraction of any embedded database or model is prohibited.
