Privacy Policy

Effective date: 12 March 2026

Eara ("we", "our", "us") operates the Eara mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App.

1. Information We Collect

Account Information: When you create an account, we collect your email address, name, and authentication credentials. If you sign in via Apple or Google, we receive the information you authorise those services to share.

Health & Tinnitus Data: During onboarding and periodic assessments, we collect information about your tinnitus characteristics (ear affected, tone type, pitch, pattern) and Tinnitus Handicap Inventory (THI) assessment scores. This data is used solely to personalise your sound therapy experience.

Session Data: We record session activity including duration, sound preset used, session type, daily severity ratings, and completion status. This data powers your progress tracking and protocol guidance.

Device Information: When you pair Bluetooth earbuds, we collect the device name to verify compatibility with the Eara system. We do not collect MAC addresses or other hardware identifiers.

Subscription Data: We store your subscription status, start date, and expiry date to manage access to the App's features.

2. How We Use Your Information

To provide and personalise your sound therapy sessions
To track your progress through the 90-day protocol
To send you session reminders and milestone notifications (with your permission)
To verify your subscription status and manage access
To verify Bluetooth device compatibility
To improve the App's features and user experience

3. Data Storage & Security

Your data is stored securely using Google Firebase (Firestore, Authentication, and Cloud Storage), hosted within Google Cloud infrastructure. All data is transmitted over encrypted HTTPS connections. Access to your personal data is restricted to your authenticated account only, enforced by Firestore security rules.

Audio files for guided sessions are stored in Firebase Cloud Storage and are accessible only to authenticated users.

4. Third-Party Services

We use the following third-party services:

Google Firebase: Authentication, data storage, cloud functions, and file storage. Firebase Privacy Policy
Expo (Expo Application Services): App build and update infrastructure. Expo Privacy Policy

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymised, aggregated data may be retained for analytical purposes.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent for notifications at any time via your device settings

To exercise any of these rights, contact us at privacy@tryeara.com.

7. Children's Privacy

The App is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Medical Disclaimer

Eara is a wellness and sound therapy application. It is not a medical device and does not provide medical advice, diagnosis, or treatment. The App is designed to complement, not replace, professional medical care. If you have concerns about your hearing or tinnitus, consult a qualified healthcare professional.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.