Privacy Policy

01Information We Collect

Personal Information

We collect information that identifies you personally, such as:

• Name, email address, phone number, postal address
• Account username and password
• Billing information when purchasing or subscribing
• VR platform identifiers and usage credentials
• Communication preferences

This information may be collected when you:

• Register for an account
• Subscribe to newsletters
• Contact support
• Participate in events or promotions

Technical and Usage Data

When you interact with our Services, we automatically collect:

• Device and system information (e.g., hardware identifiers, OS type/version)
• IP address and geolocation approximations
• VR headset usage patterns, engagement metrics
• Session data, clicks, and feature interactions

We collect this data using:

• Server logs
• Cookies and tracking technologies
• SDKs embedded in applications

Cookies and Tracking Technologies

We use cookies and similar tracking tools to:

• Enable essential platform functionality
• Analyze site usage patterns
• Personalize user experience

Measurement and advertising cookies, including Meta's, are set when you visit. You can block or clear them at any time in your browser's settings. Essential cookies, which keep you signed in, are always active.

02How Your Information Is Used

We use Personal Data to:

• Provide, operate, and improve our Services
• Authenticate users and manage accounts
• Communicate updates, support responses, and marketing
• Personalize content and recommend features
• Detect and prevent fraud, misuse, and security issues
• Process payments and transactions

We do not sell your Personal Data to third parties as defined under applicable privacy laws.

03Disclosure of Your Information

Service Providers

We may disclose data to trusted vendors and partners who perform functions on our behalf (e.g., cloud hosting, analytics, payment processors).

Legal Compliance

We may share information to:

• Comply with legal processes or requests from government authorities
• Protect rights, safety, or property of Varos Limited and its users
• Enforce our Terms of Use

Business Transfers

In the event of acquisition, merger, or sale of assets, data may be transferred as part of the transaction, subject to this Privacy Policy.

04Security Measures

We implement industry-standard technical, administrative, and physical safeguards to protect data against unauthorized access, loss, or misuse. However, no system is completely infallible.

05Your Rights and Choices

Depending on your jurisdiction:

• You may access, correct, update, or delete your Personal Data
• You can object to or restrict certain data processing
• You may withdraw consent where processing relies on consent

To exercise these rights, contact [email protected] or use the account settings in the platform interface.

06Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect Personal Data from children without verifiable parental consent.

07The SOVAR Application

SOVAR is our mobile application for viewing and sharing live ultrasound. Because it handles clinical imagery, this section sets out exactly what does and does not reach us.

Scan images and video never reach us

When SOVAR captures from a connected capture device, or shares a scan with others in the room, the video travels directly between devices on your own local network. It is not uploaded to our servers, not relayed through us, and not stored by us. We do not receive it, and we could not produce it if asked. Ultrasound imagery may constitute health information under the law of your country; no such information is transmitted to Varos by this application.

Audio

When Doppler sound is enabled, the application captures audio from the capture device and includes it in that same local stream. Android routes a USB audio input through the device's recording permission, so SOVAR asks for microphone access for this, and uses it only while capturing from a card that carries sound. It is treated exactly as the video is: local only, never sent to us.

Camera

Android classifies USB video capture devices — including the capture card SOVAR reads the ultrasound from — as cameras, and will not let an application use one until camera permission has been granted. SOVAR therefore asks for camera access before connecting to the capture card. It never opens your phone's own camera.

Device identifier

A random identifier is generated the first time the application runs and is stored on the device. It lets our server recognise that repeated sessions come from the same phone, so that stopping and restarting a scan within a session window does not consume a second session from your subscription. It is not derived from any hardware serial number, it is not shared with anyone, and it deliberately survives signing out so that signing out and back in does not cost you a session. Uninstalling the application removes it.

Local network addresses

Browsers only release the motion sensors a headset view depends on to pages served over HTTPS. So that viewers can join from an ordinary browser with nothing to install, the application asks our server to publish a DNS record naming the sharing device's private network address — for example 192-168-43-1.local.varos.tech.

These names are shared constants rather than personal to you: the same name means the same private address for every user, and they are reused rather than created per person. They resolve only to private addresses, which are unreachable from the internet, and only private addresses are accepted — a public address is rejected rather than published. What such a record shows is that some SOVAR device has at some point used that private address. It does not identify you, your clinic, your location, or your patients.

Notifications

Used only to show that a share is running and to alert you if the scan stops. We do not send marketing through them.

Deleting your data

You may request deletion of your account and the personal data associated with it at [email protected]. Scans are not included because we never held them.

08International Data Transfers

Where applicable, we may transfer data across borders. We adopt appropriate protections in line with relevant data protection laws.

09Changes to This Policy

We may update this policy from time to time. The effective date at the top reflects the last revision.