Privacy policy


Effective July 7, 2026

Your privacy matters. This Privacy Policy explains how Earare collects, uses, shares, and protects your personal information when you visit earare.com, purchase our products, use the Earare mobile application ("the App"), or otherwise interact with us. We wrote it in plain English wherever we could, and we back it up with the technical and legal safeguards required by GDPR, UK GDPR, CCPA/CPRA, and other applicable laws.

By using earare.com or the EarVision App, you agree to the practices described in this Policy.

1) Who We Are

Data Controller:

Brand Name: Earare
8729 Broadway,  
La Mesa, CA 91941,
United States
Email: hello@earare.com

Earare is the "data controller" of your personal information under the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, and the "business" under the California Consumer Privacy Act (CCPA).

2) Information We Collect

We collect information in four ways: what you give us, what we collect automatically, what the EarVision App collects with your permission, and what we receive from trusted third parties.

2.1 Information you provide directly

  • Contact & account details: name, email, phone number, shipping and billing addresses, account username and password.
  • Order information: products purchased, order value, currency, delivery preferences.
  • Payment information: processed directly by our payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay). Earare does not store your full card number, CVV, or bank credentials on our systems.
  • Customer support communications: the content of emails, chats, or forms you send to us, including any photos or videos you attach for warranty or refund requests.
  • Marketing preferences: your opt-ins and opt-outs for email, SMS, and push notifications.
  • Reviews & user-generated content: product reviews, testimonials, and any content you submit through the EarVision App community feature.

2.2 Information we collect automatically

  • Device & connection data: IP address, device type, operating system, browser type, language, time zone, referring URL, and unique device identifiers.
  • Usage data: pages viewed, products browsed, items added to cart, session duration, click paths, and interaction events on earare.com and in the App.
  • Cookies & similar technologies: see Section 8 below for the full list of categories.

2.3 Information collected through the EarVision App

The EarVision App may collect the following only with your explicit device-level permission:

  • Camera stream from the Earare device: video and photo captures produced by the Earare hardware while paired with your phone. Captures are stored locally on your device by default. You may choose to save them to your Earare account or share them within the App community.
  • Wi-Fi & Local Network access: required to connect to the Earare device (which broadcasts a local Wi-Fi signal). No network traffic is routed through Earare servers.
  • Push notification tokens: to send you optional alerts (order updates, community activity, feature releases). You can disable these at any time in device settings.
  • Community activity data: if you use the App community feature (posts, comments, likes), we collect what you post and the metadata associated with it (timestamp, username, related content).
  • Crash reports & diagnostics: anonymized technical logs to help us fix bugs and improve the App.

The EarVision App is classified as Health & Fitness on the Apple App Store and Google Play. We treat any imagery of your ear canal as personal data and, where applicable, as special-category data under GDPR Article 9. Such data is never sold, never used for advertising, and is only shared where you explicitly choose to share it (for example, by posting to the community feed).

2.4 Information from third parties

  • Payment processors: transaction confirmations, fraud signals, and chargeback notifications.
  • Shipping carriers: tracking events, delivery confirmations, and address corrections.
  • Marketing platforms: ad engagement and conversion signals from Meta, Google, TikTok, and similar advertising platforms, where you have interacted with our ads.
  • Analytics providers: aggregated audience insights.

3) How We Use Your Information

We use your information for the following purposes:

  • To provide our products and services: process orders, subscriptions, and payments; ship products; provide the EarVision App and its features; deliver customer support.
  • To manage your account: authenticate you, save your preferences, and secure your login.
  • To communicate with you: send order confirmations, shipping notifications, service messages, warranty communications, subscription renewal reminders (see our Subscription & Cancellation Policy), and — with your consent — marketing emails, SMS, or push notifications.
  • To personalize your experience: tailor product recommendations, remember your cart, and present relevant content.
  • To measure and improve: analyze how our website and App are used to improve performance, features, and user experience.
  • To market and advertise: deliver relevant advertising on Meta, Google, TikTok, and other platforms; measure ad effectiveness; build lookalike audiences on aggregated, non-identifiable data.
  • To prevent fraud and abuse: detect suspicious activity, chargebacks, and misuse of our products or services.
  • To comply with legal obligations: tax records, consumer protection laws, chargeback disputes, and lawful requests from authorities.

4) Legal Basis for Processing (EU/UK Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases under GDPR Article 6:

  • Contract (Art. 6(1)(b)): to process your order, deliver your product, manage your subscription, and provide customer support.
  • Consent (Art. 6(1)(a)): to send marketing emails, SMS, or push notifications; to set non-essential cookies; to process any special-category data (Art. 9(2)(a)). You can withdraw consent at any time.
  • Legitimate interests (Art. 6(1)(f)): to prevent fraud, secure our systems, measure aggregate site performance, and improve our products. When we rely on legitimate interests, we balance them against your rights and freedoms.
  • Legal obligation (Art. 6(1)(c)): to comply with tax, consumer protection, and regulatory requirements.

5) How We Share Your Information

We do not sell your personal information for money. We share information only with service providers who help us operate our business, and only for the purposes described below. We use the following categories of service providers:

  • E-commerce platform: Shopify Inc. (Canada) — hosts earare.com, processes checkout, stores order and customer data.
  • Payment processors: Shopify Payments, PayPal, Apple Pay, Google Pay — process payments and manage fraud checks.
  • Subscription management: Loop Subscriptions — manages recurring billing and subscriber portal.
  • Shipping & fulfillment: our fulfillment partners and shipping carriers (Yunexpress, USPS, Royal Mail, DPD, Australia Post, and other regional carriers) — receive shipping addresses and order contents to deliver your orders.
  • Email & SMS marketing: Klaviyo — sends transactional and marketing communications you have consented to receive.
  • Analytics: Google Analytics, Shopify Analytics — measure site usage in aggregated form.
  • Advertising: Meta (Facebook/Instagram), Google Ads, TikTok, and similar platforms — receive hashed or event-level data to measure ad performance and deliver relevant advertising.
  • Reviews & post-purchase: our reviews platform and post-purchase upsell tools — collect and display product reviews and offer post-purchase products.
  • Customer support tools: our helpdesk software — stores and organizes your support communications.
  • EarVision App backend: our App infrastructure providers — host App accounts, community posts, and diagnostics.
  • Professional advisors: lawyers, accountants, insurers, and auditors — where required for our business.
  • Authorities: government, law enforcement, or courts, where legally required or to protect our rights and users.

All service providers act as our data processors and are bound by written agreements requiring them to protect your information and use it only for the purposes we specify.

If Earare is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

6) International Data Transfers

Earare is based in the United States. Some of our service providers are also located in the United States or in other countries outside the EEA and the United Kingdom. When we transfer personal data of EU/UK residents to countries that have not received an adequacy decision from the European Commission or the UK Government, we rely on appropriate safeguards, including:

  • The EU-US Data Privacy Framework, where our provider is certified;
  • The European Commission's Standard Contractual Clauses (2021);
  • The UK's International Data Transfer Agreement (IDTA) or UK Addendum;
  • Additional technical and organizational safeguards where appropriate (encryption in transit and at rest, access controls, and pseudonymization).

You may request a copy of the safeguards we apply by emailing hello@earare.com.

7) Cookies & Tracking Technologies

Earare uses cookies and similar technologies on earare.com to enable essential site functionality, remember your preferences, measure site performance, and deliver relevant marketing.

The categories of cookies we use include:

  • Essential cookies: required for site functionality (cart, checkout, login, session management). These cannot be disabled.
  • Analytics cookies: Google Analytics, Shopify Analytics — measure site usage and improve performance.
  • Marketing cookies: Meta Pixel, Google Ads, TikTok Pixel — deliver relevant advertising and measure ad effectiveness.
  • Personalization cookies: remember your preferences and tailor content.

EU/UK residents: When you visit earare.com from a country in the European Economic Area or the United Kingdom, our cookie banner appears on your first visit and allows you to accept or reject non-essential cookies. Non-essential cookies are not set until you provide consent, in accordance with the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations (PECR). You can change your preferences at any time via the banner controls.

United States and other regions: Our cookie banner is not displayed by default, in line with local regulatory practice. You can control non-essential cookies at any time via your browser settings, and you can opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising by emailing hello@earare.com or by enabling the Global Privacy Control (GPC) signal in your browser (see Section 9.2).

Managing cookies in your browser: All major browsers allow you to view, delete, or block cookies. Disabling non-essential cookies will not affect your ability to purchase from earare.com but may affect personalization and analytics.

Do Not Track: Our site does not currently respond to browser "Do Not Track" signals, as no consistent standard has been adopted. We do honor the Global Privacy Control (GPC) signal as a valid opt-out under CCPA.

8) Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law. Typical retention periods are:

  • Order and transaction records: 7 years, as required by tax and consumer protection laws in the United States and European Union.
  • Customer account information: for as long as your account is active. You may request deletion at any time (see Section 9).
  • Marketing consent records: until you withdraw consent, plus a reasonable audit period.
  • Customer support communications: up to 3 years after resolution.
  • EarVision App content: for as long as your App account is active. Community posts you have made may remain visible after account deletion unless you delete them individually.
  • Analytics data: aggregated data may be retained indefinitely; individual-level data is retained per the settings of our analytics providers (typically 14–26 months).
  • Chargeback and dispute evidence: up to 3 years after the dispute is resolved.

When we no longer need your personal information, we securely delete or anonymize it.

9) Your Rights

9.1 EU/UK residents (GDPR / UK GDPR)

You have the right to:

  • Access — request a copy of the personal data we hold about you;
  • Rectify — correct inaccurate or incomplete information;
  • Erase — request deletion of your data (subject to legal retention obligations);
  • Restrict processing — ask us to pause processing in specific circumstances;
  • Object — object to processing based on legitimate interests, including direct marketing;
  • Data portability — receive your data in a machine-readable format;
  • Withdraw consent — where processing is based on consent, withdraw it at any time (this does not affect the lawfulness of processing prior to withdrawal);
  • Lodge a complaint — with your local data protection authority. A list of EU authorities is available at edpb.europa.eu. For UK residents, contact the ICO at ico.org.uk.

9.2 California residents (CCPA / CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to:

  • Know what personal information we collect, use, disclose, and (if applicable) share;
  • Delete personal information we hold about you;
  • Correct inaccurate personal information;
  • Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising;
  • Limit use of sensitive personal information;
  • Non-discrimination — we will not discriminate against you for exercising any of these rights.

Earare does not sell your personal information for money. We do share hashed and event-level advertising data with platforms such as Meta and Google, which may be considered "sharing" under CCPA. You may opt out at any time by emailing hello@earare.com or by using the Global Privacy Control (GPC) signal in your browser.

9.3 Other jurisdictions

Residents of other jurisdictions (including Canada, Australia, Brazil, and other US states with privacy laws) may have similar rights under applicable local law. We honor all such requests to the extent required.

9.4 How to exercise your rights

To exercise any of these rights, email hello@earare.com from the email address associated with your Earare account, and specify which right you are exercising. We will respond within the timeframe required by applicable law (typically 30 days under GDPR, 45 days under CCPA). We may need to verify your identity before acting on your request.

10) Data Security

We use administrative, technical, and physical safeguards designed to protect your personal information:

  • Encryption in transit (TLS 1.2+) for all traffic between your device and our systems;
  • Encryption at rest for stored data on our platforms and those of our processors;
  • Access controls limiting who can access customer data to authorized personnel with a legitimate business need;
  • Payment card data handled exclusively by PCI-DSS Level 1 certified payment processors;
  • Regular security reviews of our systems and vendors.

No online transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

11) Children's Privacy

earare.com: Earare products are intended for adult purchase. We do not knowingly collect personal information from children under 13 in the United States, or under 16 in the European Economic Area and the United Kingdom.

EarVision App: The EarVision App is rated for general audiences on the Apple App Store (4+) and Google Play (PEGI equivalent), but includes user-generated content and community messaging features. We require users of the App community feature to be at least 13 years old in the United States and at least 16 years old in the European Economic Area and the United Kingdom (or the applicable minimum age of digital consent in your country). Use of the Earare device itself is intended for adults or supervised use with minors.

If we discover that we have collected personal information from a child in violation of these age thresholds, we will delete that information promptly. If you believe a child has provided us with personal information, please contact hello@earare.com.

12) Third-Party Links

earare.com and the EarVision App may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices before providing any personal information.

13) Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective" date at the top of this Policy and, where required, notify you by email or through a prominent notice on earare.com or in the App.

We encourage you to review this Policy periodically.

14) Contact Us

Questions about this Privacy Policy or how we handle your data?

Earare Privacy Team
hello@earare.com
Monday–Friday, 10am–6pm PST

8729 Broadway, La Mesa, CA 91941, United States

This Privacy Policy is effective as of July 7, 2026, and supersedes all previous versions.