Privacy Policy

What we collect

Your account: your email address and an account ID. If you sign in with Apple or Google, we receive what that provider shares to create the account. If Apple shares your first name, it stays on your device, along with any name you type in the app.

Your routine: the answers you give while setting up Vara, such as your age range, goals, the exercises your clinician gave you, and your practice schedule and reminder time. We use them to build your plan.

Your practice: the sessions you complete, which exercises they included, how long they took, the date and time zone, and your short check-in about how practice and your eyes felt. If you take the close-work check, we save its answers and score.

Some of this can relate to your eye health. It is a record of your own answers, not a diagnosis or a clinical measurement.

Support: if you email us, we receive your email address and whatever you choose to send.

How we use it

To run your account, build and save your routine, show your progress, sync it across installs, check your subscription, answer support requests, and fix problems. Practice reminders are scheduled on your device.

Vara has no ads. We do not sell your information or use it for advertising.

Analytics and crash reports

We use PostHog to see which screens are used, how sessions go, and where the app breaks. Events include screen names, exercise IDs, session lengths, your “how did that feel” rating, device and app version, and error reports. Once you sign in, they are tied to your account ID.

Analytics never receives your name, email address, onboarding answers, eye check-in, close-work answers, or purchase receipts. Session recording is turned off.

Who processes it for us

Supabase hosts sign-in and your routine and practice records. RevenueCat tracks your subscription status by account ID. PostHog handles analytics and crash reports.

Apple processes App Store payments. We never see your card details. Apple and Google also handle sign-in under their own privacy policies.

These providers may store data outside your country. We may also share information when the law requires it or to stop fraud or abuse.

Keeping and deleting your data

We keep your data while your account exists. To delete it, open the Profile tab in Vara and tap Delete account. That removes your sign-in and your routine, practice, and close-work records from our database.

Deleting your account does not cancel your subscription. Cancel it in your iPhone’s Settings. Copies held in provider logs and backups expire on their own schedules. Email us if you want us to ask a provider to remove something sooner.

Your rights

Depending on where you live, you can ask to see, correct, export, or delete your information, or object to how we use it. Contact us and we will confirm the account is yours before acting. You can also complain to your local data protection authority.

This website

This site has no analytics or ad trackers. Our host sees standard request details, like your IP address and browser, to serve the page.

Adults only

Vara is for people 18 and over. We do not knowingly collect information from children. If you think a child has signed up, contact us and we will delete the account.

Security and changes

Sign-in tokens live in your device’s secure storage, and each account can read only its own records. No system is perfectly secure.

If this policy changes, we will post the new version here with a new date.