Dry Eye Specialists App Privacy Policy

What the Dry Eye Specialists app collects, why, where it goes, how long it is kept, and your rights under New Zealand privacy law.

Last updated: 26 September 2026

This policy explains what the Dry Eye Specialists app collects about you, why, where it goes, how long it is kept, and what you can ask for. It covers the app for iPhone and Android and the services behind it. It does not cover the records your own practice keeps about your care, or this website, which has its own Privacy Policy. If you only want to remove your information, go to Delete your app account and data.

Who holds your information

The Dry Eye Specialists app was built with the Dry Eye Specialist Group. It is published by SynRo AB, a company registered in Sweden, which collects and holds the information you put into the app (Torgny Segerstedts Allé 7, 756 44 Uppsala, Sweden, contact@synro.life). In this policy we call it "the app provider". The app provider follows the New Zealand Privacy Act 2020 for information collected here, and applies the Health Information Privacy Code 2020 to your health information. It has appointed a privacy officer, who you can reach at that email address with "Privacy Officer" in the subject line.

The Dry Eye Specialist Group and its member practices do not hold your app information. See What your practice can and cannot see.

Giving your information is your choice

No law requires you to use the app or give it any information. If you choose not to, some features stop working:

  • Without an account, nothing is saved or synced.
  • Without a camera recording, the app cannot produce a check result.
  • Without symptom answers, the app cannot show change over time.
  • Without a clinic code or a purchase, the app stays on its free features.
  • Without notification permission, reminders will not reach you.

What the app collects

  • Your account: first and last name, email address, username, an age band (starting at 18 to 24), an optional profile photo, and your settings and consent choices. If you sign in with Apple or Google, the app receives your name and email, never your password.
  • Country and time zone: read from your phone's settings so reminders arrive at a sensible time. The app does not use GPS and never asks for location permission.
  • Symptom answers: your answers to the comfort and symptom questions, and their dates.
  • Plan, routines and reminders: the treatments and routines on your plan, including any plan you agree with your optometrist, the sessions you start and finish, streaks and reminder settings.
  • Eye camera checks: the tear film check records a short video of one eye with the rear camera and the phone's light on low; the tear volume check takes still photos with the rear camera; the blink check records a short video with the front camera. No sound is ever recorded. Each recording is sent over an encrypted connection to the app's analysis service, which returns three estimates: tear film break-up time, tear meniscus height and blink completeness. These values and their dates are saved to your account. They are software estimates for self-care, not a diagnosis. Sent with each recording: your account identifier, device model, operating system and app version, the time and time zone, camera settings at the moment of capture, and for the tear film check one still photo of the eye area taken while you lined up the shot. Your name and email are not sent with a recording.
  • Save to gallery: if you choose it, a copy goes to your own photo library. That copy is yours and is not held by the app provider.
  • Messages you send: what you write through Contact us or Feedback, including any email address you type in.
  • App analytics: events about how the app is used, such as screens opened, routines started and finished, learn videos opened, clinic code redemption, and a coarse summary of your recent check pattern (bands, not values). Events carry a random identifier, not your name or email, but they are sent from your signed-in app, so they should not be treated as anonymous. This is on by default. Turn it off in My Account, then Privacy and Data.
  • Push notifications: a push token from Apple or Google so reminders reach your phone. Removed when you sign out or delete your account.
  • Crash reports: technical details of a crash, device model and software versions, sent to Google Firebase Crashlytics. Your name and email are not attached.
  • Clinic code: which member practice issued the code, and when you redeemed it.
  • Purchases: what you are entitled to, for example an active subscription. Payment is taken by the App Store or Google Play, and your card details are never seen.
  • Clara, the optional assistant: if you use Clara, the messages you type and any product photo you attach are sent over an encrypted connection to the Clara service, which runs on the app provider's own systems. No outside AI company receives your conversations. Clara can also use relevant context from your plan, routines, reminders and recent checks, after your result-visibility choices are applied. Your chat history stays on your phone. Active conversations are held on the server only to generate replies and expire after 30 minutes of inactivity. If you choose to let Clara remember you, a short summary is kept; turning memory off removes it, and unused summaries expire after 365 days. Clara's answers are general information, not a diagnosis or prescription.
  • Learn videos: hosted on YouTube and played by Google's player. When a video loads, your phone contacts Google directly and Google's own privacy policy applies.

What the app does not collect

GPS or precise location; sound; your contacts, calendar or messages from other apps; or advertising identifiers. The app does not track you across other apps or websites, does not show advertising, and your information is never sold.

Why it is collected

  • To give you an account, sign you in and contact you about it.
  • To produce your camera check results and show how your symptoms, routine and results change over time.
  • To run your plan, routines and reminders.
  • To apply a clinic code or the access you bought.
  • To find and fix faults and see which parts of the app work.
  • To answer you when you write in.
  • To test and improve the analysis, only with recordings from people who join the improvement programme.

Health information and images of your eye

Your symptom answers, check values, plan and routine records are health information, and the Health Information Privacy Code 2020 applies to them. Images of your eye are used only to work out your check values for you. They are not used to identify you. Each check only happens when you choose to start it.

The improvement programme is optional

After you have seen a check result, the app asks once whether you want to join. If you join, your recordings and the values worked out from them are kept to test and improve the analysis. If you do not join, each recording is deleted from the analysis service once your result has been worked out. You can leave at any time in My Account, then Privacy and Data, then Help improve eye testing, and the recordings kept under the programme are then deleted. Recordings are never shown outside the app provider, and your permission would be asked before any use elsewhere, such as a published study.

What your practice can and cannot see

Entering a clinic code links your account to one member practice and unlocks the full app. Your practice does not receive your check values, symptom answers, plan or routine records through the app, and there is no clinic dashboard. If you want your optometrist to see a result, show it to them on your own screen. Your practice's own records of your care are held separately by the practice under New Zealand law. If practice access is ever added, you will be told exactly what would be shared and asked for permission first.

Who else sees your information

  • Service providers who work for the app provider: hosting, a managed database, the computers that run the analysis, Google Firebase for crash reports and push notifications, and Apple and Google for payments. They act only on the app provider's instructions, under written agreements that require protection comparable to the New Zealand Privacy Act.
  • Google, when a learn video plays from YouTube.
  • Anyone the law requires, for example under a court order. You will be told where that is allowed.

Information held outside New Zealand

The app's systems are outside New Zealand. The app provider remains answerable under the Privacy Act for information collected here, wherever it is stored, and stays responsible for what its service providers do with it. If your information ever needed to go to an overseas organisation for that organisation's own use, it would only happen on a ground allowed by information privacy principle 12 and rule 12 of the Health Information Privacy Code, and you would be told first. This does not happen today.

How long information is kept

  • Account details: while your account is open, and removed from live systems within 30 days of a deletion request.
  • Symptom answers, plan, routines, reminders and check values: while your account is open. You can delete your check history on its own at any time.
  • Camera recordings, if you have not joined the improvement programme: deleted once the analysis has finished.
  • Camera recordings, if you have joined: until you leave the programme or delete your account.
  • Messages you send: while your account is open, and as long as needed to answer you.
  • Clara: chat history on your phone until you clear it; server sessions expire after 30 minutes; optional memory until you turn it off, or 365 days unused.
  • Analytics events: until no longer needed to understand how the app is used.
  • Crash reports: under Google Firebase Crashlytics' retention setting.
  • Push token: until you sign out or delete your account.
  • Purchase records: for the period accounting and tax law requires, even after your account is deleted.
  • Backups: copies can remain in routine backups until they are overwritten, and are never used to restore a deleted account.

How your information is protected

Everything the app sends travels over an encrypted connection. Access is limited to the app provider's staff who need it for their work, and service providers are required to protect what they handle. No system is perfectly secure, so if something goes wrong it is acted on, and you and the Privacy Commissioner are told where the law requires.

Seeing, correcting and deleting your information

You can ask for a copy of the personal information held about you and ask for it to be corrected. These rights come from principles 6 and 7 of the Privacy Act 2020 and rules 6 and 7 of the Health Information Privacy Code 2020. Most of your information is visible in the app. For anything else, email the app provider's privacy officer (see Who holds your information) from the address on your account, with "Privacy request" in the subject line. Your identity may be checked first, and you will get a decision within 20 working days. If a correction is declined, you can ask for a statement of the correction you wanted to be attached. If you are in Europe, you also have rights under European data protection law, including erasure, a portable copy, and withdrawing consent.

To delete your information, see Delete your app account and data.

If there is a privacy breach

If information is lost, accessed, changed or disclosed without authority, the app provider assesses whether it is likely to cause serious harm, giving health information and images of your eye heavy weight. If it is a notifiable breach, the Office of the Privacy Commissioner and the people affected are told as soon as practicable.

Children

The app is for adults aged 18 and over. Information is not knowingly collected from anyone under 18. If you believe a child has used the app, contact the privacy officer and the information will be removed.

Changes to this policy

This page is updated when the app changes, and the date at the top shows the latest version. If a change matters to you, for example if anything were ever to be shared with your practice, you will be told in the app before it takes effect.

Which law applies and how to complain

New Zealand law governs this policy. Nothing in it takes away your rights under the Consumer Guarantees Act 1993 or the Fair Trading Act 1986. If you have a privacy concern, contact the app provider's privacy officer first. If you are not satisfied, you can complain to the Office of the Privacy Commissioner, which is independent and free: privacy.org.nz, 0800 803 909.

Related pages

App Terms and Conditions · Delete your app account and data · About the app · Website Privacy Policy

make an appointment

Our experienced Dry Eye Specialists are here to assess your symptoms and recommend a personalised treatment plan tailored to your needs. Book your appointment today and take the first step toward lasting comfort and clearer vision.

We send your details to the member practice you choose so they can contact you about an appointment. Please don't include detailed medical information in your message. See our Privacy Policy.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Copyright © DRYEYE Specialist Group 2026

Follow Dry Eye Specialist Group on Facebook