Effective date: August 31, 2026
1.Introduction
This Privacy Policy describes how SonNext Ltd. (“SonNext,” “we,” “us,” or “our”) accesses, collects, uses, stores, shares, and protects information in connection with the SonNext Mobile application and related SonNext services. SonNext Mobile provides authorized operators with tools for managing patients and treatments and for communicating with supported SonNext treatment devices and PhotoStation equipment.
Clinics, practitioners, distributors, and other organizations using SonNext Mobile may control patient information entered into the system. Where applicable, those organizations act as the data controllers for their patient information, and SonNext processes that information on their behalf.
2. Information We Collect
We may collect operator and account information, including names, usernames, email addresses, telephone numbers, organization details, authentication credentials or tokens, account permissions, and related account-management information.
We may process patient identification and contact information entered by authorized users, including patient identifiers, names, email addresses, telephone numbers, dates of birth, gender, addresses, country, height, and other profile information.
We process health and treatment information necessary to provide the application’s functionality. This may include treatment types, treatment dates and times, treatment duration, treatment areas, treatment parameters, device settings, treatment progress and status, measurements, ratings, treatment notes, treatment media, ampoule or consumable information, and other treatment-related records.
When authorized users use camera or photography functionality, we may process patient photographs, including before-and-after treatment photographs, manual photographs, PhotoStation photographs, alignment images, and related photo metadata. Photographs waiting to be uploaded and selected reference photographs may also be stored locally on the mobile device.
We may collect information about connected SonNext equipment, including device type, serial number, hardware and software versions, Bluetooth or NFC identifiers, connection status, device settings, consumable status, treatment status, diagnostic information, and technical messages exchanged with the application and SonNext backend services.
We may collect technical information needed to operate, secure, and troubleshoot the service, including application version, mobile device type, operating-system version, network status, error information, and diagnostic logs. We do not use this information for advertising.
3. Camera, Bluetooth, NFC, and Location Permissions
SonNext Mobile may request access to the camera to capture treatment photographs and communicate with supported PhotoStation equipment. It may request Bluetooth and NFC permissions to discover, connect to, and exchange information with supported SonNext devices.
On certain Android versions, location permission may be required by the operating system for Bluetooth device discovery. SonNext Mobile does not intentionally collect or retain the user’s precise geographic location through this permission.
4. How We Use Information
We use information to authenticate users; manage operator accounts and permissions; manage patient and treatment records; connect to, configure, and control supported SonNext equipment; process treatment workflows; capture and upload treatment photographs; monitor equipment and consumables; provide technical support; maintain security; diagnose errors; improve reliability; and comply with applicable legal and regulatory requirements.
We do not use patient health information, treatment records, or photographs for advertising, profiling for advertising, or sale to data brokers.
5. How Information Is Shared
Information may be available to authorized users and administrators of the clinic, practitioner, distributor, or other organization responsible for the relevant account. Access is controlled according to assigned permissions.
We may disclose information to service providers that process data on our behalf, such as cloud hosting, data storage, infrastructure, security, and technical-support providers. These providers may use the information only to perform services for SonNext and are required to protect it appropriately.
We may disclose information when required by law, regulation, court order, or a lawful request from a competent authority, or when reasonably necessary to protect users, patients, SonNext, or others from fraud, security threats, or harm.
We do not sell or rent personal information. We do not share personal or sensitive health information with advertisers.
6. Data Storage and Security
Information transmitted between SonNext Mobile and SonNext backend services is protected using encrypted network connections, such as HTTPS. We also use access controls, authentication, account permissions, and other administrative and technical safeguards designed to protect personal and sensitive information.
Some information may be temporarily or persistently stored on the mobile device, including cached data, photographs awaiting upload, upload-status records, application preferences, and reference photographs. Users should protect their devices with appropriate device security. No method of electronic storage or transmission can guarantee absolute security.
7. Data Retention
We retain account, patient, treatment, device, and technical information only for as long as necessary to provide the service, maintain treatment and business records, meet contractual obligations, resolve disputes, enforce agreements, and satisfy applicable medical, legal, tax, accounting, or regulatory requirements.
Locally stored pending-upload data is removed after it is no longer required, after the related treatment is deleted where supported, when application data is cleared, or when the application is uninstalled. Backup copies may remain for a limited period until they are overwritten through the normal backup cycle.
8. Access, Correction, and Deletion
Authorized users may be able to access, correct, or delete certain information through SonNext Mobile. Requests to access, correct, export, restrict, or delete personal information may also be submitted through our contact page.
Patients should normally direct requests concerning records maintained by a clinic or practitioner to that organization. SonNext will assist the responsible organization with verified requests where required.
We process verified requests without undue delay and normally respond within 30 days. Information may be retained when required by applicable law or necessary for legitimate medical, regulatory, security, or legal purposes. When information cannot be deleted, we will explain the applicable reason where legally permitted.
9. Children’s Information
SonNext Mobile is intended for use by authorized professional or organizational users and is not directed to children. Patient information concerning a minor may be entered only by an authorized organization that has obtained any consent required by applicable law.
10. International Processing
SonNext and its service providers may process information in countries other than the country where it was collected. Where required, we use appropriate contractual, organizational, and technical safeguards for international data transfers.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes to SonNext Mobile, our data practices, or applicable legal requirements. The revised policy will be published on this page with an updated effective date.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us. More information can be found on our Home site