Privacy Policy

Virtumetrics provides alcohol monitoring technology to law enforcement agencies, probation departments, and courts. Our system includes a wristband sensor, a mobile application used by monitored subjects, and a web dashboard used by supervising officers and agency administrators. This policy describes what information our products handle, how we use it, and the choices available to people whose information is processed.

In most jurisdictions where our products are deployed, the contracting agency — not Virtumetrics — is the legal data controller for monitoring data. We process information on the agency's behalf in accordance with our service agreements.

The mobile application and web dashboard transmit data that originates from three sources:

From the wristband sensor

• Raw ethanol sensor readings and calculated blood alcohol content
• Device temperature, battery level, and wrist-on status
• Reading sequence numbers and event records (e.g., tamper detection, wrist removed)

From the mobile application on the subject's phone

• Precise location (latitude, longitude, accuracy) attached to each reading, as required by the monitoring program
• Account identifiers and email address used to authenticate the subject
• Diagnostic information such as crash reports and basic performance metrics, used to maintain reliability

From the web dashboard used by officers and administrators

• Officer and administrator account identifiers, email addresses, and role assignments
• Audit information about who viewed or acted on monitoring records and when

The mobile application does not collect contacts, photos, browsing history, search history, financial information, or health and fitness data unrelated to alcohol monitoring.

• To operate the monitoring program on behalf of the contracting agency — recording sensor readings, displaying compliance status to officers, and surfacing violations
• To authenticate users and enforce role-based access
• To maintain audit trails required for legal proceedings
• To diagnose and fix software defects through aggregated crash and performance reports
• To comply with applicable laws, court orders, and subpoenas

We do not use monitoring data for advertising, marketing, or third-party tracking, and we do not sell personal information.

We share information only as needed to operate the service:

• With the contracting agency that supervises the monitored subject
• With infrastructure providers that host the application and database, under contracts that restrict their use of the data to providing those services
• With law enforcement, courts, or other government authorities when required by valid legal process

Monitoring data may be introduced as evidence in legal proceedings related to the monitoring program.

Monitoring records (readings, events, location, audit log) are retained for the duration of the monitoring program and afterwards in accordance with the contracting agency's retention requirements, which are typically governed by state or federal records-retention statutes. Diagnostic data (crash reports, performance metrics) is retained for up to 90 days.

We use industry-standard safeguards including TLS encryption in transit, encryption at rest for hosted databases, scoped access tokens, role-based access control, and immutable audit logs. Wristband sensor readings are stored as raw sensor values in addition to derived values so that the integrity of the underlying record can be verified.

Subjects, officers, and administrators may request access to or correction of account information by contacting their supervising agency or Virtumetrics directly. Requests to delete monitoring records made during an active program may be denied where retention is legally required.

Residents of jurisdictions with comprehensive privacy laws (including California, Virginia, Colorado, Connecticut, and the European Economic Area) may have additional rights, including the right to know, correct, delete, and obtain a portable copy of personal information, subject to legal exceptions for law enforcement records.

Our products are not directed to children under 13 and we do not knowingly collect personal information from children. Where a monitored subject is a minor, the contracting agency is responsible for obtaining any parental consent required by law.

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above and, where appropriate, communicated to contracting agencies.

Questions about this policy or about how your information is handled? Email us at contact@virtumetrics.com.