Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Usage Data
Health Research Disclosure
Our application collects and processes only usage data for research purposes. No sensitive or personally identifiable health data is stored externally or used for research. Any health-related information entered into the app is stored locally on the user’s device and is not transmitted, shared, or accessible to researchers or third parties.
The data used for research includes general app usage metrics, such as login activity, session duration, feature engagement, and navigation patterns. This information helps us analyze user behavior to improve the app’s effectiveness and enhance the user experience. Before analysis, all collected data is fully anonymized and aggregated, ensuring that no individual user can be identified.
No personally identifiable information, including names, emails, or health-related inputs entered into the application or website, is used in research or shared with external entities. All research-related data collected from app usage is de-identified, meaning it cannot be traced back to any specific user. No personal identifiers (such as name, email) collected by the application or website are included in the research data set. Sensitive health data entered by users is stored locally on their device and is never transmitted, uploaded, or shared externally.
Usage of this application requires that users previously have provided informed consent. All users engaging in research activities will have signed an Informed Consent Form (ICF) approved by an Institutional Review Board (IRB) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.
We are committed to ensuring that all data-handling practices comply with applicable privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) and other relevant regulations. This research is conducted in accordance with UCSF's ethical and regulatory standards, ensuring compliance with data protection policies, human subject research guidelines, and institutional oversight requirements.
To protect user privacy, all research data is de-identified, and no sensitive health information is linked to research findings. Additionally, users have the right to opt out of research data collection at any time by adjusting their settings within the app or contacting us at inspirestudy@ucsf.edu. Users may also request the deletion of any collected usage data through the app. Requests to delete research-related usage data will be processed within 30 days of receipt. Requests for account deletion may take additional time based on compliance obligations. If any changes occur in our research policies, users will be notified and given the opportunity to update their consent preferences.
Mandated Reporting in the Case of Suicidality/Threat to Self or Others: All mandated reporting requirements will be fulfilled as determined by California law. If a participant reports acute suicidal ideation, they will first be called by study clinical staff to assess for safety and severity. Participants with ideation, plan, and intent, who pose a serious risk of harm to self or others, will be directed to the nearest hospital emergency room and/or advised to call 911. Participant personal information may be given out if required by law.
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
- For research purposes: The collection of your data is subject to an informed consent form (ICF) as part of a health research study that has been reviewed and approved by the UCSF institutional review board.
- To contact You: To contact You by email or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
- To manage Your requests: To attend and manage Your requests to Us.
- For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, and to evaluate and improve our Service.
We may share Your personal information in the following situations:
- With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
- With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
- With Your consent: We may disclose Your personal information for any other purpose with Your consent.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.
Our Service may give You the ability to delete certain information about You from within the Service.
You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.
Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.
Disclosure of Your Personal Data
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, You can contact us: