COLLECTION OF YOUR INFORMATION

We may collect information about you in a variety of ways.  The information we may collect via the Application depends on the content and materials you use, and includes:

Personal Data

Demographic and other personally identifiable information (such as your name and email address) that you voluntarily give to us when choosing to participate in various activities related to the Application, such as onboarding and responding to surveys.

Research Study Data

For participants enrolled in IRB-approved research studies, we may also collect identifiable research data as specified in the applicable study consent form and IRB protocol. This may include health information, clinical measurements, and other data necessary for the conduct of the study. This data is collected, stored, and used in accordance with the applicable Institutional Review Board (IRB) and applicable law. Access to identifiable research data is limited to authorized study staff.

Derivative Data

Information our servers automatically collect when you access the Application, such as your native actions that are integral to the Application, include activity data, tab navigation, message responses, as well as other interactions with the Application.

Mobile Device Access

We may request access or permission to certain features from your mobile device, including your mobile device’s notifications, sensors, motion & activity, and other features. If you wish to change our access or permissions, you may do so in your device’s settings.

Mobile Device Data

Device information such as your mobile device ID number, model, and manufacturer, version of your operating system, phone number, location, and any other data you choose to provide.

Push Notifications

We may request to send you push notifications regarding your account or the Application. If you wish to opt-out from receiving these types of communications, you may turn them off in your device’s settings.

USE OF YOUR INFORMATION

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Application to:  

• Compile aggregate statistical data and analysis for use internally or with third parties such as funders, industry partners, or collaborators. This may also include scientific research publications or reports.
• Create and manage your account.
• Deliver targeted messages or other information regarding your activity and the Application to you. 
• Generate a personal profile to make future visits to the Application more personalized.
• Increase the efficiency and operation of the Application.
• Monitor and analyze usage and trends to improve your experience with the Application.
• Notify you of updates to the Application.
• Request feedback and contact you about your use of the Application. 
• Troubleshoot problems and respond to customer service requests. 

DISCLOSURE OF YOUR INFORMATION

We do not sell your personal information to third parties.

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

Data Collection and Storage Technology

• Cookies, Web Beacons, etc. We do NOT use cookies, web beacons or similar tracking technologies to track the activity on our Service (mobile app). Our app does provide links to external websites. Should you choose to open those links, you are subject to the terms and conditions, including the privacy policies, of those websites which may include tracking cookies, web beacons, etc. Those links will open in the default internet browser on your device.
• Cloud Storage We use cloud storage to collect de-identified data (does not directly identify you) on app usage (searches performed, labels viewed, etc.). This data is used to improve the app, prioritize features for enhancement, and for scientific research. For participants enrolled in IRB-approved research studies, identifiable research data is stored separately on secure, password-protected servers consistent with UW security requirements and the applicable IRB protocol. Access to this data is limited to authorized study staff.

Data Security and Protection

The ExerciseRx platform uses administrative, technical, and organizational safeguards to protect the confidentiality, integrity, and security of user data.

User data transmitted between the ExerciseRx application, third-party services, and ExerciseRx servers is protected using secure encrypted connections, including HTTPS/TLS. User data stored by the ExerciseRx application is protected using encryption at rest and access controls designed to limit access to authorized personnel.

Access to user data is limited to authorized members of the ExerciseRx research and technical teams as necessary to operate the application and conduct approved research studies. The Sports Institute maintains security procedures intended to protect user information from unauthorized access, disclosure, alteration, or destruction.

These protections apply to all user data handled by the ExerciseRx application, including data obtained through Google APIs. Google activity, fitness, and, where applicable, sleep data are accessed only with the user’s authorization and are used only for the purposes described in this Privacy Policy. The Sports Institute does not sell user data or use Google user data for advertising purposes.

OTHER LIMITATIONS ON PRIVACY

Links to Websites: Our app contains links to webpages at various websites maintained by other companies, institutions, or us. These websites are not governed by our privacy policy, and we assume no responsibility for their information collection and sharing practices (for instance cookies, web beacons, disclosure of personally identifiable data). 

Legal requirements: We may disclose your information in the good faith belief that such action is necessary to: 

• To comply with a legal obligation 
• To prevent or investigate possible wrongdoing in connection with the Service 
• To protect the personal safety of users of the Service or the public 
• To protect against legal liability 

Retention Period: App usage analytics data collected through this Application is de-identified and is retained for as long as necessary for internal purposes and to conduct scientific research. Identifiable data from enrolled participants is retained for a minimum of 6 years following IRB study closure, consistent with UW requirements and as specified in the applicable IRB protocol. Individual sponsor agreements may require longer retention periods where applicable. At the conclusion of the retention period, identifiable data is destroyed in accordance with UW Records Management procedures. 

Data Rights: If you feel our handling/processing of your data is non-compliant with applicable data protection laws, you may contact us at exerciserx@uw.edu or submit a complaint with the relevant data protection authority. 

Privacy Breach Notification

In the event of a privacy breach involving unauthorized access, disclosure, or loss of personal information, we are committed to notifying affected individuals and relevant authorities in accordance with applicable privacy laws.

By using our services, you acknowledge and agree to the procedures outlined in this privacy breach notification section.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. 

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted at https://thesportsinstitute.com/exerciserx-privacy-policy/. 

How to Contact Us

If you have a question about this Privacy Statement, please contact us at exerciserx@uw.edu