Privacy Policy

1. Information We Collect

• Website information: information you provide when contacting us, such as your name and email address, and standard technical information about your visit.
• Participant and study information: account information provisioned by authorized study staff and data created through the Service, such as check-in audio or video, transcripts, session summaries, and technical quality signals, as described in the applicable study consent.
• Google Health information: after a participant grants access through Google OAuth, Compass may collect the read-only Google Health categories required by the applicable study: activity and fitness data, including steps and activity records; sleep data; and health metrics and measurements, including heart-rate records. Compass does not request permission to modify Google Health information.

2. How We Use Information

We use information to operate and secure Compass, perform the participant-authorized procedures described in the applicable study, organize consented research records for authorized study teams, troubleshoot connections, communicate about the Service, and meet legal, regulatory, and security obligations. Google Health information is used only for the research purposes and user-facing features disclosed to the participant.

We do not sell Google Health information, use it for advertising or marketing, or use it to determine eligibility for credit, employment, insurance, housing, or other unrelated decisions.

3. How We Share And Provide Access To Information

Participant information is available only to the participant where supported, authorized members of the applicable study team, Deliberate personnel with a legitimate need to support the Service, and service providers that process information on our behalf under appropriate confidentiality and data-protection obligations. We may also disclose information when required by law, to protect the security of the Service, or as otherwise expressly described in the applicable study consent. We do not share Google Health information for unrelated purposes.

4. Data Retention And Security

We use administrative, technical, and physical safeguards designed for the sensitivity of research information, including encryption in transit and at rest, role-based access controls, logging, and access review. We retain research records for the period described in the applicable study protocol and informed-consent materials, or as required by law. Where a study authorizes long-term or indefinite retention of records already collected, that retention is described in the study consent provided before enrollment.

5. Google Health Access, Disconnection, And Deletion

A participant can decline Google Health access before connecting or disconnect Google Health from Compass to revoke the Service's authorization and stop future collection through that connection. A participant may also manage third-party access in their Google Account.

Disconnecting does not automatically delete research records that were collected before disconnection. Participants may contact their study team or email us to request withdrawal or deletion. Requests are handled according to the applicable informed consent, study protocol, institutional-review requirements, and law. Records already used in completed analyses or required to preserve research integrity may be retained when the applicable consent or law permits it.

6. Google Health Limited Use

The use of information received from the Google Health API will adhere to the Google Health API User Data and Health Research Policy, including the Limited Use requirements.

7. Children's Privacy

The public website is not directed to children under 18. Compass participant access is limited to people enrolled through an applicable study process and is governed by that study's eligibility and consent requirements.

8. Changes To This Policy

We may update this Privacy Policy to reflect changes to the Service, law, or our data-handling practices. We will post the updated policy here and revise the "Last updated" date.

9. Contact

Questions or requests concerning this Privacy Policy or Compass data practices can be sent to dev@deliberate.ai. Study participants may also contact the study team identified in their informed-consent materials.