Privacy policy

Who is responsible for your data

The I-Carenet platform and this website are operated by SASU RivTech, 66 Av. des Champs-Élysées, 75008 Paris, France. Studies on I-Carenet are run by research organizations — your study team. They decide what data their study collects and why; RivTech provides the platform they use to collect it.

What the app collects

The icarenet app only collects what the study you enrolled in — and the consent you gave — configures. Depending on your study, this can include:

• Enrolment details: you join with a one-time code from your study team. The app needs no name, email address or password — you appear on the platform under a pseudonymous identifier.
• Activity responses: your answers to questionnaires and the results of cognitive tasks.
• Voice recordings: audio you record during speech and voice activities, where your study uses them.
• Passive sensor data: GPS location, motion sensors and activity type (e.g. still, walking, in a vehicle), step counts, screen state and app-usage screen time, and battery and charging state, where your study uses them and you have allowed it.
• Health data: readings such as heart rate, sleep or oxygen saturation from Apple HealthKit or Android Health Connect, where enabled and permitted.
• Device and messaging data: device platform, push-notification token, and any messages you exchange with your study team.
• Consent records: which consent version you accepted, and when.

What this website collects

This website has no advertising and no tracking. The only personal data it handles is what you type into its two forms — the demo-request form and the account-deletion request form — which is emailed to us and stored nowhere else on the site.

How your data is used

Study data is used for the research purposes described in your study's consent form: analysing responses, monitoring adherence and safety, and communicating with you. It is not sold and not used for advertising.

Where your data lives

Study metadata lives in a database operated for your research organization; the collected study data itself is uploaded to the research organization's own object storage, reachable only through short-lived signed links. Buckets are never public.

Who can see your data

Your study team (the investigators of your research organization) can access the data their study collects. Organizations are hard tenant boundaries: no data crosses between them. The platform also relies on a small number of technical service providers — push notifications are delivered via Apple (APNs) and Google (FCM), and website form submissions are delivered by our email provider.

How long data is kept

Data is kept for the duration of your study, and you can request deletion at any time — the account and data deletion page details exactly what is deleted and the 30-day timeframe. After a completed deletion, a single audit record of the request itself is retained as proof it was honoured.

Where a study's protocol or applicable clinical-research regulations require it, some already-analysed data may be retained; your study team can tell you whether this applies to your study.

How to delete your account and data

Your rights

Under the GDPR you can, at any time:

• Access the data held about you, and receive a copy in a portable format.
• Have inaccurate data corrected.
• Have your account and data deleted, and withdraw from your study.
• Restrict or object to processing, where the law provides for it.

The fastest route for any of these is your study team, who know your study and can verify your identity. You can also lodge a complaint with your data-protection authority.

Contact

For privacy questions about your study, contact your study team first — they hold your data. For questions about the platform or this website, write to contact@i-carenet.com.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date.