My BP Lab Privacy Policy 

Effective date: 2019-03-15

Please note

My BP Lab website and app are part of the My BP Lab research study. They are not for medical care, advice, or treatment. 

Privacy Policy

The My BP Lab website and app are part of the My BP Lab research study. The My BP Lab research study is for people age 18 or older. To participate, you will need to download the My BP Lab app on to your phone. You may also download the app on to your watch.

The My BP Lab research study is run by Dr. Wendy Berry Mendes and researchers from the University of California San Francisco (UCSF) and Sage Bionetworks (Sage). Sage is a non-profit based in the United States that does health research. 

The My BP Lab research study is funded by Samsung Electronics Ltd (Samsung) and the Sarlo-Ekman endowment. 

The purpose of the My BP Lab study is to learn about how daily life impacts blood pressure. You can learn more about the study here. 

Together, UCSF and Sage (we) own the My Lab website and app. We are responsible for the data we collect from you through the My BP Lab website and app.

This Privacy Policy says what data we will collect through the My BP Lab website and app. It tells how we protect this data. It also says what we will do with this data.

By using the My BP Lab website or app, you agree to this Privacy Policy.

What data do we collect from you? Why do we collect it?

When you visit the My BP Lab website

What do we collect?

·      Information about the way you use the website. For example, the pages you access or the date and time you visit.

Why?

·      To make sure the website works the way it is supposed to

·      To improve the way the website works in the future

When you join the My BP Lab study

What do we collect?

·      Your full name

·      Your age

·      Your email address

·      Your country of residence

·      If you understand English

Why?

·      To make sure you are eligible for the My BP Lab study

·      To record your consent to participate in the My BP Lab study

·      To record your consent to move your data outside of the European Economic Area

When you participate in the My BP Lab study

What do we collect?

·      We ask you lots of questions. Here are some of the topics we ask about:

§  Your health history

§  Your zip code/post code

§  If you are alone or interacting with other people

§  How much exercise you get

§  Your stress levels

§  If you have been sexually active

§  Your feelings and emotions now, in the past, and in the future

§  If you have done things that might help you feel less stressed, like slow breathing

·      We will ask you to use the sensors on your phone (and your watch if you have one):

§  To measure your blood pressure

§  To do thinking games

·      Information about how you use the app.

Why?

·      To give us the data we need to do research about health

·      To give other researchers the data they need to do research

If you contact us

What do we collect?

·      Your name

·      Your contact information

Why?

·      So we can get in touch with you

When and why will we disclose your data?

We will disclose (give out) the data that we collect from you through the My BP Lab website and app for the reasons we list here. Other than these reasons, we will not sell, rent, lease, give, or share your data without your permission.

Reasons we disclose data:

1.    For research. We will share your data with researchers. The data we share will not have your name or email address. It will be labeled with a random number. Your data will be stored on one or more cloud-based platforms. Researchers who work with your data may be from anywhere in the world. We do not have control over what research will be done with your data.

2.    To our sponsors. We will share your data with Samsung. Samsung is paying for the My BP Lab study. The data we share will not have your name or email address. It will be labeled with a random number.

3.    To service providers. If we work with a service provider, we will give them any data they need to do the job we have asked them to do. A service provider is someone who is helping us with a part of the My BP Lab study. The service provider will have to sign a contract promising to use the data only for the job they are doing for us. Also, they will promise to keep the data safe.

4.    If we don’t exist anymore. If UCSF or Sage go bankrupt, or if we are bought by or merge with one or more organizations, your data may become their property.

5.    For legal reasons. We may give out data if we are required to by law or if we need to protect ourselves from legal claims. Otherwise, we will not give out data in any civil, criminal, administrative, legislative, or other proceedings.

In cases where the law says we are required to give out data, we will try to give out as little data as possible. We will try to protect your privacy as much as we can. Whenever possible, we will tell you if we have to give out data.

How long will we keep your data?

We will keep your name or email address for the length of the My BP Lab study unless we are required by law to keep them for longer. We will use your data (without your name or email address) for research long into the future.

Do Not Track

If you do not want us to track your use of the My BP Lab website, you can use ad blockers or Do Not Track preferences in your browser. If you do not want us to track your use of the My BP Lab app, do not download it.

Data Security

We take data security seriously. We use systems and procedures to protect the data we collect from you through the My BP Lab website and app. These systems and procedures help us prevent loss, theft, and misuse of your data. They help us prevent data breaches. Still, no matter what we do, we cannot promise that the data we collect from you is completely secure. We believe the risk is very small, but it is not zero.

Your Rights and Choices

You have rights and choices about your data. For example, if there is an error in the data we collect from you, you have the right to ask us to fix it. You can call our data privacy officer at 415-476-8839 or email them at MyBPLab@ucsf.edu.

You can stop using the website or app or delete the app at any time. This is not the same as withdrawing from (quitting) the My BP Lab study. If you want to withdraw, you can call us at 415-476-8839 or email them at MyBPLab@ucsf.edu.

We may keep a copy of all the data we collect from you. This is because we have a responsibility to keep backups and archives.

If you have questions about your rights and choices or would like more information about your rights and choices, you can call our data privacy officer at 415-476-8839 or email them at MyBPLab@ucsf.edu.

If calling from outside of the US, please email our data privacy officer at MyBPLab@ucsf.edu or contact your local number below:

Australia: +61 7 336 56230

Canada: +1 514-398-3982

Germany: +49-(0)731/50 31163

Singapore: + 65 6828 0835

Cross-Border Transfer of Your Data

You can visit the website, use app, and take part in My BP Lab study in the United States and in some other countries.

We may transfer your data to countries where you do not live. The countries where your data may go are:

·      the United States

·      South Korea

·      Canada

·      Germany

·      Singapore

·      Australia

These countries may have different laws about protecting data than the country where you live. If we transfer your data, we will follow the all the laws about transferring data for any country where the data will go. 

If you visit the website, use app, or take part in My BP Lab study, you consent to the transfer of your data.

How can you contact us?

If you have any questions, comments or requests about our privacy practices, you can call our data privacy officer at 415-476-8839 or email them at MyBPLab@ucsf.edu. or write to them at:

My BP Lab Study Data Privacy Officer

UCSF Laurel Heights Campus

3333 California Street

San Francisco, CA 94118

United States

Updates to this Privacy Policy

We may update this Privacy Policy. We will post updates on this website. If we make big changes, we will try to tell you directly. For example, we may send you an email or put a pop-up message on the website or app. If you visit the website, use app, or take part in My BP Lab study, it means you agree to the updated Privacy Policy.

Here is a list of the versions of this Privacy Policy:

Version 1.0 January 30 2019

Version 1 (2018-03-15)