This Precardia Privacy Policy for Research Study Participants Document ("Privacy Policy") governs the collection, use, storage, and disclosure of your personal information and health-related data by the Cardiovascular Data Science (CarDS) Lab at Yale School of Medicine ("we") upon the use of the HealthTracker web application (the "Service"). This Privacy Policy is designed to be consistent with the requirements of the Institutional Review Board (IRB) as well as the applicable laws and regulations.
Data Collection
We collect personal and health-related data when you use the Service, including, but not limited to, information from FitBits. We collect this data as part of the IRB-approved research study you are participating in, in accordance with the consent form and the applicable laws and regulations.
Data Use
We use the collected data for research purposes within the context of the IRB-approved research study you are participating in. This may include data analysis, quality control, and improvement of the Service. We do not use your data for commercial purposes or any purpose that is not consistent with the research study's consent form.
Data Storage
Your data is stored on servers at Yale that are compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule. Only researchers approved by the IRB have access to these servers. These servers are encrypted and have built-in audit logs. We take appropriate measures to protect your data from unauthorized access, disclosure, alteration, or destruction.
Data Disclosure
We may share your data with other researchers, as described in the research study's consent form and approved by the IRB. We do not disclose your data to third parties for commercial purposes or any purpose that is not consistent with the research study's consent form.
Data Retention
We may retain the collected data as long as is necessary for the completion of the research study’s purposes, or as is required by applicable laws and regulations.
Withdrawal of Consent
You have the right to withdraw your consent to participate at any time during this research study. If you withdraw your consent, your data will be managed according to the procedures established by the IRB. Please contact the IRB or the Principal Investigator of the study to withdraw your consent.
Changes to the Privacy Policy
We reserve the right to modify or replace this Privacy Policy at any time, provided that any changes are consistent with the requirements of the IRB and applicable laws and regulations. If a revision is made, we will make reasonable efforts to provide at least 30 days’ notice prior to any new Privacy Policy taking effect, subject to approval from the IRB.
Contact Information
In case of any questions regarding this Privacy Policy, please contact the Principal Investigator at rohan.khera@yale.edu or the IRB responsible for the research study at HRPP@yale.edu.
By using the Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy, as well as your informed consent form for the research study.
