Privacy notice
This notice covers the ZeroPD pilot app and this website. It is written to be read, so it is short.
This is the draft notice for the pilot. It will be reviewed and updated before participants are enrolled, and participants will see the final version inside the app before they decide anything.
Who is responsible
Danger Island ApS, CVR 32556736, Th. Staunings Vej 48, 9210 Aalborg, Denmark, decides how and why your information is used. For questions or requests write to [email protected].
What we collect
To create and secure your account
Your email address, or an Apple or Google account identifier if you sign in that way, and the one time codes we send you. We do not use passwords.
To run the weekly check, only if you choose to take part
Information about your health that you enter or that the phone measures during the movement tests, such as your answers about how you have felt, results from the movement tests, your medication history and your body measurements. This is health information, and we only use it with your clear, separate consent.
To keep the app working
Technical error reports, with fields that could contain health or identity information removed before they are stored. We do not store your IP address in our error reports.
Why we use it and on what basis
- Account and sign in: to provide the app you asked for.
- Health information: your explicit consent, which you can withdraw at any time. Withdrawing deletes the data held on that consent.
- Optional reminders: your consent, as a separate choice.
- Error reports and security: our legitimate interest in keeping the app safe and working.
We do not sell your information. We do not use it for advertising and we do not build advertising profiles.
Who helps us
We use a small number of providers who handle information on our instructions:
- Supabase, for the database and sign in.
- Brevo, for sending sign in codes and, if you ask for them, reminders.
- Sentry, for technical error reports.
- Apple and Google, if you choose to sign in with them. They act on their own terms.
Some providers or their support staff can be located outside the European Economic Area. Where that happens we rely on the safeguards the law requires, such as standard contractual clauses.
How long we keep it
For as long as your account is open. When you delete your account or withdraw consent, we delete the related data from our systems. Copies in backups are removed when the backups expire, and a restore never brings deleted data back into use. Technical logs are kept for a short period.
Your choices
- See and export your data from inside the app.
- Correct it, or ask us to delete it, from inside the app or by writing to us.
- Withdraw your consent at any time, without giving a reason and without losing access to the parts of the app that do not need that consent.
- Object to how we use your information, or ask us to limit it.
- Complain to the data protection authority where you live. In Denmark this is Datatilsynet, datatilsynet.dk.
If you live in the United States, you have similar rights under state privacy laws, including the right to know, delete and withdraw consent for health information. Write to [email protected] and we will answer within the time the law sets.
Changes to this notice
If we change how we use your information we will update this page and tell participants in the app before the change applies.
Contact
[email protected], or Danger Island ApS at the address above.