Privacy and Security

Health data is deeply personal, and we take the responsibility of protecting it seriously.

Using Apple’s CloudKit, we’ve built privacy and security into the foundational architecture of our platform. Rather than just trusting a privacy policy, we want users to feel confident that our platform is entirely built around handling their data carefully.

We strive to operate with transparency, accountability, and respect for the individuals who make this research possible.

  • CloudKit is Apple's cloud service framework that lets apps securely store and synchronize data using Apple's iCloud infrastructure.

  • We use CloudKit’s tiered architecture to keep your information secure in the appropriate databases.

    Private Database

    • Personal profile

    • Contact information

    • Consent

    Research Database (our backend)

    • De-identified study data

    • Digital biomarkers

    • Survey responses

    Public CloudKit Database

    • Study catalog

    • Educational materials

    • Citizen science results

  • Apple requires every participant to explicitly choose what information they want to share. Access is granted on a data type by data type basis, meaning you can decide exactly which categories of information are available to the study. You can also revoke access at any time through your device settings. Apple does not allow apps to access health data without user permission.

  • Before research data is used for analysis, direct identifiers are removed whenever possible. This may include information such as names, contact information, medical record numbers, and other identifying details.

    Research records are assigned unique study identifiers so that researchers can analyze health trends without needing access to personal identity information.

    Our goal is to maximize scientific value while minimizing privacy risk.

  • When information is sent between your device and Apple’s servers, it is encrypted using secure network protocols. Data stored in CloudKit is also encrypted on Apple’s infrastructure.

  • Participation is voluntary.

    You can:

    • Choose what data to share

    • Review consent materials before participating

    • Withdraw from studies when permitted by study protocols

    • Revoke future access to health data through your device settings

    We believe participants should remain active partners in the research process, not simply sources of data.