Bone Booster App Privacy Policy

The data controller for this research is:

University of Exeter
Stocker Road
Exeter EX4 4PY
United Kingdom

Email: bonebooster@exeter.ac.uk

The University processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Bone Booster app is being used in a research study to understand:

• how people use the app
• how easy the app is to use
• how everyday movement patterns can be measured using smartphones
• how digital tools may support awareness of bone health

Data collected through the app are used only for research, evaluation and development of the technology.

The app is a research tool and does not provide medical advice and is not a medical device.

When you use the app as part of the study, the following types of data may be collected:

Movement data

The app uses your phone’s built-in motion sensors to detect patterns of movement associated with everyday physical activity.

This may include:

• acceleration data from the device
• time-stamped activity events
• calculated activity scores
• background activity patterns

The app does not collect GPS location data.

Basic user information

You may be asked to provide limited information such as:

• year of birth
• height
• weight
• bone health status

This information is used only for research analysis.

App usage information

The app may record information about how it is used, including:

• when the app is opened
• which features are used
• how often the app is used

This helps researchers understand usability and engagement.

Questionnaire and study data

If you are taking part in the research study, additional data may be collected through secure research systems, including questionnaires about health, activity and experience using the app.

Some participants may also choose to take part in optional online discussion sessions about their experience using the app.

Data collected by the app are transmitted securely and stored using approved research systems.

Storage may include:

• secure cloud servers used for research data collection
• secure University of Exeter servers
• encrypted storage on authorised research computers

Access to identifiable data is restricted to authorised members of the research team.

Personal identifying information is stored separately from research data wherever possible.

Data are retained in line with University of Exeter research data policies.

• Personal identifying information will be deleted after the study analysis is complete.
• Research data used in analysis will be anonymised.
• Anonymised research data may be kept indefinitely for scientific research, publication and future ethically approved studies.

Your identifiable data will not be shared outside the research team.

Anonymised data may be:

• used in scientific publications
• shared with other researchers for approved research
• used to improve future versions of the technology

No information that could identify you will be published.

Taking part in this study is voluntary.

You may:

• withdraw from the study at any time
• request deletion of identifiable data held about you before the data have been anonymised
• ask for information about how your data are being used

If you wish to withdraw, you should contact the research team and delete the app from your phone so that no further data are collected.

If you withdraw before your data have been anonymised and included in analysis, identifiable data held about you will be deleted where possible.

Once data have been anonymised, it may not be possible to remove them, as anonymised data cannot be linked back to individual participants.

To request withdrawal or deletion of your data, please contact: bonebooster@exeter.ac.uk

Requests will be handled in accordance with UK GDPR and University of Exeter data protection policies.

The University of Exeter uses technical and organisational measures to protect research data, including:

• encrypted data transfer
• secure storage systems
• restricted access controls
• compliance with University information governance policies

More information about University data protection policies is available at: https://www.exeter.ac.uk/departments/cgr/ig/policy/

If you have questions about this privacy policy or the research study, contact:

Bone Booster Research Team
University of Exeter
Email: bonebooster@exeter.ac.uk

For questions about data protection, you may also contact: informationgovernance@exeter.ac.uk

This privacy policy may be updated if the app or research procedures change.
The current version will always be available at the webpage linked from the app store listing.