Rianell

1. Overview

By enabling "Contribute anonymised data", you consent to the processing of anonymised health data as described in this agreement. This feature allows your anonymised health data to be pooled with data from other users who have the same medical condition, helping to improve AI predictions and analysis for everyone.

2. Legal Basis for Processing (GDPR Article 6)

Consent (Article 6(1)(a)): Your explicit consent is required to enable this feature. You may withdraw your consent at any time by disabling this setting.

Legitimate Interest (Article 6(1)(f)): Processing anonymised data for improving health predictions serves a legitimate interest in advancing medical research and improving healthcare outcomes.

3. Data Controller Information

Data Controller: Rianell

Contact: data@app.com

Purpose: Processing anonymised health data to improve AI prediction accuracy and provide better health insights for users with similar medical conditions.

Data Protection Officer: Available through app settings or support contact.

4. What Data is Processed

Anonymised health metrics collected:

• Health metrics: BPM, weight, fatigue, stiffness, back pain, sleep quality, joint pain, mobility, daily function, swelling, mood, irritability, weather sensitivity, steps, hydration, flare status
• Arrays: stressors, symptoms, food (with calories/protein), exercise
• Text fields: pain location, energy/clarity status

Data NOT Collected:

• User name or any personal identifiers
• Notes (which may contain personal information)
• User account information
• Email addresses
• Any other personally identifiable data

5. Data anonymisation process

All data is processed through strict anonymisation procedures:

1. Personal identifiers are stripped before data leaves your device
2. Data is grouped by medical condition (not by user)
3. Each anonymised entry is stored separately in the database
4. No user-specific tracking or identification is possible

6. How Your Data is Used

Anonymised data is used exclusively to:

• Improve AI prediction accuracy for users with the same medical condition
• Train machine learning models for better health trend analysis
• Provide more accurate predictions based on aggregated patterns

Data access: Anonymised data is publicly readable (it contains no personal information) and can be used by any user with the same medical condition. No authentication is required to read anonymised data.

7. Data Storage and Security

Storage Location: Data is stored in Supabase cloud infrastructure with Row Level Security (RLS) enabled.

Security Measures:

• Data is encrypted in transit and at rest
• Anonymous read access is allowed (data is already anonymised)
• Anonymous insert access is allowed (for data contribution)
• Each anonymised entry is timestamped
• Data cannot be updated after insertion (append-only)

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Article 15): You can request information about what data is being processed
• Right to Rectification (Article 16): You can correct inaccurate data
• Right to Erasure (Article 17): You can request deletion of your data (note: anonymised pooled data cannot be individually deleted)
• Right to Restrict Processing (Article 18): You can limit how your data is processed
• Right to Data Portability (Article 20): You can export your data
• Right to Object (Article 21): You can object to processing at any time
• Right to Withdraw Consent (Article 7(3)): You can withdraw consent at any time by disabling this feature

9. Data Retention

Anonymised data is retained indefinitely as it contributes to ongoing research and model improvement. Once data is anonymised and pooled, individual deletion is not possible. However, you can stop contributing new data at any time by disabling this feature.

10. Data Sharing and Transfers

Anonymised data may be:

• Stored in cloud infrastructure (Supabase) which may process data outside the EU/EEA
• Used by other users with the same medical condition for AI training
• Processed by third-party AI services for model training

All data transfers comply with GDPR requirements and appropriate safeguards are in place.

11. Minimum Data Requirements

A minimum of 90 days of anonymised data is required before this feature becomes fully available. Until this threshold is met, the system will show "Helping the model" status.

12. Withdrawal of Consent

You may withdraw your consent at any time by:

1. Disabling the "Use open data for training" setting in app settings
2. This will stop future data contribution
3. Note: Previously contributed anonymised data cannot be individually deleted as it is anonymised and pooled

13. Contact and Complaints

For questions, concerns, or to exercise your rights:

• Contact the Data Controller at: data@app.com
• Contact us through the app settings
• You have the right to lodge a complaint with your local data protection authority (DPA)
• For EU users: Contact your national DPA or the lead supervisory authority

⚠️ Important Notice

By clicking "I Agree", you acknowledge that you have read, understood, and agree to this GDPR Data Processing Agreement. You understand that:

• Your anonymised health data will be processed as described
• You can withdraw consent at any time by disabling this setting
• Previously contributed anonymised data cannot be individually deleted (it's anonymised and pooled)
• Your data will be anonymised before leaving your device