Draft — not yet in force
This privacy notice is a placeholder awaiting legal review. Text in [square brackets] has not been written yet. The consent form you sign in the study is the document that applies to you.
Privacy notice
Who we are
[Legal name of the Built With Science entity running the study, address, and registration details]
Privacy contact: [privacy contact email]
What we collect
- Your email address and a password (held by our sign-in provider; we never see your password).
- Age, sex, ethnicity, height and weight, and — if you choose — training history and your own body-fat estimate.
- Tape measurements you take of yourself.
- Three photos of you in your underwear, including the camera details stored in each photo file (for example the time it was taken and the lens), but not its location.
- Your consent record: the version you signed, your typed name, the time, your browser type and a shortened form of your IP address.
[Anything else counsel requires to be listed, e.g. service logs]
How your photos are protected
Location information is removed from each photo on your own device, before it is uploaded. Faces are blurred automatically, and you check the blurred versions yourself before you submit. Coaches who estimate body fat see only the blurred photos, identified by a number — never your name, email or measurements.
How we use it
[Purposes and legal basis: developing and evaluating software that estimates body-fat percentage from photos; research publications]
We do not sell your data.
Where it is stored, and who can see it
Your data is stored in Canada (AWS ca-central-1).
[Who at Built With Science can access originals; processors and sub-processors]
How long we keep it
[Retention period for photos, measurements and account data]
If you delete your data, it is removed from our live systems straight away; backups age out within[35 days]. Your consent record is kept as evidence of what you agreed to.
Your choices and rights
You can withdraw from the study, or delete your data and account, at any time from the Account page after signing in.
[Access and correction rights, how to complain, and the relevant privacy regulator]
Changes to this notice
[How changes are communicated; version and effective date]