Privacy Policy - Avocado

Avocado and BlueSkeye AI is GDPR compliant and respects your right to privacy

Privacy and security are of utmost importance to BlueSkeye AI and we strive to ensure that our technical and organisational measures in place respect your data protection rights. Wherever possible we minimise the amount of personal data we collect and where data is collected it is with informed user consent and encrypted in transit and at rest.

This Privacy Policy describes how we collect, manage, process and store personal data when you interact with our services. "Personal data" is any information about one of our Users which could, alone or together with other information, personally identify them or otherwise be reasonably linked or connected with them. Information such as an email address, a real name, an Internet protocol (IP) address, and a photograph.

Protection of Personal Information

BlueSkeye takes the security of your personal information very seriously. Your personal information is encrypted during transit using Transport Layer Security (TLS). When your personal data is stored, we use computer systems with limited internet access housed in facilities using physical security measures. Personal data at rest is stored in encrypted form.

Privacy Questions

If you have any questions, concerns or would like to exercise any of the rights granted to you under the GDPR then please contact us at  [email protected] or in writing at:

FOA: Data protection team

BlueSkeye AI Ltd

The Ingenuity Centre

University of Nottingham Innovation Park

Triumph Road

Nottingham

NG7 2TU, UK

Updates to the policy

BlueSkeye AI will update this policy from time to time as products change and new services are launched. Any change to this policy will be posted at https://avocadoapp.co.uk/PrivacyPolicy.html

The Avocado App (iOS and Android)

To use our App you are not required to provide any personal data. Any data processing done by the App is performed on your device. By default, no data, personal or otherwise, are made available to anyone. For example video, audio, survey data and derived results are only ever stored on your device unless you specifically act to share this, in which case information about who this is shared with is made clear to you.

With your explicit consent, we will collect anonymous app usage statistics using the mechanisms provided by the operating system on your phone. This data is collected for the specific purpose of Analytics. BlueSkeye AI is not the data controller but we do have view access provided by a third party. More information can be found at:

On iOS https://support.apple.com/en-gb/HT202100

On Android https://policies.google.com/privacy

If you email us: G Suite is only used to store any emails sent to us by you. More information can be found here https://gsuite.google.com/terms/dpa_terms.html

There are several optional sections of the app where your data may be shared with BlueSkeye AI and its trusted partners. Each optional feature is listed below.

Push Notifications

If you opt-in to notifications then we generate a unique “push notification ID” the following service is used to provide notification functionality.

Recipient	Purpose of processing	Personal data collected by the third party	Privacy policy
Onesignal	Push notifications	push notification ID, IP address as well as system configuration information, Information associated with or related to devices, such as device type	https://onesignal.com/privacy_policy

Anonymous usage reporting

If you opt-in to anonymous usage reporting we generate a unique install ID that is different to other ids used in other parts of the App. If enabled usage data will be sent to

Recipient	Purpose of processing	Personal data collected by the third party	Privacy policy
Matomo	To help us make the App better	Install ID, page title, First half of your IP address, event data	Privacy Policy

Volunteered Data

Our app allows you to volunteer your data to BlueSkeye AI. Personal data volunteered through this program will be treated in line with the GDPR. The table below describes the data we collect and the purposes for which it is used.

Data Collected	Purpose
Email address (hashed)	When you join the data volunteer program we collect your Email address. This is used for the purpose of fulfilling our duties under the GDPR allowing you to exercise your rights. Your email address is linked with your anonymous data volunteer ID so we can identify your data if you wish to exercise any of the rights granted under the GDPR. If you have any questions or would like to contact us about your data please email [email protected] from the registered email address and we will be happy to help. We will not use your email for marketing purposes.
Video and Audio of you performing tasks with our agent Questionnaire data Accelerometer data collected during the task Reported metrics Task associated metadata	If you join the data volunteer program after each task you will be asked to confirm if you consent to share the captured data of the task with BlueSkeye AI. If you consent the data will be uploaded to our servers and stored securely with your anonymous data volunteer ID. The data will be used to improve our AI system for virtual agent interaction, and medical condition screening prediction. You are able to withdraw your data at any time by emailing [email protected] from the registered email address. We will then remove your data from our dataset and backups within 180 days of a validated request.

BlueSkeye AI will not share or sell your data with third parties. However, we do use third parties to provide some services. We only use GDPR compliant services and always have a data processing agreement in place with any third party used to store or process personal data.

We use the following third-party services to deliver our data volunteer program:

Google Cloud Storage: more information can be found at https://cloud.google.com/security/privacy/

Crash Reporting

If your App crashes a report may be sent to Rollbar to store and process this information on our behalf.

Recipient	Purpose of processing	Personal data collected by the third party	Privacy policy
Rollbar	To help us fix bugs	Crash report	https://docs.rollbar.com/docs/privacy-policy

Purchases

When you purchase products via The App we use the following third-party services which may collect personal data:

Recipient	Purpose of processing	Personal data collected by the third party	Privacy policy
prodigi	To ship your Momento	Shipping details: name, location, contact details.	https://www.prodigi.com/privacy-and-cookie-policy/
Stripe	To process  your Momento payment	Payment Details: name, location, contact details, billing information	https://stripe.com/gb/privacy