Mysoc Privacy Policy

What Data We Collect and Why

To allow you to access and use the app, we require the following personal data:

1. Name and Email Address: Collected for the purpose of account creation and secure access (our legal basis is Contract).
2. Diary Entries/Submissions: User-generated text and content you input into the app (our legal basis for processing this sensitive data is explicit Consent).

Your personal data is any information that can directly or indirectly identify you (e.g., name, email, demographic details, or unique account ID).

Data Storage and Security

Your data will be stored securely in two locations:

• Locally on your own phone.
• On a secured electronic server (hosted within the European Economic Area (EEA)).

We restrict access to your personal information. Only the researchers, the Wolseley Trust and app developers (Elixel) with a legitimate, defined reason can access your personal data for the purpose of providing and maintaining the MySoc service.

Sharing Data for Evaluation and Reporting

As this is a pilot study, your diary submissions will be used for evaluation to understand the application's benefit and report to current and future funders.

• To achieve this, all your identifying information (name, email) will be separated from your diary submissions.
• Your submissions will then be pseudonymised (assigned a unique, non-identifiable code) and shared with the Plymouth University Social Research Unit solely for the purpose of evaluation.
• A report on the app's effectiveness will be produced for funders and interested parties, but this report will contain no personal data and will only use anonymised, aggregate findings.

In addition to the evaluation, your data will be aggregated and anonymised to populate a dashboard for the Wolseley Trust, allowing them to track the overall impact of social prescriptions and usage of the app. This dashboard will contain only statistical, non-personal group data.

Third-Party Processing for Summary Generation (OpenAI)

After 6 weeks of uploading diary entries, you will be given the option to generate a personalised summary/story of your submissions.

This process involves sending your diary content to OpenAI for analysis.

• Platform: OpenAI is an external, third-party platform located primarily in the United States.
• Purpose: The data is sent solely to allow the platform's AI to analyse your content and generate your summary.
• Data Use: We ensure via contract that OpenAI will not use your submissions to train or improve its general AI models.
• Identity: The data submitted to OpenAI will not include personally identifiable information unless such information is written in the journal entries.

By tapping the button to generate your summary, you provide your explicit consent for us to send your diary submissions to the OpenAI platform for this single-purpose analysis.

If you require any further information regarding the privacy of your data or require a Subject Access Request please contact us on privacy@elixel.co.uk