Effective Date: February 28, 2023

This Privacy Policy (this “Policy”) is designed to inform you about how we collect, use and share information about you when you access or use the WE-ACT mobile application associated with the research study named Workplace/Employer Accommodations during Cancer Treatment (WE-ACT) (the “Services”), which are operated by Memorial Sloan Kettering Cancer Center (“MSK”, “we”, “us” or “our”).

By accessing or using the Services, you agree to our collection, use, and sharing of your information in accordance with this Policy. This Privacy Policy is not a contract and does not create any contractual rights or obligations.

We reserve the right to change this Privacy Policy from time to time in our sole discretion. If we make changes to this Privacy Policy, we will provide notice of such changes, such as by sending an email notification, providing notice through the Services or updating the “Effective Date” date at the beginning of this Privacy Policy. We encourage you to review this Privacy Policy whenever you use or access the Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.

Please use the links below to jump to the sections of our Privacy Policy to learn more.

Collection of Information

Information You Provide

We collect information when you register for an account. Specifically, when you register for an account on the Services, you will need to enter the participant ID and link that the study team provided you.

Information We Collect Automatically

When you access or use the Services, the types of information we may automatically collect about you include:

(a)        Usage Information: We collect information about your usage of, and interaction with the Services. For example, the Services may collect and analyze how often you use the Services and other performance data relating to your use of the Services.

(b)        Mobile Device Information: We collect information about the mobile device you use to access or use the Services, including the hardware model, operating system and version, mobile network information and information about your use of our mobile applications.

(c)        Log Information: When you access or use the Services, our servers automatically record certain log file information, such as your Internet Protocol (“IP”) address, operating system, browser type and language, referring URLs, access times, pages viewed, links clicked and other information about your activities on the Services.

Use of Information

We may use your information for various purposes related to our operations and your use of the Services. For example, we may use your information to:

(a)        Provide, maintain and improve our Services and provide you with relevant information;

(b)        Send you technical notices, updates, security alerts and support and administrative messages;

(c)        Respond to your comments, questions and requests and provide customer service;

(d)        Monitor and analyze trends, usage and activities in connection with our Services;

(e)        Detect, investigate and prevent fraudulent and other illegal activities and protect the rights and property of MSK and others;

(f)         Communicate with you about products, services and events offered by us and others, and provide news and information we think will be of interest to you;

(g)        Maintain appropriate records for internal administrative purposes;

(h)        Link or combine with information we get from others to help understand your needs and provide you with a better experience; and

(i)         Carry out any other purpose described to you at the time the information was collected.

We also may use aggregated or de-identified information, which cannot reasonably be used to identify you. Once de-identified and aggregated so that data does not personally identify you (for example, we may aggregate data in order to improve our automation and improve care), it is no longer personal information, and can be used and shared for any purpose. Such de-identified and/or aggregated information which does not identify individuals is not subject to this Privacy Policy.

Sharing of Information

We may share the information we collected (your participant ID, link, and the information we described above) as follows or as otherwise described in this Privacy Policy:  

(a)        With vendors, consultants and other service providers who need access to such information to carry out work or perform the Services on our behalf;

(b)        In response to a request for information if we are legally required to do so;

(c)        If we believe your actions are inconsistent with our policies, or to protect the rights, property or safety of MSK or others;

(d)        In connection with, or during negotiations of, any merger, acquisition, sale of assets or any business, other change of control transaction or financing;

(e)        Between and among MSK and any current or future parent, subsidiary and/or affiliated company; and

(f)         With your consent or at your direction.

How We Respond to “Do Not Track” Signals

Some web browsers have “Do Not Track” or similar features that allow you to tell each website you visit that you do not want your activities on that website tracked. At present, the Services do not respond to “Do Not Track” signals and consequently, the Services will continue to collect information about you even if your browser’s “Do Not Track” feature is activated.

Security

We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Please understand, however, that no security system is impenetrable. We cannot guarantee the security of our databases, nor can we guarantee that the information you supply will not be intercepted while being transmitted to or from us over the Internet.

Your Choices

Native Applications on Mobile Device

Some features of our mobile applications may require access to certain native applications on your mobile device, such as the camera application. If you decide to use these features, we will ask you for your permission prior to accessing the applications and collecting associated information. Note that you can revoke your permission at any time by changing the settings on your device.

Push Notifications

With your permission, we may send push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device or within our mobile applications.

Questions or Comments

If you have any questions or comments regarding this Privacy Policy, please email or mail us at: [email protected].