For Participants

1. Ownership

You, the user, are entering data into a mobile device. While the data resides on the mobile device, you own all data that you have created or modified. Your data is sent to the project's server. When data is sent to the server, the project administrator owns the data. Any non-user data retrieved from the server, such as configuration information, is owned by the project administrator.

2. Privacy

Your data is treated as private. All attempts are made to secure the data from outside interception. Data is sent via a SSL connection to the REDCap server from which the project originated.

3. Storage

The project configuration and (optionally) some user data are downloaded from a REDCap server via a SSL connection. The configuration and any data are stored in one or more encrypted databases on the mobile device. If a user is participating in multiple projects then there will be multiple encrypted databases. Each project has a sliced database.

4. Allocation of Software and Data

The parent REDCap server hosts the project and the final copy of the data. This resides at the host institution/organization that is running the REDCap Mobile App REDCap external module. The mobile device hosts the project configuration and any temporary study data. The data does not become authoritative until sent to the REDCap server.

5. Data Retention

The REDCap Mobile App does not permanently store or retain your personal data on any central Vanderbilt Health servers. Data remains on your mobile device as temporary study data until you choose to transmit it. Once data is successfully sent to the parent REDCap server, it is removed from the active mobile sync queue. Vanderbilt Health does not retain copies of your data; the long-term retention and lifecycle of the transmitted data are governed entirely by the policies of the specific institution and project administrator hosting your study.

6. Data Deletion

The REDCap Mobile App does not have a formal process for users to request the permanent deletion of their personal data. Because you own all data created or modified while it resides on your mobile device, Vanderbilt Health cannot access, manage, or delete this information for you. To remove data from your device, you must manually delete the application or clear its local storage. Once data is transmitted to the parent REDCap server, it is owned by the project administrator; any requests to delete server-side data must be directed to that specific project's administrator.
 
      
Allocation of Software and Data

The parent REDCap server hosts the project and the final copy of the data. This resides at the host institution/organization that is running the REDCap Mobile App REDCap external module. The mobile device hosts the project configuration and any temporary study data. The data does not become authoritative until sent to the REDCap server.