Privacy Policy

Last updated: June 18, 2026

This policy explains how the University of Minnesota Wearable Hub application ("Wearable Hub", "we", "us") collects, uses, stores, and shares information when you connect your wearable device to a research study.

Who is responsible for your data

The data controller is the Regents of the University of Minnesota, on behalf of the research study led by Kelvin O. Lim. This study is conducted under University of Minnesota IRB approval STUDY00026668. Questions can be directed to kolim@umn.edu.

What information we collect

After you authorize access through your Google/Fitbit account, we collect the following health and wellness data from the Google Health API:

• Activity & fitness — steps, distance, calories, floors, and exercise sessions (daily totals and intraday detail).
• Sleep — sleep duration and sleep-stage breakdown.
• Heart rate — average, minimum, maximum, and resting heart rate, and (when your study enables it) intraday heart-rate samples.
• Other health metrics — heart-rate variability and blood-oxygen saturation (SpO2).
• Device information — your paired wearable's model, battery level, and last sync time.
• Account linkage — OAuth tokens and a Google-provided account identifier so we can retrieve your data on an ongoing basis.

How we use your information

We use your data solely to carry out the research study you enrolled in — to retrieve, store, summarize, and analyze your wearable measurements. We do not use your data for advertising, we do not sell it, and we do not use it for any purpose unrelated to the research. Wearable Hub's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we store and protect your information

Your data is stored in a secured University of Minnesota database with restricted, role-based access limited to authorized members of your study team. Access and refresh tokens are encrypted at rest. Access to the researcher console requires authenticated sign-in and is scoped to each researcher's authorized studies.

How we share your information

Your data is accessed only by the authorized research team for your study. We do not share it with third parties except as required to operate the study's secure infrastructure or as required by law or University policy.

Data retention

We retain your data for the duration of the research study and any retention period required by the study protocol, University policy, or applicable law. You may request deletion of your data at any time (see below).

Withdrawing and deleting your data

Taking part is voluntary. You can stop sharing at any time by:

• contacting your study staff, who can revoke the connection and remove your data; or
• removing the app's access in your Google Account security settings.

When access is revoked, we stop collecting new data and delete the stored authorization tokens. You may also request deletion of previously collected data by contacting the study team at kolim@umn.edu.

Changes to this policy

We may update this policy; the "Last updated" date above reflects the current version.

Contact

For privacy questions, contact the study team at kolim@umn.edu.