Privacy Policy

Account information you provide: full name, email address, phone number, job title, company/organization, and a password (stored only as a secure hash — we never keep it in plain text).

Content you create: surveys, questions, the responses collected from your participants, uploaded data files (CSV/Excel) for statistical analysis, research studies and references.

Usage and device data: log records, IP address, approximate location, device type and app version, and — for push notifications — a device token.

Biometric data for sign‑in (Face ID / fingerprint) is handled by your device's operating system and is never transmitted to or stored by us.

If you use the Research Network we store the profile you publish (display name, handle, headline, institution, fields and links), your posts and their attachments, the communities you join, and the direct messages you send and receive.

Direct messages are private to the members of a conversation. They are not end-to-end encrypted: they are stored on our servers so that they reach you on every device, and our administrators can access them where that is necessary to investigate abuse or to comply with the law.

We record read receipts and online status. Both can be switched off under Network privacy, after which they are neither recorded nor shown.

Muted words are stored so that posts containing them stay hidden from your timeline.

We count how often your posts and profile are viewed and how often people engage with them, in order to show you the reach figures on your own analytics page. Those counts are yours; we neither sell nor publish them.

When you paste a link into a post or a message, our server rather than your device fetches that page to build the preview card. The linked site therefore sees a request from us and not your IP address. Only the page title, description, image and site name are kept, and only briefly.

To provide the service: create and share surveys, collect responses, run reliability/validity/regression analysis, and generate reports.

To authenticate you, secure your account, process billing and credits, respond to support requests, and send service notifications you have enabled.

To maintain, troubleshoot and improve the platform, and to detect and prevent fraud or abuse.

We process data to perform our contract with you, on the basis of your consent (which you can withdraw), and for legitimate interests such as security and service improvement — as applicable under GDPR and similar laws.

We do not sell your personal data. We share it only with service providers who help us run the platform — cloud hosting (Oracle Cloud), email/SMS delivery, and payment processing — under contracts that require them to protect it.

We may disclose data where required by law, and we may use aggregated or anonymized statistics that do not identify you.

Our administrators can read content published on the platform — posts, and posts inside groups, including private ones — in order to moderate it, investigate a complaint, or enforce our Terms. You are not notified when this happens: telling someone they are under review would defeat the review.

This covers published content only. It does not extend to your private messages.

Every such access is recorded — which administrator opened what, and when — so that our own access can be audited. We keep those records for 12 months.

Our lawful basis is legitimate interests: keeping the platform safe and enforcing the rules everyone agreed to. You may object to this processing by writing to [email protected], and we will weigh your objection against the reason for the review.

We keep your account and content while your account is active. When you delete your account, or ask us to, we remove your personal data within 30 days, except records we must keep for legal, tax or billing purposes.

All traffic is encrypted with HTTPS/TLS. Passwords are hashed, access is restricted, and sign‑in can be protected with a two‑factor email code and device biometrics.

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent at any time. Contact us to exercise these rights.

You can request full deletion of your account and data at any time — see our Data Deletion page, or email [email protected].

The service is intended for adults and organizations and is not directed to children under 16. If you collect responses from minors, you are responsible for obtaining any required parental consent.

Your data may be processed on servers located outside your country. We apply appropriate safeguards for such transfers.

We may update this policy; material changes will be posted on this page with a new date.

Questions about privacy: [email protected]. General support: [email protected].