1nHealth Journey Tracker: Privacy Policy
Table of Contents
Effective date: September 18, 2026
Provider: 1nHealth, Inc., 424 E Central Blvd #129, Orlando, FL 32801 (“1nHealth”, “we”, “us”) Privacy contact: [email protected]
1. What the app is
The 1nHealth Journey Tracker app is for people who have applied to take part in a clinical research study supported by 1nHealth. It shows your progress through the study’s steps, your upcoming visit, and the details of your study site, and it lets you confirm a visit or ask your study team to contact you. It is not a medical device and does not provide medical advice.
2. Who can use it
Only someone who has already applied to a study through 1nHealth, and who is at least 16 years old. The app is not intended for children under 16, and we do not knowingly collect information from anyone under 16; if we learn that we have, we delete it. Where a study involves a child, the parent or caregiver who submitted the application is the person the app is for, and the account is theirs.
The account always belongs to the person whose email address is on the study application. There is no open sign-up: an account is created only after you verify that email address with a code we send you and choose a password. The app does not offer separate accounts for representatives acting on someone else’s behalf in this release; if you need help managing your application, contact your study team.
3. The information we use, and why
We do not ask you to type in any health information. The app works from information your study team already holds about your application.
| Information | Where it comes from | Why we use it |
|---|---|---|
| Your email address | Your study application | To sign you in and match you to your application |
| Your first name | Your study application | To address you in the app |
| Your progress through the study | Updated by your study team | To show your journey, and to send a general “you have an update” notification if you allow notifications |
| Your upcoming visit (date, time, site) | Entered by your study team | To show your visit and let you confirm you will attend |
| Your study site’s name, address and phone number | Study records | To show you where to go and how to reach them |
| The device that receives notifications (a push token, and whether it is iOS or Android) | Created by your phone when you allow notifications | To deliver notifications to your phone |
| When you first signed in, and approximately when you last opened the app | Recorded by the app, at most once every 15 minutes | So your study team can see that the app is working for you and reach out if you have gone quiet |
| Your notification choices and your chosen journey style | You, in the app | To respect your choices |
| That you confirmed a visit, asked for a call back (with a reason from a fixed list), or viewed directions | You, in the app | So your study team can act on it; each is recorded in your application’s history as “via patient app” |
| Your password | You, in the app | To sign you in; stored only as a one-way hash on our servers, never on the device |
| The date and time you accepted these terms, and which version | You, in the app | To keep a record of your acceptance |
The app does not collect anything you type as free text, your location, your contacts, your photos, or any health information beyond what your study team already holds. It contains no advertising and no analytics software.
4. Sign-in and security
The first time you use the app, you enter your email address and a six-digit code we email to you, then create a password. The code expires after ten minutes and stops working after five wrong attempts. Passwords must be at least 12 characters, with upper and lower case letters, numbers and symbols, and must not be a password that has appeared in a known data breach. By creating your account you accept these terms and this policy, and we record the date and time of that acceptance.
After signing in, the app keeps a sign-in token on your device for up to 30 days, stored in the device’s secure keychain. Each time you open the app you unlock it with Face ID or Touch ID, or with your password, and the app locks itself again after five minutes in the background. If you forget your password, request a new code by email and choose a new one. We email you whenever your password is changed. You can sign out at any time from the Profile tab; signing out removes the token from the device and tells us to stop sending notifications to it.
Data travels between the app and our servers over encrypted connections only. Access to your information on our systems is limited to the people and services that need it to run the app and your study.
5. Notifications
Notifications are optional. If you allow them, every notification is general, for example “You have an update” or “Your visit is tomorrow”. The name of your study, the step you are on, your visit details and anything about your health never appear on your lock screen. You can turn each type of notification off in the app. Notifications are delivered through Apple’s and Google’s notification services and through Expo, our push notification delivery provider, which receives only your device token and the general message text. The app delivers notifications only through push notifications to your device and does not send SMS text messages. Sign-in codes and account notices are sent by email only.
6. If something goes wrong
If we become aware of a security incident affecting your account or the information in this policy, we will notify you by email at the address on file for your account.
7. Who can see your information
Your study team at 1nHealth and at your study site, through the systems they already use to manage your application. We employ third-party companies to help us run the app: secure hosting for our servers, our email provider for the sign-in code and account emails, and Expo and the app stores’ notification services named above. These providers access your information only to perform the tasks assigned to them and are required to protect it under a written agreement providing protection equivalent to this policy. We do not sell your information and we do not share it for advertising.
8. Where your information is kept
1nHealth operates secure server infrastructure in North America, the United Kingdom and the European Union, and stores personal data in the region where it is collected: North America for participants in the United States and Canada, the United Kingdom for UK participants, and the European Union for EU participants. Where a transfer between regions is needed, it is made under Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum.
9. How long we keep it
Your app account and the information in section 3 are kept for as long as your account exists, and are removed when you delete your account (section 10). Your study application and its history are kept by the study under its own retention rules, because they are part of the study’s records.
10. Your choices and rights
You can sign out, turn notifications off, or delete the app at any time. Deleting the app removes everything stored on your device.
You can delete your account from the Profile tab after confirming your password. Deleting your account removes it from our systems: your sign-in details and password, your device registrations, your notification choices and journey style, and our record of your acceptance of these terms. It signs you out of every device and stops all notifications. We send a short email to confirm the deletion. We keep an internal record that the account existed and was deleted. That record includes the name and email address the account used, and we keep it for audit and legal purposes. Your study application and its history are not part of the account and stay with the study under its own retention rules; they continue to hold the name and email address you applied with. If you later apply to another study, you can create a new account. You can also ask us to delete your account by emailing [email protected].
You have rights over the information we hold about you: to access it, to have inaccurate information corrected, to have it erased where we have no legal obligation to keep it, to object to how it is processed, and to receive it in a structured, commonly used, machine-readable format. To exercise any of these, contact [email protected] or your study team. We will not treat you differently for exercising them. If you are in the United Kingdom or the European Union, you may also lodge a complaint with your data protection supervisory authority.
11. Changes to this policy
We will post any changes here and update the effective date.