Skip to main content
All CollectionsHuma Health Shield
Data Protection & Privacy Policy
Data Protection & Privacy Policy

All you need to know about data.

Updated over 4 years ago

What data does Huma Health Shield collect?

Through different modules Huma Health Shield collects:

  • Resting Heart Rate

  • Smoking and alcohol consumption

  • Sleep quality

  • Memory test

  • Reaction time test

  • Waist to height ratio

  • Demographics information

  • Medical history

  • Symptoms

  • Vital signs

  • Exposure risk

Optional:

  • Heart rate

  • Respiratory rate

  • Temperature

  • Oxygen saturation

Other user data:

  • Forename

  • Surname

  • Date of birth

  • Biological sex

  • Gender

  • Mobile telephone number

  • Email address

Self-reported data:

  • Questionnaire on quality of life

  • Respiratory rate

  • Symptoms log

  • Temperature (using a thermometer)

  • Oxygen saturation (using a pulse oximeter)

Does my employer have access to my data?

NO. Your employer receives only aggregated and anonymised data relating to app usage (i.e. % of users onboarded) making it impossible to identify an individual user or the data they provide. None of your personal or health data can ever be shared with your employer. The data provided by you is used exclusively for the purpose of calculating and presenting results on the app for a personalised experience. Huma uses secure servers to process all data, making it safe and private at all times.

Huma will never sell users’ data to third parties. Subject to the users’ consent, Huma may use and share anonymous health data with third parties for research purposes and use the research results for its own purposes, including the development and distribution of digital biomarkers and similar results valuable for the fight against COVID-19. You have the option to select this when you provide your consent during the app’s onboarding process.

How is the data Huma collects used?

Huma Health Shield collects information to personalise each user’s experience and improve our service.

Huma will never sell users’ data to third parties. Subject to the users’ consent, Huma may use and share anonymous health data with third parties for research purposes and use the research results for its own purposes, including the development and distribution of digital biomarkers and similar results valuable for the fight against COVID-19. You have the option to select this when you provide your consent during the app’s onboarding process.

More information on how Huma uses and collects data can be found in the Huma Privacy Policy available from:

How long will Huma store my data?

Huma stores user data for the length of the project signed up to by your Employer. All personal user data is deleted upon termination of the contract with your employer. You can withdraw your consent for your data to be stored at any time and request to have your personal data deleted by sending an email to privacy@huma.com.

Subject to your consent, Huma may keep anonymised user data beyond the term of the deployment, and use and share such anonymised user data with third parties for research purposes, including the development and distribution of digital biomarkers and similar results valuable for the fight against COVID-19.

How is Huma’s data secured?

Users’ data is stored in a cloud storage facility. The cloud service used by Huma is Amazon Web Services (AWS), and the servers are based in Ireland. The cloud services and data centres have multiple layers of operational and physical security to ensure the integrity and safety of user data. User data is encrypted when in transit from the phone to the cloud, at rest, when stored within our platform, and, again, at transit, from the platform to the clinician portal. AWS audit logs keep track of who is accessing user data at all times. Employee access to the infrastructure is secured using two-factor authentication (2FA) and strict restrictions, allowing only a small group of GDPR-trained individuals the ability to access the data. Huma applies best practices for data protection and development.

Did this answer your question?