Privacy Policy.

Who we are

Cicada Health Intelligence operates two product lines: Cicada Sense, for families and caregivers, and Cicada Ethos, a marketplace that connects people who generate health data with the researchers who need it. This policy applies to both, and to our website and applications. Where a product has additional terms, those are made available inside the product itself.

Data we collect

We collect only what a product needs to work for you:

• Account information — the name, email address, and credentials you provide when you register.
• Health and device data — the metrics you choose to connect, such as heart rate, sleep, activity, and readings from wearables or a Cicada Sense device.
• Consent records — a log of what you agreed to share, with whom, and when, so every use of your data is traceable.
• Usage and technical data — basic information about how you interact with our apps and site, used to keep them secure and working.

We do not sell your personal information, and we do not collect data you have not chosen to connect.

Consent & how data is used

Consent is the foundation of how Cicada works. You decide which data sources to connect and which specific metrics to share, and you can change or withdraw those choices at any time. We use the data you share to provide and improve our services, to fulfill the studies or features you opt into, and to keep our platform safe. We do not use your identifiable health data for advertising.

Sharing with researchers

On Cicada Ethos, data is shared with researchers only for studies you have specifically approved. Before your data reaches a researcher, it is de-identified — direct identifiers are removed so the recipient sees health signal, not you by name. Researchers agree to use the data only for the approved purpose, and each access is recorded. If you withdraw from a study, we stop sharing your data with that researcher going forward.

Service providers

We rely on a small number of trusted vendors to host, secure, and operate our platform — for example, cloud infrastructure and communications providers. They may process data on our behalf only to deliver those services, under agreements that require they protect it and use it for nothing else.

Security

We protect your data with encryption in transit and at rest, access controls that limit who can see what, and audit logging on sensitive operations. No system is perfectly secure, but we take reasonable and ongoing measures to guard against unauthorized access, loss, or misuse, and we review those measures as our platform grows.

Retention

We keep your data for as long as your account is active or as needed to provide the services you use. When you delete your account or withdraw consent, we delete or de-identify the associated data, except where we are required to retain certain records to meet legal obligations or to preserve the integrity of a completed study.

Your rights

You are in control of your data. You can:

• Access the personal data we hold about you.
• Correct information that is inaccurate or out of date.
• Withdraw consent and stop sharing at any time.
• Request that we delete your account and associated data.
• Export a copy of the data you have contributed.

To exercise any of these rights, contact us using the details below and we will respond within a reasonable time.

Changes to this policy

We may update this policy as our products evolve. When we make material changes, we will update the effective date above and, where appropriate, notify you inside the product. Continued use after an update means you accept the revised policy.