INTRODUCTION: BY INSTALLING, USING OR OTHERWISE ACCESSING THE SAFER COMMUNITY APPLICATION FROM ANY DEVICE, MOBILE OR OTHERWISE, YOU ARE AGREEING TO ABIDE BY THE TERMS OF SERVICE AND CONDITIONS OF THIS PRIVACY NOTICE. IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS, DO NOT DOWNLOAD AND/OR ACCESS OUR APPLICATION. BY USING THIS APPLICATION, AND SUBJECT TO YOUR EXPLICIT OPT-IN CONSENT TO PARTICIPATE IN THE EXPOSURE NOTIFICATION SYSTEM, TO YOUR HEALTHCARE PROVIDER PROVIDING YOUR TEST RESULTS, AND TO CONNECTING TEST RESULTS FROM YOUR HEALTHCARE PROVIDER WITH THE SAFER COMMUNITY APPLICATION, YOU ARE CONSENTING TO THE COLLECTION, USE, AND DISCLOSURE OF INFORMATION IN ACCORDANCE WITH THIS PRIVACY NOTICE.

This Privacy Notice sets forth how your information is collected, used, transferred, and stored through the mobile application titled “Safer Community” (“Application”) and the terms and conditions governing your use of the Application. The Application was created by and is owned by ROKMETRO, Inc. (“ROKMETRO”, “we”, “our”, “us”) and is intended for use only by persons physically present in the United States. The purpose of this Application is to:

1. What information may the Application collect from you?

You are not required to provide the personal information requested by the Application; however, you may not be able to use some of the features offered by the Application if you choose not to provide your personal information. By providing us with your personal information, you are consenting to our use of it in accordance with this Privacy Notice.

• The Safer Community app uses GPS to provide the user interactive maps and outdoor geofenced notifications to find test locations.
• The Safer Community app uses SSID/BSSID (wifi) to provide geofenced notifications to indoor test locations where GPS does not work.
• The Safer Community app uses Bluetooth to enable opt in exposure notifications of close contact with individuals that test positive for COVID-19.
• The Safer Community app uses Photos and Camera to allow a user to import their personal encryption key (QR code) in to the app and to allow reporting of a test result from a non University testing center.
• The Safer Community app uses Videos and Camera to allow a user to import their personal encryption key (QR code) in to the app and to allow reporting of a test result from a non University testing center.
• The Safer Community app uses Files to allow a user to import their personal encryption key (QR code) in to the app and to allow reporting of a test result from a non University testing center.
• Personally Identifiable Information (“PII”). “Personally Identifiable Information” for purposes of this Privacy Notice means information that can be used to identify, contact, or locate an individual, as well as test results and reported symptoms. The Application collects the following PII from you, from University information systems, and from your healthcare provider: your name, your email address, your phone number, your local physical address, your NetID, student registration information, your test results, information required by the local Department of Public Health, any voluntarily reported symptoms, and your building access status.
• Location. Location services on your device must be turned on to activate the Bluetooth low energy technology necessary for the exposure notification function of the Application. However, the Application does not access, collect, or store any location data, including GPS data. If location services on your device are turned off, the Application will perform the limited functions of storing and providing information about COVID-19 test results, any voluntarily reported symptoms, and building access status.
• Automatic Collection of Non-Personal Information (“non-PII”). The Application may collect certain non-personal information automatically that may not, on its own, permit direct association with any specific individual. The following are some examples of non-personal information that may be collected: usage, including frequency of access, duration, and time of access. By using the Application, you are consenting to the collection, use, and disclosure, of non-personal information by the Application.
• Your Data. All PII and non-PII data will be stored on Amazon Web Services (“Servers”). Your PII and non-PII will also be stored in the Application. In particular:
  • Your test results and reported symptoms are stored encrypted on Servers and are decrypted only on your device by this Application when you want to view the history.
  • Your anonymous tokens are collected on your mobile device and transmitted and stored on the Servers after you receive a positive test result. The Applications of other participating users (i.e., other users of the Application) download the list of anonymous tokens periodically from the Servers, for comparison to those the Application collected on their mobile devices.
  • We follow generally accepted industry standards to protect the PII submitted to the Application. No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
  • How are Your Test Results Submitted to the Application? Sponsored test results are sent automatically to the Application. Additionally the Application supports a manual upload of positive test results (typically from off-campus test locations), to be reviewed and/or acted upon by a University Health Services medical professional.

2. How is Your Information used?

Your PII is used to establish and display your building access status, to determine your compliance with the required testing frequency, and to facilitate exposure notifications. Your building access status is established based on your compliance of your assigned testing frequency, test results, your self-reported symptoms, and any recent exposure notifications you receive (either automated or from contact tracers). Non-PII may be used for statistical analysis related to use of the Application and for research related to the COVID-19 pandemic subject to applicable law and University policy.

3. Is Your Personally Identifiable Information Shared?

Your ID, your name, your building access status, and your compliance with testing frequency, are shared with the University’s alternative building access web application, and other university systems needed to track compliance. This information is stored on Servers to support consistent and efficient building access and compliance tracking. Your personal information requested in the app is shared along with your test results to public health authorities and the University. The remainder of your PII is not shared and is stored on Servers in encrypted format and can only be decrypted on your mobile device.

4. Opt-Out Information

You may opt-out of information collection from within the Application. In Application Settings, you can request your PII data be deleted from Servers. Your PII and non-PII may be retained on Servers until you request its deletion.

5. Changes to this Privacy Notice

We may amend this Privacy Notice from time to time. If we change this Privacy Notice we will post the changes here. Your continued use of the Application after any such changes will constitute your acceptance of the updated Privacy Notice. If you do not wish to accept the revised Privacy Notice, you must not use or access (or continue to use or access) our Application. Please regularly check our Application or website to determine if the Privacy Notice has been updated and to review those changes before deciding whether or not to access (or continue to access) the Application.