Privacy Policy for LemurDx

Last Updated: December 8, 2025

Introduction

NuRelm, Inc. ("we," "us," or "our") is committed to protecting the privacy and security of research participants. This Privacy Policy explains how the LemurDx watchOS application ("App") collects, uses, and safeguards data as part of the research study titled "LemurDx: Validating Hyperactivity Measurement" (NIH Project Number: 1R44MH132177-01A1), conducted in collaboration with the University of Pittsburgh and Carnegie Mellon University.

This App is intended solely for use by enrolled study participants who have provided informed consent (or whose parent/legal guardian has provided informed consent) under the oversight of the University of Pittsburgh Institutional Review Board (IRB Study #STUDY24030152).

1. Data Collection and Usage

The LemurDx App is a research tool designed to collect passive sensor data to validate machine learning algorithms for measuring hyperactivity in children. The App collects the following types of data, as authorized by the study protocol:

  • Motion Data (Accelerometer & Gyroscope): We collect raw motion data to measure movement intensity and patterns. This data is utilized to calculate hyperactivity levels and distinguish between different contexts of physical activity (e.g., sitting quietly vs. active play).
  • Health Data (Heart Rate): We collect heart rate data via the Apple Watch sensors to assist in the contextual analysis of physical activity and physiological arousal associated with hyperactivity.
  • Location Data (GPS): We collect location data to determine the semantic context of the user's activity (e.g., "at school," "at home," or "on the playground").
  • Privacy Note: To protect participant privacy, raw GPS coordinates are obfuscated by choosing a random zero coordinate before long-term storage or analysis. We do not use this data for navigation or marketing.
  • Usage Logs: We collect technical logs regarding App performance (e.g., battery usage, connectivity status) to ensure the study software functions correctly and data integrity is maintained.

2. Consent and Authorization

  • Restricted Access: This App is not available to the general public. Only participants officially enrolled in the LemurDx study who have signed an IRB-approved Informed Consent Form (ICF) and/or Assent Form are provided with the necessary credentials (unique Participant ID) to activate the App.
  • Voluntary Participation: Data collection is entirely voluntary. Participants may withdraw from the study and cease data collection at any time by removing the watch, deleting the App, or contacting the study team.

3. Data Storage and Security

  • De-Identification: All sensor data collected by the App is coded using a unique Participant ID. No direct personal identifiers (such as names, dates of birth, or contact information) are stored locally on the watch or attached to the sensor data uploaded to our servers.
  • Encryption: Data is encrypted both in transit (while being uploaded from the watch to our secure cloud servers) and at rest (while stored on our HIPAA-compliant Amazon Web Services (AWS) servers).
  • Access Control: Access to the research data is strictly limited to authorized investigators and research staff at NuRelm, the University of Pittsburgh, and Carnegie Mellon University.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. Data collected through the App is used exclusively for the scientific research purposes described in the IRB-approved protocol. We may share de-identified, coded data with:

  • Research Partners: Our collaborators at the University of Pittsburgh and Carnegie Mellon University for statistical analysis and algorithm development.
  • Regulatory Authorities: The National Institutes of Health (NIH) or the Food and Drug Administration (FDA), if required by law or grant reporting obligations.

5. Data Retention

We retain the data only as long as necessary to fulfill the research objectives and comply with institutional and federal record-keeping requirements. Once the study and required retention periods satisfy IRB and grant policies, data will be destroyed or permanently de-identified in accordance with our data management plan.

6. Children's Privacy

This App is specifically designed for use by children (ages 6-11) as part of a research study involving parental consent. We do not knowingly collect personal information from children without verified parental consent obtained through the IRB-approved enrollment process. If you believe we have inadvertently collected data from a child without such consent, please contact us immediately.

7. Contact Us

If you have questions about this Privacy Policy, the LemurDx App, or your rights as a research participant (or guardian), please contact the study team:

  • Study Principal Investigator: Traci Kennedy, PhD (University of Pittsburgh)
  • Technical Support: NuRelm, Inc.
  • Email: lemurdx@upmc.edu
  • Phone: 412-592-7285