CRIST Tool — Privacy Policy

Last updated: June 2026

CRIST Tool is a field data collection app used by authorised research collectors. This policy describes how we collect, use, and protect information when you use the mobile app.

Who we are

The app is operated by the UsmleWise CRIST research programme. For privacy questions contact your study coordinator or admin@usmlewise.com.

Information we collect

• Collector account: name, phone number, password (stored hashed), optional UPI payment details, sign-up location.
• While the app is open: approximate foreground usage time and current location (for admin monitoring of field activity).
• Field submissions: caregiver/responder phone, child age and gender, screening answers, optional medical-record photos, vaccine information, collection GPS location, and timestamps.
• Device data: data is stored locally on your device when offline and synced when connectivity returns.

How we use information

• Authenticate collectors and sync submissions to the research server.
• Verify field activity, calculate collector payments, and support study quality control.
• Conduct developmental screening research under verbal caregiver consent recorded by collectors.

Permissions

• Location (while in use): required to geo-tag sign-up and each submission; used for admin oversight while the app is in the foreground. We do not collect background location.
• Camera: optional photos of medical records or screening documentation.
• Internet: sync data with the research server.

Data sharing

Data is transmitted to our secure research server. We do not sell personal data. Platform geocoding services may be used on-device to convert coordinates to addresses. Authorised administrators can access submissions for study operations.

Data retention & deletion

Research records may be retained for the duration of the study. Collectors may delete their account from the Profile screen in the app, which removes their account credentials and associated collector profile data. You can also follow the instructions at Account deletion. Contact the study coordinator for questions about research records entered about participants.

Security

Production apps communicate with the server over HTTPS. Passwords are hashed. Medical photos are accessible only to authorised administrators.

Children

The app is intended for adult collectors only. Collectors enter information about children only after obtaining verbal consent from a caregiver, as instructed in the study protocol.

Changes

We may update this policy. Material changes will be communicated through the app or study coordinators.