Privacy Notice

Who is responsible

Jamie Bailey personally operates Bearing and is responsible for how your personal information is used. Contact projectbearing0@gmail.com with privacy questions or requests.

What we collect

To request access, you give your email and, if you choose, a short message. Approved participants sign in using an email code through Supabase Auth. We hold account and authentication information, necessary security logs, and the time and versions of your Terms agreement and Privacy acknowledgement, including your confirmation that you are 18 or over and live in the UK. We do not ask for your date of birth or a country field.

Research records include experiment assignments and versions, before and after responses (including ‘I don’t know’), whether you completed the step, optional comments, and timestamps. Structured answers can be saved before Submit; comments are saved only on Submit. Administrative records include access decisions, cohort/source, assignment and protocol provenance, participant status and privacy-redaction events.

No diagnosis is required. Bearing does not intentionally collect diagnosis or medical data. Please do not put medical, diagnostic or identifying information about yourself or others in messages or comments.

Why we use it

We use information to review access requests, sign you in, operate and secure the pilot, assign guided experiments, preserve research context, evaluate the usability and feasibility of repeated check-ins, and respond to your requests. Optional comments are supplementary research context, separate from quantitative analysis.

The intended main lawful basis is legitimate interests in developing and evaluating the pilot while limiting data collection and participant impact. The final basis for each purpose and a Legitimate Interests Assessment remain to be confirmed before recruitment. The onboarding checkbox records eligibility and legal acknowledgement; it is not GDPR consent.

Identity and research records

Research records use a pseudonymous participant ID rather than an email address. Identity and research are kept separately but can still be linked by the operator; this is not anonymous data. The quantitative research export excludes identity and free-text comments. Administrative access and separate identity-bearing records are needed to run the pilot. We do not sell personal data or use it for advertising.

Hosting, security and cookies

Bearing uses Supabase for authentication and database services and Vercel for application hosting. Access controls restrict participant and administrator access. No online service can guarantee complete security. Production email and any recruitment provider, hosting configuration, international processing arrangements and applicable transfer safeguards must be confirmed before recruitment. London primary database and server compute are intended; this does not mean all provider processing takes place in the UK.

Bearing uses essential authentication/session storage to keep you signed in and support security. It does not use advertising tracking, marketing analytics or unnecessary analytics cookies. There is no optional tracking to accept.

Retention and anonymisation

The retention target is 12 months from your last meaningful authenticated pilot activity, followed by manual removal of identifying links and anonymisation. Public page visits do not reset this period. This process must cover account/Auth links, access requests, recruitment identifiers where held, other identity links, relevant logs and provider backup retention. Free text must be deleted or reviewed and redacted during anonymisation.

Deleting an Auth account alone does not make research anonymous. Submitted research evidence may remain after account deletion where needed for research integrity. We describe it as anonymous only when we no longer retain a reasonably usable way to reconnect it to you. Backup and log retention details remain a prelaunch check.

Stopping and your rights

Taking part is voluntary. You can stop at any time. If you feel you can’t continue, contact projectbearing0@gmail.com and we’ll help you withdraw. Withdrawal, deletion and anonymisation requests are handled manually; stopping participation does not automatically erase submitted evidence.

You can contact Jamie to request access to or correction of your personal information, deletion, restriction, or to object to processing based on legitimate interests. Data portability may apply in some circumstances. Rights depend on the circumstances and are not absolute; we will explain how your request can be handled, including any limits relating to retained research. You can complain to the Information Commissioner’s Office at ico.org.uk. The operator’s ICO registration/fee check remains a prelaunch task.

No medical purpose

Bearing is an early experimental pilot, not a diagnostic tool, medical advice or a healthcare service. It does not intentionally infer a diagnosis from your responses.