Privacy Policy for Project NeuroFit

Effective Date: October 9, 2026

Project NeuroFit (“App”) is an NIH-funded research study conducted by Oregon Research Institute (“ORI”) under Institutional Review Board (IRB) oversight. The App delivers a mobile weight loss and neurotraining program for research purposes only and is not a commercial product or medical device.

 

1. Information We Collect and Purpose

We collect data strictly to execute the research protocol, monitor safety, and operate the App. We do not sell your data or use it for targeted advertising.

We may collect the following types of information:

  • Personal information: name, email address, and other contact details.
  • Usage data: information about your interactions with our App, such as number of visits, time spent, screen taps, and content added.
  • Health behavior data: we pull in health behavior data from third party apps you use during the program (e.g., Google Health)

 

2. Protection and Disclosure

  • NIH Certificate of Confidentiality: Your research data is protected by a federal Certificate of Confidentiality, preventing compelled legal disclosure.
  • Data Security & Anonymization: Direct identifiers are stored separately from research data and replaced with Study IDs. Key linking files are restricted to Principal Investigators (Drs. Hagerman and Forman) and approved staff. Transmitted data is encrypted via TLS 1.2+ and stored using AES-256 encryption. A minimal residual risk of deductive re-identification exists in shared scientific datasets.
  • Data Sharing: De-identified datasets may be shared with scientific repositories or the NIH.

 

3. Account Deletion and Data Retention

  • Age Limit: Restricted strictly to adult men ages 18–65. Minors under 18 are excluded.
  • Withdrawal & Deletion: You may drop out of the study at any time. To request account and data deletion, email neurofit@ori.org. Contact information will be removed immediately; de-identified research data collected prior to dropout is retained to preserve trial integrity.
  • Retention: Data is kept per NIH and IRB retention policies. The app database will be deleted within 1 year of the conclusion of the study; however, the de-identified data will be kept indefinitely in a secure server for research purposes.

 

4. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with the updated effective date.

 

5. Contact Us