Privacy Policy

v1.0 (20260609)

SOLARIS — Seguiment d'Observacions de l'Activitat caRdíaca i reSpiratòria durant un eclipsi Solar

Data Controller

Company: OneCareAI SL

NIF: B21902895

Address: Calle Gran Via Carles III, 98, Barcelona

Purpose of Data Processing

SOLARIS is a scientific research initiative led by the Institut d'Estudis Catalans (IEC), in collaboration with Vall d'Hebron Hospital and the Institut de Ciències del Cosmos de la Universitat de Barcelona (ICCUB). OneCareAI SL participates exclusively as the developer of the mobile application and as data controller for the technical processing of the data. The aim of the project is to study, on a purely statistical basis, the physiological response of human beings during the total solar eclipse of 12 August 2026. Through the app, anonymous biometric signals captured by a smartwatch and a short demographic form are collected and aggregated for research purposes only. The data is never used for medical, diagnostic or therapeutic purposes, and no individual report or feedback is provided to participants.

Legal Basis

Processing is based on the explicit consent given by the participant when accepting this policy, and on the public interest of scientific research, in accordance with the following regulations:

General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, Art. 6.1(a) and Art. 9.2(a) and (j)
Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) – Spain

Types of Data Collected

No directly identifying personal data is collected. We do not store your name, surname, ID document, email, phone number or any account-level identifier. The collected data is strictly limited to:

Physiological signals: heart rate (HR), heart rate variability (HRV), blood oxygen saturation (SpO2), blood pressure, breathing rate, step count, active calories burned, sleep, skin temperature and body temperature
Demographic form: biological sex, height, weight and age
Observation location: city or area from which the eclipse will be observed (no continuous GPS tracking)
Technical data: anonymous session identifiers and technical logs strictly necessary for the operation of the app

Anonymity

All data is collected and stored in fully anonymous form. Records cannot be linked back to a specific individual: there is no account, no login and no personal identifier associated with the measurements. Because of this, once the data has been transmitted it cannot be matched to its original participant, not even by OneCareAI SL or its research partners.

Recipients

Anonymous aggregated data may be shared with the research partners of the project — Institut d'Estudis Catalans (IEC), Vall d'Hebron Hospital and Institut de Ciències del Cosmos de la Universitat de Barcelona (ICCUB) — exclusively for the scientific purposes described above. Data is not sold, rented or transferred to any commercial third party. Results may be published in scientific articles and reports in fully aggregated form, in such a way that no participant can be identified.

International Transfers

No international data transfers outside the European Economic Area are foreseen.

Data Security

✓ Data is transmitted encrypted at all times through secure protocols (HTTPS, TLS).

✓ Stored on protected and audited servers located within the European Economic Area.

✓ Access to the database is restricted to authorised research personnel under confidentiality obligations.

✓ The app does not require an account: there is no personal credential that could be compromised.

Data Retention

Anonymous data will be kept for the time strictly necessary to carry out the scientific study and to allow reproducibility of its results, in accordance with good research practice. Because the data is anonymous, individual deletion of specific records is not technically possible once it has been received.

Participant Rights

As the data collected is anonymous and cannot be linked back to a specific person, the rights of access, rectification, deletion, opposition, restriction and portability cannot be exercised on individual records. You can, however, withdraw your consent at any time by uninstalling the app and stopping data submission, and you may contact us with any question regarding this policy at daniele.lezzi@onecareai.com. If you believe your rights have not been respected, you may file a complaint with the Spanish Data Protection Agency (AEPD).

Changes to this Policy

This policy may be updated to reflect changes in the project or applicable regulation. The current version is always available within the app and on the project's official site.