DataOne — Privacy Policy

Last updated: 10 June 2026 · Published by Signadyne Labs · Contact: support@signadynelabs.com

This privacy policy explains what data the DataOne field-data collection application ("the App") collects, how it is used and stored, and who it is shared with. It applies to the DataOne mobile app (Android) and the associated DataOne web platform.

DataOne is an organizational field-data collection tool. It is not a consumer application. The App is distributed only to authorized enumerators, transcribers, supervisors, and administrators ("Users") working on Signadyne Labs–managed research projects. End users (respondents) do not install the App; their participation is recorded by an enumerator on the enumerator's device with their consent obtained before recording.

1. Information We Collect

1.1 From Users (people using the App)

• Account information: email address, display name, phone number, role (enumerator / transcriber / supervisor / admin), assigned supervisor, and approval status.
• Authentication identifiers issued by Amazon Cognito.
• Device information: model, Android OS version, app version. Used for compatibility diagnostics and to support enumerators whose recordings did not upload successfully.
• Crash diagnostics: when the App encounters an error, a crash report containing the error message, stack trace, app version, device model, and operating system version is sent to Sentry (our crash-reporting provider) so we can fix bugs. Crash reports do not include recording content, respondent identifying information, or authentication tokens.

1.2 From Field Sessions (recorded by enumerators with respondent consent)

• Audio and video recordings of the field interview.
• Photographs the enumerator captures during the session.
• Handwritten transcript page images the enumerator photographs during the session.
• Respondent metadata: name, phone number, demographic details (age band, gender, education, occupation), and any session-specific notes entered by the enumerator.
• Session metadata: GPS coordinates (latitude, longitude, accuracy), village/city, project, language, and dialect.
• Annotations later added by transcribers and reviewers: transcripts, emotion / sentiment / intent labels, entity tags, and review comments.

2. How We Use the Data

Field-session data is collected exclusively to build and improve artificial intelligence and machine learning training datasets for the research project(s) the recording was captured under. Data is processed within the Signadyne Labs platform by authorized users in the supervisor, transcriber, and administrator roles. Account information is used to operate the platform: authenticate users, route work to the correct supervisor, and surface activity in dashboards visible to that user's supervisors and administrators.

3. Data Sharing

We do not sell user or respondent data to third parties. Data is shared only with the following categories of recipients:

• Authorized internal personnel (admins, supervisors, transcribers) within Signadyne Labs and partner research organisations who require access for project work.
• Sub-processors who provide hosting and operational infrastructure on our behalf:
  • Amazon Web Services (data storage, compute, and content delivery — ap-south-1 region, Mumbai).
  • Sentry (Functional Software, Inc.) for crash diagnostics. Crash reports are scrubbed of recording content and tokens.
• Research counterparties who commission the dataset being collected. These counterparties receive the de-identified training data per the terms of the specific research contract. They do not receive enumerator account credentials or live GPS tracking data.
• Legal authorities: only where compelled by valid legal process under applicable law.

4. Storage and Security

• All data is stored on Amazon Web Services in the Mumbai region (ap-south-1).
• Data is encrypted at rest using AWS-managed AES-256 encryption (S3 and DynamoDB server-side encryption) and in transit using TLS 1.2+ (HTTPS).
• Access is restricted by role-based authentication. Enumerators see only their own sessions. Transcribers see sessions assigned to them. Supervisors see their team's sessions. Administrators see project-scoped data.
• Authentication tokens (Cognito ID tokens) expire automatically; the App refreshes them silently while in use.

5. Retention

Field-session recordings are retained for the duration of the research project they were collected under, plus a buffer period required by the research counterparty for verification (typically up to 24 months from collection). Account information is retained while the user account is active and for a period thereafter as required by accounting and record-keeping obligations. Crash diagnostics are retained for 90 days in Sentry.

6. Your Rights

You may request access to, correction of, or deletion of your account information at any time by emailing support@signadynelabs.com. Respondents who wish to withdraw their consent and have their session recording deleted may make such a request through the enumerator who captured the session, or directly via the contact email above. We will honor verified deletion requests within 30 days, subject to legal hold exceptions where applicable.

7. Permissions Requested by the App

Permission	Why we request it
Camera	Recording session video and capturing photographs / handwritten-transcript page images.
Microphone	Recording session audio.
Location (precise)	Capturing GPS coordinates of the field session at the moment of recording. Location is captured only during the session-setup step; we do not track location continuously in the background.
Storage (app-private)	Saving recordings and metadata on the device until they upload to the platform.
Internet / Network state	Uploading recordings; reading whether the network is available so the app can defer uploads on cellular.
Foreground service	Running the background upload service so large recordings finish uploading even when the App is not in the foreground.

8. Children

The App is not directed at children under 18. We do not knowingly collect account information from children under 18. Respondents who are minors must give consent only with their parent or guardian present, in accordance with the research project's protocol and applicable law.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to active users via in-app notice and / or email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions, requests, or complaints about this privacy policy or our data practices may be sent to support@signadynelabs.com.