top of page

OpenHeal Privacy Policy

Last Updated: May 21, 2024

Welcome to OpenHeal!

OpenHeal is an initiative of professionals and institutions dedicated to creating a friendly platform for serious games for the assessment, monitoring and rehabilitation of people with disabilities. Our headquarters are located in São Paulo, Brazil, and we have collaborative operations in several locations to help develop health and technology studies, and provide our products and services.

 

This privacy policy describes the different ways in which we may collect, use and share information on, through or in connection with the OpenHeal Services. If you have any questions, you can always contact us as described in “Contact Us” below.

 

When we refer to "OpenHeal" (or similar terms such as "we" or "us") in this privacy policy, we mean the entire OpenHeal initiative responsible for controlling and protecting your information.

What Information Do We Collect?

The types of information we collect depend on how you interact with us. Generally, we collect information in three main ways: A) when you provide it to us, B) automatically when you use the OpenHeal Services, and C) from service providers and third parties.

 

A. Information You Provide

You may provide us with different types of information depending on how you interact with the OpenHeal Services. Sometimes we ask you to provide specific information, such as when we need it to provide parts of the OpenHeal Services to you (for example, asking you to provide your date of birth or complete an online registration process). If we ask you to provide us with information in these cases and you choose not to do so, you may not be able to access the relevant OpenHeal Services and/or some features may not function as intended.

 

For example, to create an account with OpenHeal, you need to provide basic registration information such as your name, a public display name, password, country where you reside, and email address. If you wish to make a purchase, we may ask you to provide payment-related information (such as your credit card number and expiration date) to complete the transaction. Additionally, many of our services require your date of birth and health condition so that we can determine what features we can offer and what settings to apply to your account based on that information.

 

We also collect information you voluntarily provide to sign up for email alerts, use social features such as forums or chat, register for early access to our games, use our development tools (including creating and publishing games and other content), enable two-factor authentication, register for or participate in our events, respond to surveys, or contact us via player support or customer service requests. If you use our voice chat feature and voice recording is enabled in a voice channel, snippets of voice chat audio data will be stored on your device and on the devices of participants in the voice channel. If a violation of our Community Rules is reported, these snippets may be transmitted to OpenHeal to help us enforce these rules. If you enter a contest or competitive event, or participate in our Creator Support or Island Maker programs, we will collect your registration information and other information we may need to help confirm your eligibility and process payments. We collect any information you choose to provide in these or other similar cases.

 

If you are a professional using OpenHeal, we may request additional information, such as your professional registration, to verify your identity and credentials with the relevant board or regulatory body. Furthermore, we may collect information about your patients, always strictly respecting professional secrecy and applicable privacy standards. This information is essential to guarantee the integrity and security of the services offered by OpenHeal, as well as to provide an environment of trust and quality for all users.

 

If you represent an institution, such as a clinic, laboratory, research department or hospital, OpenHeal may request additional information about your organization. This information may include the institution's name, address, contact details, registration credentials and professional staff information. We can also collect data related to patients cared for by the institution, always in compliance with privacy and medical confidentiality standards. This information is essential to ensure that OpenHeal services are used appropriately and safely, providing high-quality and reliable support for institutions and their patients.

 

B. Information We Collect Automatically

 

We collect certain information automatically when you visit, access or use the OpenHeal Services. This includes information about your use of the games or applications, purchases, entitlements and other activities on the OpenHeal Services, typically associated with your account (if you are logged into your OpenHeal account or use a third-party account to access the OpenHeal Services) or with an identifier that we assign to your device or profile. While the specific types of information we automatically collect may vary, it generally includes:

 

- Usage information and statistics about how you interact with the OpenHeal Services, including what application you used or game you played, how long you used or played it and when, gameplay attempts, progression and results, saved preferences, performance reports crashes, the URLs of our websites that you visited, URLs of referring and exit pages, page views, time spent on a page, number of clicks and platform type;

- Technical information about your computer, device, hardware or software that you use to access our Services, such as IP address, device identifiers, your Internet service provider, plugins or other transactional or identifier information for your device (such as device make and model, information about device operating systems and browsers, or other specifications related to the device or system); It is

- The general location of your device, which we typically derive from your device's IP address.

 

The OpenHeal Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or logging tools that may be stored on your device. They help us, our service providers and third parties recognize your device and provide information about how you use and interact with the OpenHeal Services. For example, they support our ability to authenticate users, remember preferences, manage advertising, personalize experiences, and perform data analysis.

 

OpenHeal Services use video capture resources and accessibility records for pattern recognition, recordings and recording of events in interaction with the games and activities proposed by OpenHeal or by the professional during the therapeutic process. This includes video recordings of game sessions and app usage, as well as detailed records of how you interact with accessibility elements such as game buttons and controls. This data is crucial for understanding how users interact with our services and identifying areas for improvement.

 

We use this detailed information to train our machine learning models to recognize patterns and identify digital health biomarkers. The data captured helps create algorithms that can predict behaviors and health outcomes based on users' interactions with games and activities. This includes movement analysis, response time, usage patterns, and other performance metrics that are essential to the personalization and effectiveness of therapeutic interventions. This data is used for mathematical modeling of activities, allowing us to create accurate and effective models that support the development of new therapeutic methodologies.

 

Please note that if certain features on the OpenHeal Services are provided by third parties, those third parties may also use automated means of collecting data and record information about your use of the OpenHeal Services, its services or third party websites over time. For example, when you use OpenHeal Services that include third-party software, those third-party providers may collect information through their technology. These features are subject to the privacy notices and policies of those third parties.

 

C. Information We Collect from Other Sources

 

In some cases, we may also receive information about you from service providers and third parties in connection with your use of the OpenHeal Services or your interactions with us on other platforms.

 

For example, some other developers allow you to use your OpenHeal account to log into their services. And if you choose to link your OpenHeal account to your account on a third-party social network (such as Facebook), gaming platform (such as Steam) or other similar website or service, or if you interact with an advertisement for one of the OpenHeal Services on an external website or service, the company that operates that website or service may share certain information with OpenHeal in accordance with its own privacy practices. The privacy settings on the other company's website or service typically control the specific types of information they can share with OpenHeal, so please review and update them regularly. Common examples for linked accounts may include your third-party account display name and user ID, as well as information associated with your device, name, and email address. For participants in our Creator Support program, we may also collect the number of followers on your social media account for program eligibility purposes.

 

You may also purchase, download, or access certain OpenHeal Services on or through services operated by third parties (such as the Microsoft Store). If you do so, they may provide us with information to facilitate your access to and use of the OpenHeal Services. This typically includes information such as your display name, user ID, and device and region information.

 

D. Fraud Prevention and Anti-Cheating

Providing users with a fair, balanced and competitive experience on the OpenHeal Services is extremely important to us. We strictly enforce prohibitions against cheating, hacking, account theft, and any other unauthorized or fraudulent activity on the OpenHeal Services. We use a variety of fraud prevention and anti-cheat technologies to help us identify and prevent malicious activity. These services may collect and analyze data about your computer and the software on your computer to detect cheating.

How Do We Use Information?

Generally, we use the information we collect to offer, improve, personalize, analyze and promote the OpenHeal Services. Additionally, we carry out scientific studies in collaboration with universities, using de-identified user data.

 

The information we collect is used for a variety of purposes, including:

 

Account Creation and Management: We use the information to create, verify, and manage user accounts, as well as the features associated with those accounts.

Service Supply: Information allows us to provide the OpenHeal Services, offer technical support, respond to inquiries, process transactions, and communicate with users through service and account-related messages and updates.

Development and Improvement: We use data to develop, deliver and improve the OpenHeal Services and other offerings, including those offered in partnership with third parties.

Experience Personalization: Information helps us personalize your user experience by presenting content or resources that are more aligned with your interests. For example, if you frequently play a certain type of game, we may suggest other similar games that may interest you.

Promotion of Services: We use data to manage, personalize and measure the effectiveness of our advertisements, promotional offers, surveys and events.

Test Management: We collect and use feedback during alpha, beta, or early access testing to improve our services.

Data analysis: We perform analysis on how OpenHeal Services are used to better understand, improve, and customize them.

Compliance with Legal Obligations: We use the data to comply with legal or contractual obligations and to apply our terms of use.

Security: We use the information to protect the OpenHeal Services, detect fraud, and protect both OpenHeal and its users from illegal or harmful actions.

Scientific studies: In collaboration with universities, we use de-identified data to conduct scientific research that contributes to advancement in the field of health and rehabilitation.

 

Processing of Aggregated or Anonymized Information

 

We also process information that does not individually identify users, including aggregated or de-identified information we create or collect from other sources. This information helps us better understand larger groups of users. If we combine this information with data that identifies you, we will treat it as described in this privacy policy. However, this policy does not restrict our ability to process information that does not individually identify users, and we may use and disclose aggregated or de-identified information for any reason permitted by law.

How Do We Share Information?

We may share some of the information we collect to help operate and improve the OpenHeal Services. Depending on how you interact with us, common examples of sharing include partnerships with Universities and Healthcare Institutions. We may also share with other game developers to allow features in games to be expanded, such as social chat features, for example. Information such as your display name, content you create or share, basic gameplay statistics, and other similar information may be publicly accessible.

 

We may also share information when we believe it is necessary to comply with the law or protect you, OpenHeal or others, such as in response to a court order or subpoena, in an investigation of fraud or other illegal activity, a violation of our terms or policies, or if necessary to protect others from death or serious harm to body or property.

 

We may share information with other OpenHeal entities to help support the OpenHeal Services, and in connection with certain types of corporate transactions, such as in the event of a restructuring or sale of all or a significant portion of our business. With your permission, we may share information, such as when you link external accounts to your OpenHeal account or use your OpenHeal account to log into third-party games and services or participate in cross-promotional events.

 

We may also share information that does not identify you with third parties, including aggregated or de-identified information. No mobile phone number provided to OpenHeal for security purposes will be shared with third parties or affiliates for marketing/promotional purposes. Third parties with whom you interact through the OpenHeal Services may have different privacy practices than OpenHeal, so we encourage you to review their privacy policies before sharing your information with them.

Children's Privacy

OpenHeal is designed to be accessible and safe for users of all ages, including children. We collect information about users' ages to ensure we provide an experience appropriate to their age group and location. This section is intended for parents and guardians to explain our privacy practices with respect to children (under the age of 13 or the age of digital consent in the user's region, whichever is higher).

 

Children's Accounts

 

When a user indicates that they are a child, they are placed on a "Restricted Account" until they are no longer considered a child as defined above, or until a parent or guardian provides additional permission and turns on parental controls. Restricted Accounts can access OpenHeal games, but features such as voice chat and real money purchases are disabled. We collect limited personal information from these accounts to operate them in compliance with applicable privacy and child protection laws.

 

Information Collected from Restricted Accounts

 

To determine age and apply appropriate settings, we collect the user's date of birth and country. We also collect a parent's or guardian's email address to send notifications and request consent for additional features. This email is deleted if the parent or guardian does not respond within 14 days. Additionally, we collect the user's email address for login, stored encrypted and secure. Persistent identifiers such as IP address, gaming platform account IDs, required tracking technologies, and device identifiers are used to provide and maintain the OpenHeal Services, protect the security and integrity of users, ensure legal and regulatory compliance, and facilitate game customization, such as progress and choosing an avatar.

 

If a child with a Restricted Account contacts us with a question or request, any personal information provided will be deleted after the concern has been resolved. When we share personal information from Restricted Accounts externally, it is to help us fulfill these limited purposes, such as sharing with consoles to help run the game or with our cloud storage provider.

 

Notification, Consent and Parental Controls

 

We collect the email address of a child's parent or guardian to send a notification that the child has created a Restricted Account. This notice allows them to review our privacy practices for non-restricted accounts, provide consent for a non-restricted account that enables additional features, and set up parental controls. Parents or guardians must complete our verification process to provide consent for a non-restricted account.

 

When we identify that a user is under 13 years of age, the account is created in the name of the parent or guardian. These controls allow parents to change settings made during the permission process and further personalize the child's experience. Parents may review their child's personal information maintained by OpenHeal and delete their child's account (which deletes the personal information and stops future collection).

 

Child and Parent Privacy Rights

 

Child users and their parents can exercise their privacy rights individually. Parents and guardians can change choices they make about the use of specific features such as voice chat, review their child's personal information maintained by OpenHeal, and delete their child's account. To exercise these rights or ask questions about how we handle children's personal information, please see the "Contact Us" section below or go directly to our Parent Support Request form.

Your Choices and Controls

At OpenHeal, we seek to provide you with meaningful choices about the personal information we collect. The available options may vary depending on the nature of your interaction with us and the OpenHeal Services you use.

 

You may request access to, correction of, or deletion of your personal information collected by us. To do so, please submit your requests as described in the "Contact Us" section below. We may ask for additional information to verify your identity before completing your request.

 

You can change your email marketing preferences at any time by using the unsubscribe mechanism provided in our marketing emails, updating your OpenHeal account settings, or contacting us.

 

You can modify the privacy settings on third-party websites (such as social networks) or platforms (such as console providers) to limit the information that can be shared with us. You can also change the settings on your browser or mobile device to block, manage, delete or limit tracking technologies such as cookies. Please note that in some cases, blocking or disabling cookies may affect the functioning of the OpenHeal Services and some features may not be available.

 

If you are under 18 and have an OpenHeal account, you can request that we remove or anonymize certain content that you have provided on the OpenHeal Services. Parents and guardians can adjust their children's account settings by going to parental control settings.

Security

We adopt appropriate administrative, technical and physical measures to protect your personal information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing. In some cases, your information is accessible when you log in to a resource we offer. In these cases, it is important to keep your user credentials and password confidential and secure to protect your information. If we become aware of any unauthorized disclosure of your personal information, we will notify you as required by law and take necessary steps to help protect your information.

Updates

This policy may be updated periodically to reflect changes in our practices or relevant laws. When we do this, we will change the date at the top of the policy. In some cases, we may also notify you of material changes via email or within the OpenHeal Services. Please review this policy regularly to ensure you understand your relationship with OpenHeal and the ways in which we may collect, use and share information in connection with the OpenHeal Services.

Contact us

If you have questions or concerns about the OpenHeal Services, such as gaming-related issues, difficulty accessing your OpenHeal account, bugs or other technical issues, payment issues, or content and rights issues, please contact our User Support teams.

 

To learn more about our privacy practices or this policy, please send your questions to: game@openheal.org.

bottom of page