Terms and Conditions

Terms & Conditions for the BeepTrace app

PLEASE READ THESE TERMS CAREFULLY. BY DOWNLOADING THE APP, YOU AGREE TO THESE TERMS. IF YOU DO NOT AGREE TO THESE TERMS DO NOT DOWNLOAD THE APP.

Introduction

These are the terms of use for the BeepTrace contact tracing app for COVID-19 (also known as BeepTrace and referred to in these terms as the app). The app has been designed to help stop the spread of COVID-19 and also research for the practice of blockchain-based privacy preserving application. In order to do so, we will notify people who have been in close contact with someone who has tested positive for COVID-19.

What the BeepTrace Contact Tracing app does?

The app will operate as the following steps:

  • the BeepTrace will generate a private key by the pseudo-random number.
  • After that, the public key, which is shared with other and might be considered as a personal data, will be generated by using the relevant algorithm based on the private.
  • Then the application will generate a random pseudo-ID, and the part of the pseudo-ID is modified as a BeepTrace service identifier.
  • The modified pseudo-ID is advertised to other devices and stored in the database on the device after being hashed.
  • After activating the application, Beeptrace will continuously listen to devices nearby and register pseudo-ID with correct BeepTrace service identifier. The pseudo-ID will be stored in the database on the device after being hashed.
  • If a user is tested as positive case of COVID-19, then, the contact lists (received pseudo-IDs) will be uploaded to blockchain by ether himself/herself or hospital. Users who activate the BeepTrace-active mode, continuedly download the risky pseudo-IDs of recent 14 days from the blockchain. More detailed procedure can be found in the below diagram.

Description of terms in processing:

Pseudonym: The pseudonym generated by BeepTrace with encryption, it is a random identifier that cannot be traced back to user.

Public Key and Private Key: A cryptographical parameter generated using ECC or RSA algorithm, complied with TLS 1.3.

UUID: An encrypted message containing BeepTrace identifier broadcast using existing definition of Bluetooth 5.0 and Bluetooth Low Energy standards.

IP Address: The user will leave its IP address to the blockchain node when access.

Bluetooth Address: A physical address of Bluetooth module on the hosting device, randomized Bluetooth address is used by BeepTrace service, avoiding privacy breach.

Data Storage: We store your encrypted personal data on Amazon Web Service (AWS), which we will adopt sufficient safeguards (e.g. asymmetric encryption, including ECC Asymmetric-Key Algorithm and RSA cryptosystem) to keep users’ privacy and data protection right and ensure the data security. Without your private key or authorization, the content of your data cannot be read. Users’ private key and relevant encrypted data (e.g. encrypted diagnosed information) will be store in user’s local devices.

Any other data or term need to be explained here?

Use of BeepTrace Contact Tracing app

  • Who is the app intended for?

The BeepTrace app is free to download and use by anyone who is at least 16 years of age. The app is only capable of processing positive Covid-19 test results from people

  • Technical requirements and functionality

e.g., the requirement of OS, hard devices, GPS?

Tthis APP requires at least a mobile device with Android OS 5.0 LOLLIPOP (API 21) to install and open it. Both Bluetooth and Fine Location permissions are needed to implement passive tracing mode in current version; Fine Location, Phone State and External Storage permissions will be needed to implement active tracing mode in future version. Internet access are needed to download data from and upload records to our server.

  • How to provide feedback on the app?

University of Glasgow??? BeepTrace Project Research???

  • Your privacy & data protection rights

We only use any personal information we collect through your use of the app and the Services in the ways set out in our Privacy notice. The Privacy notice confirms the terms on which your personal information is collected and used in respect of your use of the app and the Services.

  • app store’s terms also apply, in the case the app is distributed locally via the university IT, University of Glasgow IT general terms and conditions apply???

You must be 16 to accept these terms and to download and use the app

You must be at least 16 years of age to accept these terms and to download and use the app. We are not liable if you allow or enable a person under 16 years of age to install or use the app.

Only you should use the app and you should not permit anyone else to use your app

For the app to work properly, use of the app and the Services should be personal to you. Use of the app by multiple individuals from the same device undermines the accuracy and efficacy of the app’s contact tracing function (if enabled). If you let another person use the app on your device or you use the app on the device of another person, this could lead to exposure notifications being provided that are not accurate. If you permit someone else to use the app or Services on your device then you are responsible for that person’s use and you must ensure that the person knows about and complies with these terms.

We strongly recommend that, if you sell any device on which the app is installed, you first remove the app from the device and delete the app data using device settings.

The app can be used by any person in assistive, medical, care or similar capacity on behalf of another person.

Changes to these terms

We may need to change these terms to reflect changes in law or best practice or to deal with additional features we introduce.

If we change these terms, this will be done as part of a version change to the app. You will be prompted to update the app from the app store and, as part of that update, you will be provided with and asked to accept the updated terms.

If you do not update to a new version, you will have to discontinue use of the app and the Services. This will be your choice.

Updates to the app and changes to the Services

From time to time, we may automatically update the app and change the Services setting to improve performance, enhance functionality, reflect changes to the operating system or address security issues. Alternatively, we may ask you to update the app for these reasons. If you choose not to install such updates or if you opt out of automatic updates, you may not be able to continue using the app and the Services, and this may also compromise the security of your data or your device.

If someone else owns the phone or device you are using

If you download and install the app onto any phone or other device not owned by you, you must have the owner’s permission to do so. You will be responsible for complying with these terms, whether or not you own the phone or other device.

We are not responsible for other websites you link to

The app or the Services may contain links to other independent websites which are not provided by us, such as websites for purposes of booking a test. Such independent sites are not under our control, and we are not responsible for and have not checked or approved their content, terms & conditions or their privacy policies (if any). You will need to make your own independent judgement about whether to use any such independent sites.

Your obligations when using the app

You must:

  • Ensure, to the extent it is reasonably possible for you to do so, that all information that you provide in the course of using the app and the Services is accurate, complete, honest and not misleading, to the best of your knowledge, information and belief;
  • Not knowingly or recklessly use the app or the Services in a manner that would generate exposure notifications that are false or inaccurate;
  • Not use the app or any Services in any unlawful manner, for any unlawful purpose, or in any manner inconsistent with these terms, or act fraudulently or maliciously, for example, by hacking into or inserting malicious code, such as viruses, or harmful data, into the app, any Services, the app backend or any operating system;
  • Not infringe our intellectual property rights or those of any third party in relation to your use of the app or any Services;
  • Not transmit any material that is defamatory, offensive or otherwise objectionable in relation to your use of the app or any Services;
  • Not use the app or any Services in a way that could damage, disable, overburden, impair or compromise our systems or security or interfere with other users; and
  • Not collect or harvest any information or data from the app or any Services or our systems or attempt to decipher any transmissions to or from the servers running any Services

Intellectual property rights

We own the intellectual property rights in the current version of app. For the future potential amendments to the core app, the intellectual property rights also belong to us.

You do not own any intellectual property rights in, or to, the app, the Documentation or the Services other than the right to use them in accordance with these terms.

Our responsibility to you

We are responsible to you for foreseeable loss and damage caused by us. If we fail to comply with these terms, we are responsible for loss or damage you suffer that is a foreseeable result of our breaking these terms or our failing to use reasonable care and skill, but we are not responsible for any loss or damage that is not foreseeable. Loss or damage is foreseeable if either it is obvious that it will happen or if, at the time you accepted these terms, both we and you knew it might happen.

We are not liable for business losses. If you use the app, the Documentation and the Services for any commercial, business or re-sale purpose we will have no liability to you for any loss of profit, loss of business, business interruption, or loss of business opportunity.

Limitations to the app and the Services. While the app provides notification to those who may have been exposed to a confirmed positive case, providing advice to self-isolate, the app provides no additional functions.

You can end your use of the app and what happens if you do

You can stop using the app at any time, and you can delete it at any time from your device. When you uninstall the app, the contract between us (as set out in these terms) comes to an end. If you delete the app, you will not be able to access the Services, and all rights granted to you by these terms will cease. Any data held on your phone can be removed as indicated in the app instructions.

We may end your rights to use the app and the Services if you break these terms

We may end your rights to use the app and Services at any time if you have broken these terms in a serious way. If what you have done can be remedied, we will give you a reasonable opportunity to do so.

We may transfer our rights and obligations to someone else

We may transfer our rights and obligations under these terms to another organisation.

We will not transfer your data to any third party

We will not share your personal data with anyone else. If it is the case in our future research, we will inform you and obtain your consent to do so.