Tapspot - Privacy Policy

Tapspot uses the front-facing camera on an Android touchscreen mobile device to take a video of a user whilst they are asked to look at and tap on a number of spots on their device’s screen. The data is to be used for the development of software that can estimate where users are looking on a screen. This policy describes in more detail precisely what information is collected and how it is used and shared.

What data is collected by Tapspot?

Tapspot collects the following four types of data:

“User ID” - The User ID used to log in to the app;
“Video file” - Video taken using the device’s front-facing camera to capture images of users whilst they are looking at, and tapping on, the spots displayed on the screen
“Metadata” - Data about the time at which individuals successfully pressed on each spot on the screen.
“Physical Device data” - Physical data about the device, including the device name, the screen size, screen rotation and camera sensor rotation.

No other data is collected from the phone other than that stated above. To be clear, no personally identifying information (name, address etc) will be collected with the data.

How will the data be used?

The “Video file”, “Metadata” and “Physical Device data” is to be used for the development of software that can estimate where users are looking on a screen. Data from hundreds of individual users will be processed automatically by computers in bulk in order to train a computer program about how individuals ‘typically’ look when they are viewing stimuli in different locations on a screen.

The “User ID”s will be used to ensure that individuals who use Tapspot and send the collected data can be entered into a prize draw.

Who will receive and process the data?

Tapspot has been developed as a collaboration between:

Irisbond Crowdbonding, S.L. (“Irisbond”);
Vicomtech-IK4 (“Vicomtech”)
Lumen Research Ltd (“Lumen”); and
Aimia Coalition Loyalty UK Ltd (“Aimia”).

(Collectively: “we”).

Lumen Research Ltd is a company registered in England, company number 8682432. Its registered office is at Unit 320, 22 Highbury Grove, London N5 2EF. Its data protection registration reference is ZA130772.

Aimia Coalition Loyalty UK Ltd, is a company registered in England under number 4224736. Its registered office is at 6th Floor, 80 Strand, London, WC2R 0NN. Its data protection notification number is Z6913653.

Irisbond Crowdbonding is a company registered in Spain, with registered address at Paseo Mikeletegui nº 56, Donostia/San Sebastián (Guipuzcoa) Spain, and with tax identification number B75091058.

The Tapspot app will send the data securely to Lumen. Lumen will share the “Video file”, “Metadata” and “Physical Device data” with Vicomtech for the stated purpose (see “How will the data be used?”).

Lumen will share the “User ID” data with Aimia. Aimia will, independently, hold data associating User IDs with individual Nectar card holders so that individuals can be entered into the prize draw and contacted if they are successful in the prize draw.

How do I know my personal information is safe?

The data collected by Lumen Research is encrypted using Secure Sockets Layer (SSL) technology. This is a commonly used high standard of encryption technology. This technology is used for both securing the transfer channels and the final storage.

The information will be analysed in aggregate, and the “Video file”, “Metadata” and “Physical Device data” processed by Irisbond will never be associated with the personally identifiable information held by Aimia.

How will we use and disclose information we collect?

We may disclose the information we collect to other third party service providers, to enable them to provide services to us. We may also disclose information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). We may also use or disclose the information we collect from and about you as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our end user license agreement; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

What steps are taken to hold the data securely?

We take reasonable steps to protect your information using physical, electronic or procedural security measures appropriate to the sensitivity of the information in our custody or control, which include safeguards to protect against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.