3rd parties: Advertising platforms, mobile analytics companies, administrative authorities, financial institutions, partner networks, affiliates, and other entities connected with running the application both within and outside of the U.S.
App Account Requirements: After downloading the app on your smartphone, you may be required to set up an account before using the app. Information required may include name, valid email, etc. Some companies may permit you to set up an app account by accessing information from other accounts (i.e., Facebook, Instagram, Gmail, etc.).
Buyers: Any entity that has a significant ownership of the app company. California Consumer Privacy Act (or “CCPA”) provides California consumers the right to: request to know more details about the categories and specific pieces of personal information, delete their personal information, opt out of any “sales” that may be occurring, and not be discriminated against for exercising these rights.
Mood rating: Many apps give you the option of tracking the user’s well-being, usually by having them enter mood ratings.
Device data: Device type, operating system, system performance, mobile network carrier, etc.
Passive data: Data that comes from interacting with the app, which may include browsing logs, app version, access times/dates, geolocation, pages viewed, cookies, IP address, etc. If you set up the app account through another app (i.e. Facebook, Instagram, Gmail, etc.), the app may also collect passive data from the other app used to create your app account.
Payment data: Information collected when purchasing or canceling an app subscription, which may include name, credit card information, billing address, product description, price, subscription or free trial expiration date, and time and date of the transaction, etc.
Protected Health Information (PHI): Health information such as prescriptions, diagnosis, etc. protected under the Health Information Privacy and Accountability Act (HIPAA).
Service providers: Companies providing technological platforms and support services to the app company.
User: Person using the app. Usually the owner of the device, but may be a child permitted to use the app on a parent’s/caregiver’s device.
User-entered data: Information entered into the app by the user. It includes personally identifiable information (PII) entered to set up the account, including PII about other family members. This also includes information already entered into the app account if the user received the account through a provider or other entity. User-entered data also includes self-monitoring (i.e., mood tracking) and any information exchanged through emails or inapp communication with the company/app.