1. Introduction
R3TA LLC ("R3TA," "we," "us," or "our") operates an observational research registry that collects consented, de-identified human data for analytical and publication purposes. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website (the "Website") or participate in the R3TA research registry (the "Registry").
By using the Website or submitting data to the Registry, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Website or participate in the Registry. We may update this Privacy Policy from time to time; the "Last Updated" date at the top of this page indicates the most recent revision.
2. Information We Collect
2.1. Account and Contact Information
When you create a research account or contact us, we collect:
- Email address
- Full name (optional display name)
- Authentication credentials managed by our identity provider
- Any messages you send through contact forms
2.2. Registry Data
With your explicit consent, the Registry collects research data that you voluntarily submit, including:
- Baseline measurements (e.g., weight, waist circumference, body composition)
- Longitudinal check-in measurements (e.g., weekly weight and waist updates)
- Self-reported scores (e.g., energy, appetite, sleep quality)
- Optional laboratory marker values that you upload
- Optional wearable-derived metrics that you provide
- Adverse event reports
- Cohort assignment and participation dates
All submitted measurements are stored alongside a contributor identifier, not your account identity, for analytical use.
2.3. Automatically Collected Information
When you visit the Website, we automatically collect technical information such as:
- Internet Protocol (IP) address
- Browser type and version
- Operating system and device information
- Pages visited and time spent on the Website
- Referring URLs
We use this information to operate, secure, and improve the Website.
2.4. Communications
We collect information from your communications with us, including email correspondence and support inquiries.
3. How We Use Your Information
We use the information we collect to:
- Operate and secure the Website and Registry
- Authenticate users and manage accounts
- Aggregate and analyze de-identified registry data
- Produce public charts, reports, and publications based on aggregated data
- Communicate with you about your account, submissions, and Registry updates
- Respond to inquiries and provide support
- Comply with legal obligations and protect our rights
We do not sell, rent, or trade your personal information for monetary consideration.
4. De-identification and Aggregate Disclosure
4.1. De-identified Research Data
Registry measurements are stored with a contributor identifier that is separate from your account identity. Before any public display or external publication, data is aggregated and de-identified so that individual contributors cannot reasonably be identified.
4.2. Minimum-Cell Suppression
To protect contributor privacy, public charts, tables, and reports are suppressed until a group contains at least 5 participants. This means that aggregate statistics, trend lines, and charts will not be displayed for any cohort, subgroup, or time window with fewer than 5 underlying contributors. Once the minimum threshold is met, only aggregated values (e.g., means, counts, percentages) are shown; no individual data points are exposed.
4.3. Public Data Explorer
The public Data Explorer displays only aggregated, suppressed results. Individual contributor records are never exposed to the public. If you are a contributor, your personal dashboard shows only your own data.
5. How We Store and Protect Your Information
5.1. Storage
Registry data is stored in a managed cloud database with encrypted connections. Account credentials are handled by our authentication provider. Backups are retained with the same access controls as the primary database.
5.2. Security Measures
We implement reasonable administrative, technical, and physical safeguards to protect your information, including:
- Encrypted data in transit (TLS/SSL)
- Role-based access controls for administrative functions
- Row-level security policies limiting data access
- Regular review of access logs and security configurations
No system is completely secure. We encourage you to use a strong, unique password and to keep your login credentials confidential.
6. Data Sharing
We may share information only in the following limited circumstances:
- Service providers: We use third-party providers for hosting, authentication, analytics, and email delivery. These providers are contractually obligated to use information only for the services they perform on our behalf.
- Legal compliance: We may disclose information if required by law, court order, or legal process, or to protect our rights, property, or safety.
- With your consent: We may share information when you provide explicit consent.
We do not share individual-level registry data with third-party researchers or commercial partners. Any external research collaboration uses only aggregated, de-identified datasets that meet the minimum-cell suppression rule.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain sessions, understand Website usage, and support security. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to sign in or use certain features.
8. Your Choices and Rights
Depending on your location, you may have rights regarding your personal information, including:
- Accessing the information we hold about you
- Correcting inaccurate information
- Requesting deletion of your account and associated data
- Withdrawing consent for future Registry data collection
To exercise these rights, contact us at manly@noorcap.co. We will respond within a reasonable timeframe and in accordance with applicable law.
9. Data Retention
We retain your account information for as long as your account is active or as needed to provide you with the Website and Registry. De-identified aggregate datasets may be retained for research integrity and reproducibility purposes even if your account is deleted, provided that individual identifiers have been removed.
10. Children's Privacy
The Website and Registry are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it.
11. International Users
The Website and Registry are operated from the United States. If you access the Website from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or for legal, regulatory, or operational reasons. We will post the revised policy on this page with an updated "Last Updated" date. Continued use of the Website or Registry after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: manly@noorcap.co
Entity: R3TA LLC