Privacy Policy

With the Pebbles app (hereinafter ‘App’), the Chair for ‘Developmental Psychology: Infancy and Childhood’ at the Department of Psychology and the Jacobs Center for Productive Youth Development of the University of Zurich (hereinafter ‘Chair for Developmental Psychology’) provides a development diary for parents (or any other caregivers) of children between 0 and 6 years. In addition to physical growth indicators, users of the App (hereinafter ‘User’) enter development phases in the areas of language, motor skills, cognition and social-emotional skills. The development phases and milestones are scientifically founded, and queried according to age. The User receives information about the developmental phases. They can also assign photos to the individual development phases and add their own comments and observations. The individually added content is only saved locally on the User’s device. 
The provision of the App requires extensive processing of User data by the Chair for Developmental Psychology. Most of this data relates to the User’s child/children (see section 3.3 Data collected via the App). This Privacy Policy for the Pebbles app (hereinafter ‘Pebbles Privacy Policy’) provides the User with detailed and transparent information on the nature, scope and purpose of the data collection and use of personal data by the Chair for Developmental Psychology when using the App. 

When registering for the App, the User expressly agrees to the data processing as set out in the Pebbles app Terms of Use and this Privacy Policy. The Chair for Developmental Psychology will continue to develop the App. The data processing by the Chair for Developmental Psychology may also change. The User will be notified of such changes in a suitable manner (by email or at the next login).

3.1 Data disclosure by the User during registration
Registration in the App is possible by entering an email address and password or by using a Google or Apple account. 
If the User chooses to register by email address and password, the corresponding information is processed on a server exclusively responsible for the registration process (see 3.3). This is done to ensure complete separation from the other App data. If the User logs in via a Google or Apple account, no email address or password will be transmitted to Google or Apple. Instead, the User logs directly into the system of the relevant provider and briefly leaves the App. If the login is successful and the User has confirmed to Google or Apple that they want to log in to the App with their Google or Apple account, the App system receives the corresponding confirmation from Google or Apple along with the email address that is stored with Google or Apple for login. In this case, however, the password is not transmitted to the App, as the corresponding verification is always handled by the external providers. The only information transmitted by the App to the external providers is the request to log in, the name of the user account in the App and the time of registration or login. Google and Apple never gain access to the content of the App or the personal and research data stored in it. 
In addition to the email address during login with a Google or Apple account and the password when logging in directly, we also store the selected language in order to send the activation message in the appropriate language. In all cases, the email address is stored separately from the collected research data on a separate web server (see 3.3) and is used to authorise the User.
3.2 Automatically collected data
The Chair for Developmental Psychology logs acceptance of the Terms of Use and the Privacy Policy. The following information is also stored to enable registration: 

• Dates/times when an account was created, edited or deleted
• Dates/times when a user session was created and when it expires (manual log out or automatic log out after a predetermined period)
• Dates/times when a token to reset the password was created or used and when it expires 

No other data is collected automatically; for example, no data on the User’s mobile device is collected and stored.
3.3 Data collected via the App
3.3.1 Data collected and stored on the Chair for Developmental Psychology server

If there is an active internet connection, research data (i.e. answers to questions) are immediately transferred from the User’s device to the University of Zurich servers. If there is no active internet connection, the data is stored in the App and transmitted at a later time. If the User enters the App with the same email address on another device or logs in with a new device, the data is downloaded from the University of Zurich servers to the user’s device. Once the transfer is complete, the data is stored on the server as well as on the device.
The following types of research data are collected within the App and transmitted to the Chair for Developmental Psychology server in anonymised form:
 

• Demographic information about the User, the child and the family environment of the children (e.g. year of birth of the child’s parents, languages spoken in the household, week of pregnancy and birth weight of the child) 
• Development phases of the child in the following areas:
  • Language, e.g. 
    • Has your child already started to combine words, e.g. ‘Mummy banana’?: Yes, No
    • Carrots: Talks, Does not talk
    • Does your child use facial expressions that correspond to the word content?: Scale from 1 ‘almost always’ to 5 ‘never/not yet’
  • Motor skills, e.g.
    • My child can stand up without walking on all fours first: Yes, No
    • My child can walk two to three steps backwards without me holding him/her: Yes, No
  • Cognition, e.g.
    • Put together an age-appropriate puzzle with your child. Can your child properly insert a simple piece into the puzzle?: Yes, No
    • Slowly push a toy car across the table and then to your child. Now, let your child play with it: Yes = Your child pushes the car so that all four wheels touch the table, No = Your child does not move the car, or moves it in another way.
  • Social-emotional, e.g.
    • During everyday activities; how often did your child react immediately and attentively when you called them?: Scale from 1 ‘never’ to 7 ‘always’
    • When playing inside; how often did your child run through the house?: Scale from 1 ‘never’ to 7 ‘always’

Answering all questions on these topics is voluntary. The User can skip questions at any time without giving reasons.

3.3.2 Collected data that are stored only on your mobile device
The following personal data is collected within the App but not transmitted to the Chair for Developmental Psychology: 

• Photos uploaded by the User (photos of the child or other photos)
• Comments on development phases
• Your own comments on special events

The Chair for Developmental Psychology therefore does not have access to this data at any time. Photos, comments and own entries are stored exclusively on the mobile device. The User is responsible for taking suitable measures (e.g. backups) to protect this data from loss or unauthorised access. 
Important note to the User: inadequate security on the device poses a data protection risk. While the Chair for Developmental Psychology stores personal data and research data separately in its databases and the former is only accessible to one employee, all this data is stored on the App User’s personal device. In the event of a cyberattack on the device, hackers can link the anonymously formatted responses stored on the device with the personal data stored locally on the device and thus retrieve all data as personal data. 
For hackers to establish a link between personal data and research data in the event of a cyberattack on the Chair for Developmental Psychology, hackers would need to hack both databases simultaneously in order to untangle the pseudonymisation of the data. All data is subject to end-to-end encryption for transmission to the server or back to the User’s device. Due to the end-to-end encryption and the high security standards of the servers, the most vulnerable access point for the App is on the User’s device. The User can minimise this data protection risk by applying the following measures:

1. Use secure passwords. (see https://www.passwortcheck.ch/)
2. Use different passwords for different services.
3. Do not share access data with other people or divulge it otherwise (the University of Zurich will never ask you to disclose your password to us) 
4. Delete downloaded data (e.g. diary as pdf) after use. 
5. Ensure that the operating system of the mobile phone is up to date.
6. Do not operate the mobile phone with administration rights (rooting or jailbreaking).

3.3.3 Anonymisation process and data storage
As soon as parents enter information in the App (e.g. by answering a question), it is immediately collected under a user profile that does not contain any data that could be used to identify the User. This means that, apart from being stored on a personal device, the data generated by the App and then shared with the Chair for Developmental Psychology is already stored in anonymised form on the mobile phone. This ensures that the Chair for Developmental Psychology only receives the data in anonymised form and that the identity of the User is protected at all times.
There are a total of three databases. The first database contains personal data (name of the child, email address and, if applicable, password); the second contains the access data for the account (see 3.2); and the third database contains the research data (i.e. information on the questions and the corresponding answers, see 3.3.1). This research data is stored separately from the personal data (name of the child, email address and, if applicable, password). The personal data is only collected for the purpose of enabling the use of the App and is not processed together with the research data. The answers are not encrypted in the App, but are protected by the mobile phone’s internal systems and end-to-end encryption during transmission to the Chair for Developmental Psychology’s server.
 

The data provided to the Chair for Developmental Psychology (see 3.3.1) is processed for the following purposes, as approved by the responsible Ethics Committee of the University of Zurich:
Collected data transmitted to the Chair for Developmental Psychology is processed as outlined in Section 9 of the Zurich Cantonal Bill on Information and Data Protection (IDG) to analyse development phases in the areas of motor skills, language, cognition and social-emotional development, as well as the correlations between developmental phases in these areas. The analyses are only performed at group level. This means that we do not perform analyses that relate to the data of individual persons. Therefore, it is impossible to draw any conclusions about the data subjects (individual children and caregivers) from the analyses. Only the data described in section 3.3.1 is analysed. whereby the Chair for Developmental Psychology investigates how certain development areas are related, and whether and how skills already developed in one area can predict improvements in skills in the same area and across the areas.
The User can view their child’s development phases via a visualisation in area and line diagrams, and compare them with other children if desired. These responses can be compared with a standard population (children of the same age). This comparison does not allow conclusions to be drawn on other determinable children.
The Chair for Developmental Psychology’s studies are designed as long-term studies for an indefinite period. Therefore, the research data will be stored indefinitely (at least 10 years). The personal data required to use the App will be stored for as long as the App is made available by the Chair for Developmental Psychology. 

5.1 Disclosure to third parties
‘Third parties’ are persons or companies independent of the Chair for Developmental Psychology who process data for their own purposes. No Third parties are research associates or research cooperation partners of the Chair for Developmental Psychology (associated scientists and external scientists who have concluded a cooperation agreement with the Chair for Developmental Psychology to fulfil the purpose of data processing; see Section 4).
The Chair for Developmental Psychology can make anonymised research data available to other researchers via a suitable repository. This research data is anonymised beforehand to ensure that the data subjects can no longer be identified. Apart from that, the Chair for Developmental Psychology does not pass on research data collected and stored on the Chair for Developmental Psychology server to Third parties for their respective use without the express consent of the User or a legal obligation. 
All employees of the Chair for Developmental Psychology and research cooperation partners are required to maintain confidentiality and sign a non-disclosure agreement.
5.2 Electronic data transfer
User data may be accessible to Third parties (within and outside Switzerland) without the intervention of the Chair for Developmental Psychology.
In particular, device or software manufacturers (such as Apple or Google) may receive personal information when the App is used. They may process and pass on the data according to their own terms of use or privacy policies. This may cause these Third parties to infer a relationship between the User and the Chair for Developmental Psychology. The App fulfils Swiss and European data protection regulations. The App can also be used outside Switzerland. When accessing the App abroad, it is possible that internet networks are used that do not offer the same level of data protection.

As the responsible body, the Chair for Developmental Psychology guarantees compliance with the relevant data protection requirements governed by the Zurich Cantonal Bill on Information and Data Protection (IDG). 
The User opens a user account with their email address and a complex password (at least 8 characters recommended; upper and lower case letters, numbers and special characters required) or by using an existing Google or Apple account, which is required to use the App. The email address is verified by an automated confirmation email sent to the specified email address, to which the Chair for Developmental Psychology has no access. The password is stored in encrypted form on the server. You can log into the App by entering your email address and password or via your Google or Apple account. The server is located within the network of the University of Zurich, and integrated into the highest security zone. 
The transmission of information between the User of the App and the Chair for Developmental Psychology is protected through end-to-end encryption. However, communication with the Chair for Developmental Psychology takes place via the networks of the App User’s telecommunications provider (for example, Swisscom or Salt). These data are generally accessible to Third parties, and may be lost during transmission or intercepted by unauthorised Third parties. Therefore, it cannot be ruled out that Third parties may gain unauthorised access to communication with the Chair for Developmental Psychology when using the App, despite all security measures. However, the App uses end-to-end encryption for data transmission. Therefore, the data cannot be read by Third parties even if it is successfully intercepted. Consequently, while there is always a small risk of Third parties gaining access to the data, it is still encrypted even in those cases. If the App is used outside Switzerland and outside the EU, the User’s data may be transmitted via third countries that may not offer the same level of data protection as Switzerland. However, such access by third countries can never be completely ruled out, even in Switzerland. In certain countries that require access to their citizens’ devices, encryption can also result in the App being denied access to the internet. In such a case, the User’s device would generally not be affected. Only the App would be restricted.

The User may revoke consent to the processing of data at any time, in whole or in part, and with effect for the future, by written notice (including electronically) to the Chair for Developmental Psychology. 
The data will be deleted within seven days of receipt of the request. Depending on the revocation request, either all data related to the child, or the entire user account and all data associated with it, will be deleted. Uninstalling the App on the User’s device does not result in the deletion of data on the servers. To delete information about a child or the user account itself and all associated data, it must be requested via the App (using the ‘Delete child information’ or ‘Delete account’ feature). Alternatively, the deletion can also be requested by email to pebbles@psychologie.uzh.ch.  
Research data that has already been published in anonymised form in a scientific study or on a scientific repository can no longer be deleted. 
The User can also request information about the data contained in a data collection and, if necessary, have the personal data stored at the Chair for Developmental Psychology corrected by sending an email to pebbles@psychologie.uzh.ch or to the UZH Data Protection Department (privacy@rud.uzh.ch) 

Data security also depends on the User’s cooperation. The User shall therefore use the means available to protect their devices and data. Appropriate security measures (in particular activating the screen lock on the smartphone, only accessing secured hotspots or using a VPN service) increase security and further reduce the risks associated with using the App. In addition, the User should regularly back up individually added content (images, comments), as it is only stored locally on the device and is therefore no longer available if the device is defective or lost. While personal data and research data are stored separately in the Chair for Developmental Psychology databases and the former are only accessible to clearly defined employees, all of this data is also stored on the personal device. In the event of a cyberattack on the device, hackers could link the anonymously formatted responses with the personal data on the same mobile phone and thus retrieve all the data as personal data. The main potential vulnerability is therefore the User’s device.

Questions or information on data protection and data processing can be addressed to the Chair for Developmental Psychology by telephone (+41 44 635 74 81), email (pebbles@psychologie.uzh.ch) or in writing (Universität Zürich, Psychologisches Institut, Lehrstuhl Entwicklungspsychologie: Säuglings- und Kindesalter, Binzmühlestrasse 14/Box 21, CH-8050 Zürich); or directly to the UZH Data Protection Department (privacy@rud.uzh.ch).

General
The Chair for Developmental Psychology: Infancy and Childhood of the University of Zurich (‘The Chair for Developmental Psychology’) provides interested users (‘User’) with an application free of charge (‘Pebbles app’ or ‘App’), with which parents (or other caregivers) can document the development of their children between 0 and 6 years and, at the same time, support the research of the Chair for Developmental Psychology.
By installing or using this App, the User agrees to these terms of use (‘Terms of Use’) as well as the Privacy Policy of the Pebbles app without reservation. It is the responsibility of the User to obtain the consent of any other persons with parental authority. By using the Pebbles app, the User declares that all persons with parental authority agree to the use of the app and the documentation of the development phases in the App. These Terms of Use concern the relationship between the User and the Chair for Developmental Psychology and not the relationship between the user and the app store. At the same time, the User accepts the legal provisions of the respective online app store regarding the purchase of the App. The relevant terms of use of the app store apply to the User and the app store in question.

The Chair for Developmental Psychology may engage third parties to provide services. It may integrate third-party services or linked third-party websites into the App. The use of third-party services or linked third-party websites is subject to the relevant provisions of the respective operators of the services and websites.

Important note
The information that the User receives in the App (e.g. on development phases) is purely informative. Under no circumstances may it be used for independent diagnoses, attempts at therapy or the like without consulting a specialist. The consultation and examination as well as the subsequent diagnosis and treatment must be carried out by a specialist (e.g. doctor, speech therapist, psychologist). 

Costs
The App can be downloaded for free. Depending on the telecommunications provider and type of subscription, the User may incur costs for using the App due to the data transmission associated with its use. Roaming charges may be incurred for data transmission abroad.

Device requirements
To use the App, the User must obtain the App via an online app store. The App can be used on Android devices and iOS devices. At the time of publication, the App is compatible with the four latest versions of the respective operating system on Android and the two latest versions on iOS. The App will also be compatible with later versions of both operating systems.

Use 

Creating a profile
After downloading the App, the User has to log in. Users can create and edit their own user profile within the App, which allows them to use the App on multiple devices. 

Consent
The user is aware that information and especially anonymised research data will be shared with the Chair for Developmental Psychology (see Privacy Policy of the Pebbles app). The voluntary disclosure of information and personal data in the context of the App’s functionalities is at the User’s own risk. In particular, the user is aware and expressly agrees that the research data generated by answering questions about development phases in the App will be analysed in anonymised form in the context of scientific studies. The User expressly agrees that their data may be made available in anonymised form (see Privacy Policy) in the context of scientific research publications and for other researchers. Consent to the use of the data relating to the child development phases entered by the user for research purposes can be revoked by sending a written notification (also electronically) to pebbles@psychologie.uzh.ch.

Intellectual property rights, licenses
The Chair for Developmental Psychology hereby grants the User the temporary, non-exclusive, non-transferable right to use this App, which may be revoked at any time. The App is protected by copyright. The User in particular has no right to make technical modifications, or to re-use the respective results.
The actual or attempted reverse engineering or decompiling of the software, as well as any further use of the respective results, are also expressly prohibited, unless permitted by law.

Intellectual property
All App contents (texts, graphics, multimedia content, logos, etc.) are protected by copyright and/or trademark law and belong to the Chair for Developmental Psychology. Any content of the App may only be used for personal use and for non-commercial purposes (e.g. saved or printed). Any other changes, reproductions, links, copies or uses of any content are prohibited without the prior written consent of the Chair for Developmental Psychology.

Updates, upgrades
The Chair for Developmental Psychology is authorised, but not required, to provide updates or upgrades to the App. The User agrees that the Chair for Developmental Psychology may provide updates and upgrades and may make the continued provision of the services dependent upon the User downloading and installing these.

Data protection 
The Chair for Developmental Psychology is entitled to collect and store the User’s email address, as this is necessary to authorise the User. For data processing, the Chair for Developmental Psychology is subject to the applicable Law on Information and Data Protection (IDG) of the Canton of Zurich.
The Chair for Developmental Psychology ensures that the IT service provider commissioned by it is committed to data protection and data security in the same way as the Chair for Developmental Psychology itself. For details regarding data protection, please refer to the Pebbles Privacy Policy.

Data processing on behalf of the Chair
The persons listed below by name, including function and contact details, act as data processors on behalf of the Chair for Developmental Psychology:

Login information (Login)
You can log into the App by entering your email address or via a Google or Apple account. The email address also serves as the username for using the App. It is advisable to choose a secure password with at least 8 characters (upper and lower case letters, numbers and special characters). In addition, the Chair for Developmental Psychology recommends always password-protecting the device on which the App is installed, thereby protecting the personal data that can be accessed at short notice using this App in the event of loss or theft of the end device. The Chair for Developmental Psychology assumes no responsibility in this regard.

Data synchronisation
To ensure confidentiality at all times, data transmission between the User and the Chair for Developmental Psychology server is protected via end-to-end encryption.
Parents can enter information in the App, which is immediately saved under an anonymous user profile. To protect the identity of the User, this data is already stored anonymously on the mobile phone before it is shared with the Chair for Developmental Psychology. The transmission of information between the User and the Chair for Developmental Psychology is protected through end-to-end encryption. However, it is transmitted via the communication networks of the User’s telecommunications providers. Despite the technical and organisational measures taken to protect the personal data of the App User, it can never be completely ruled out that unauthorised third parties may gain access to the communication. Nonetheless, even in these cases, the communication content would still have to be decrypted before it can be read. If the App is used outside Switzerland, data may be transmitted via third countries that may not offer the same level of data protection. However, such access by third countries can never be completely ruled out, even in Switzerland.

Warranty and disclaimer
The Chair for Developmental Psychology does not accept any liability for the information provided by the Chair for Developmental Psychology (especially not for its accuracy, completeness or timeliness). The User must address all concerns and claims relating to the content to the Chair for Developmental Psychology. To the extent permitted by law, the Chair for Developmental Psychology does not accept any liability for direct or indirect damages incurred by the User in connection with any use of the App. including, in particular, damage resulting from transmission errors, technical defects, interruptions, disruptions or unlawful acts of third parties. The App is used at the User’s own risk. The User is solely responsible for the safe handling of the App and the device.
The Chair for Developmental Psychology cannot guarantee uninterrupted and error-free operation of this App. The Chair for Developmental Psychology also does not accept any liability for technical problems and malfunctions or damage to the software. The User is liable for breaches of contract by the User and corresponding claims by third parties. If legal actions are brought against the Chair for Developmental Psychology, the User shall indemnify the Chair for Developmental Psychology against any third-party claims. The User is responsible to the Chair for Developmental Psychology, as well as to third parties, for every contribution posted via their user account, regardless of whether it was written by the user or by unauthorised persons. 

Support
The app store is not responsible for the support of this App. For support enquiries, the User can contact pebbles@psychologie.uzh.ch by email.

App changes and settings
The Chair for Developmental Psychology reserves the right to delete, amend, supplement or improve content, information and settings, or to discontinue the App altogether, at any time for any reason, without any notification, justification or announcement.
The Chair for Developmental Psychology may unilaterally amend these Terms of Use at any time. The User will be notified of any changes to these Terms of Use in an appropriate manner
before they are enforced (e.g. by email or the next time
the User logs in). Continued use of the App indicates that the changes have been accepted. The User is free to delete and uninstall the App immediately and free of charge if they do not agree to the changes to the Terms of Use. After deleting the App, the User no longer has access to the App or the services related to the App. However, the anonymised data provided in the App may continue to be used for research purposes, even after the App has been deleted.

Jurisdiction and applicable law
All questions and disputes relating to this App are governed exclusively by Swiss law. The exclusive place of jurisdiction is Zurich, subject to mandatory jurisdiction.