Health Data Statement

This English version is a translation provided for convenience. In case of conflict the Turkish version prevails.

This statement explains how the EnaResearch mobile app, developed by ENA Innovation Sağlık ve Yazılım Teknolojileri San. Tic. A.Ş. ("ENA Innovation"), uses Apple Health (HealthKit) data on iOS and Health Connect data on Android. For general information, see the Privacy Policy.

1. Who is the app for?Copy Anchor Link

The EnaResearch mobile app is for people taking part in a study run by an organization or researcher (for example a hospital, university, research center, research lab, research group, department, clinic or independent researcher). Using the app requires a 6-character participant code and a one-time activation key from the research team. Participants do not have accounts.

The app is not a medical device. It is not used for diagnosis, treatment, clinical decision support or monitoring your health, and it does not give you health advice.

2. What data is read?Copy Anchor Link

The app reads only the measurement types the study allows. Depending on the study, these may include some of the following:

• heart rate and heart rate variability (HRV)
• steps, distance and flights climbed
• calories (energy burned) and workouts (type and duration)
• blood oxygen saturation (SpO₂) and respiratory rate
• skin or wrist temperature
• sleep
• cardio fitness (VO₂max)
• blood pressure, blood glucose and weight (usually from a connected measuring device), and the context recorded with them (for example whether glucose was measured before or after a meal)
• body temperature, height, body fat and lean body mass
• walking quality and steadiness (for example walking speed, step length, stair speed)
• heart health events recorded by your watch (for example high or irregular heart rhythm, sleep apnea) and heart rate recovery
• mindfulness sessions, mood entries and the total scores of the GAD-7 and PHQ-9 questionnaires. Individual questionnaire answers are not read.
• nutrition (energy, nutrients, water, caffeine and alcohol as totals per 5 minutes; individual food names are not read)
• symptoms you record (for example headache or nausea, with their severity)
• hearing and environment (sound levels, hearing test results, time in daylight, UV exposure)
• other activity and body measurements (for example exercise and stand time, workout speed, power and cadence, BMI, waist circumference, lung function, insulin doses, inhaler use, falls, handwashing)

Reproductive health and sex life data. If, and only if, the study explicitly allows them, the app may also read menstrual cycle and fertility data (for example menstrual flow, cycle notifications, basal body temperature, cervical mucus, ovulation, pregnancy and progesterone test results), pregnancy, lactation, contraception, menopause and sexual activity. EnaResearch marks these types as sensitive: the research team is reminded that its ethics approval and the participant information must cover them explicitly, and you are asked for permission for each type separately on your phone's permission screen. You can refuse these types and still take part in the rest of the study unless the study protocol says otherwise.

The app does not ask for permission for a measurement type the study does not need. The app does not write data to Apple Health or Health Connect; it asks for read permission only.

3. Why is it read?Copy Anchor Link

The data read is used only to transfer it to the EnaResearch environment of the organization running the study the participant takes part in. The organization processes this data according to its study protocol and ethics approval; the organization is the data controller for this data, and ENA Innovation is a data processor acting on the organization's behalf.

4. Purposes we do not use the data forCopy Anchor Link

Data read from Apple Health and Health Connect is:

• not used for advertising, marketing or ad targeting;
• not used for profiling;
• not sold, and not given to data brokers, advertising platforms or information resellers;
• not shared with anyone other than the organization running the study (the sub-processors that provide hosting and operating services on the organization's behalf act only on the organization's instructions and for this purpose);
• not used to train AI models.

If the organization enables the optional AI assistant in EnaResearch, only aggregate study information (for example counts with small numbers suppressed and statistical results) may be sent to its provider, never your individual measurements or identity.

5. You are in controlCopy Anchor Link

• Permission: data is read only for the measurement types you approve on the operating system's permission screen. You may decline some types; those types are then not transferred to the study.
• Withdrawing permission: you can withdraw permissions at any time. On iOS: Settings → Health → Data Access & Devices → EnaResearch; on Android: Health Connect → App permissions → EnaResearch. Once you withdraw permission, no new data is read.
• Leaving the study: when you tell the research team, your participant code is revoked and the session on your device ends.

6. How the data is storedCopy Anchor Link

• Apple Health and Health Connect data stays on your device until the app sends it to the organization's environment. Apple and Google are not EnaResearch sub-processors in this process.
• Measurements not yet transferred are kept in the app's storage on the device until the organization's server confirms that it has stored them permanently, and are then deleted from the device.
• Apple Health (HealthKit) data is not stored in iCloud; the app does not write this data to iCloud or any other cloud backup service.
• Data is sent to the organization's environment over a TLS-encrypted connection. The organization's environment is hosted in the region set in the agreement with the organization.

7. DeletionCopy Anchor Link

• When you uninstall the app, the app's data on the device is deleted. Your own data in Apple Health and Health Connect is not affected.
• To have data that has been transferred to the organization's environment deleted, contact the organization running the study. The organization assesses the request under the study protocol and the applicable law. Requests that reach ENA Innovation are forwarded to the organization concerned.

8. ContactCopy Anchor Link

For questions about this statement: support@enainnovation.com. For questions about the study, contact the research team.