Privacy policy for participants

myUsersInsight connects researchers with people who get paid to take part in their studies. It is run by USERINSIGHT LIMITED COMPANY, a company registered in Ghana (“we”, “our”, “us”). We are responsible for your personal information under this policy.

• Your account: name, email address, country, password (stored only as a secure hash), and which side you joined as. If you sign in with Google, Google shares your name, email address and profile picture with us, never your Google password.
• Your profile: what you fill in so research teams can see whether you fit the studies you apply to, such as your city, date of birth, work, education and devices, and the mobile money network and number we pay you on.
• Studies and sessions: the studies you apply to, your screener answers, bookings, attendance, ratings and notes. Calls and task tests are recorded (video, audio and your screen when you share it) after you agree, and we make a transcript and summary from the recording.
• Surveys: your answers, when you sent each one, and the results of our automatic quality checks (an attention check, how fast you answered, and whether written answers look random or copied). Nothing is recorded. The research team sees your answers and the check results, and their decision to accept or reject your response. If they reject it, they can no longer see your answers; we keep them only to look into it if you say the rejection was unfair.
• When you contact us: what you send us, such as an email or a “Something’s wrong with my payment” report.
• Using the app: technical logs (such as browser and IP address) that our hosting keeps to run the service and spot problems. If something breaks while you use the app (an error screen, or an error in the page or on our server), we keep a short report of what went wrong for 30 days to fix it: the error, the page (with ids removed), your browser and system (such as “Chrome on Android”), whether you’re a researcher or a participant, and a code that changes every day, so we can count how many people it affected. It doesn’t include your name, account or IP address.
• Security record: a log of changes to your mobile money number (only its last 4 digits), account role and payouts, and of what our team decides about them, so we can spot fraud and account takeovers and check every payment.
• Invites: your invite code, who joined through your link, and who invited you. To stop people inviting themselves, we keep every phone and mobile money number your account has had, not only the current ones, and compare them with the person who invites you or joins through your link. For researchers we also compare the email domain and the card label (such as “Visa ending 4081”), never the full card number. These records are deleted with your account.

We use cookies to keep you signed in, and save a few settings in your browser. Without them you can’t log in. If you open someone’s invite link, a cookie remembers their invite code for 30 days so it counts when you sign up.

We count visits with Vercel Web Analytics and Umami, neither of which uses cookies or follows you across sites. It records things like which page was opened, the country and the type of device, without identifying you. We don’t use advertising trackers.

We also keep our own record of how the app is used, so we can see where people get stuck and fix it: which page you open (with any study, session or link code removed), error messages shown to you (with numbers and email addresses removed), when, your country, the kind of device and its system (for example Android, iPhone or Windows), and how you first arrived (for example from a search engine or an invite link). If you’re signed in, it’s linked to your account. If you aren’t, we use a code made from your connection and browser that changes every day, so we can’t recognise you from one day to the next. We don’t keep your IP address. It uses no cookies and stores nothing on your device, only the myUsersInsight team can see it, and we delete it after 13 months, or sooner when you delete your account. If your browser sends Global Privacy Control or Do Not Track, we don’t record it.

On a few key steps (signing up, creating and paying for a study, applying to a study, and joining a call, up to the moment you’re in it), we also keep a masked replay of how you moved through the screen: where you clicked, scrolled and paused, so we can see where people get stuck. It’s not a video. Everything you type, your name, amounts and other text about you, photos and camera video are hidden in your browser before anything is sent; only our own button and label words stay readable. The call itself, your settings and money pages are never recorded. If you’re signed in, the replay is marked researcher or participant and new or returning, never with your name or email. It’s stored with Cloudflare, only the myUsersInsight team can see it, and we delete it after 30 days. If your browser sends Global Privacy Control or Do Not Track, we don’t record it.

• To run your account and let you sign in, including a one-time link that signs you in on your phone when a study is taken there.
• To show your profile to the teams whose studies you apply to, run screeners, book sessions and hold calls and task tests. Your screener answers give a fit score (how well they match who the study needs) that the team sees and you don’t.
• To show you only studies taken on a device your profile lists. When you join a call or start a test, we check from your browser whether you’re on a phone or a computer; we don’t keep that.
• To record sessions and make transcripts, summaries and highlights for the research team running the study.
• To work out what you earn, pay you, and check payment problems you report.
• To run invites: count who joined through your link, work out referral rewards and stop fake accounts.
• To send the emails and notifications the service needs, such as confirming your email or reminding you of a session. New notifications can also play a sound while the app is open and, if you allow pop-ups in your browser, show a pop-up, even when the app is closed. Both can be switched off in the notification panel, and signing out stops pop-ups on that browser.
• To keep the service safe and fair, including our attendance and reliability rules, and to improve it. If we block an account, we keep a note of who blocked it, when and why, while it stays blocked.
• To see which pages people use and where they get stuck, including masked replays of a few key steps, so we can make the app easier to use.
• To meet our legal duties.

We do this with your consent (for example to recordings), because we need it to provide the service you signed up for, or because the law requires it.

• Researchers see what you share with their study: your name, the profile details that matter for it, screener answers and the fit score worked out from them, and the recordings, transcripts and notes from your sessions. When you apply to a study, its team also sees your track record on myUsersInsight: how many studies you’ve taken part in, sessions you ended early or missed, and your average star rating from the teams you’ve taken part with (never their written comments). They never see your password or your mobile money number.
• People a research team shares survey findings with. A team can turn on a link to the findings it checked, for example for its managers. The findings can quote your written survey answers, but never with your name, and the team can turn the link off at any time.
• The person who invited you, if you joined through an invite link, sees your first name and last initial (such as “Kofi A.”) and how far you’ve got, nothing else. If you invite people, your first name and last initial appear on your invite link’s sign-up page and its preview when the link is shared.
• Service providers that run parts of the app for us and may only use your information to do that: Supabase (database, sign-in, file storage), Cloudflare (storing session recordings: call audio, and screen and call recordings; and the masked replays of key steps we use to improve the app), Resend (sending our emails: confirm-your-email, password reset, the welcome email, codes and sign-in links you ask for, and notices about your studies, sessions, payments and account; it receives your name, email address and what the email says), Vercel (hosting and visit counts), Umami (visit counts: the page opened, country, device type and where you came from — no cookies, nothing that identifies you), Sentry (error reports, stored in Germany: when something breaks, or a payment, refund, recording or email of ours fails, it receives what went wrong, the page or job it happened in, your browser and operating system, and the reference and amount of the item concerned — never your name, email address, phone number, IP address or account), LiveKit (video calls), ElevenLabs (transcripts, and reading test steps aloud when you press Listen), Groq (transcripts, summaries, and drafting findings and answering the research team’s questions from your survey and screener answers, without your name), Google (only if you sign in with Google) and your browser’s push service, such as Google, Mozilla or Apple (only if you allow pop-ups; it carries the notification’s text to your device).
• Authorities, when the law requires it.

During early access our team sends your pay by hand, from our mobile money account to the number on your profile; it isn’t shared with a payment provider for that.

We don’t sell your information.

Some of our providers store information on servers outside Ghana. We only use providers that protect it to the standard the law requires.

Information travels over encrypted connections, passwords are stored only as secure hashes, and each person and team can reach only their own data. No system is perfectly secure; if a breach puts your information at risk, we will tell you and the regulator as the law requires.

We keep your information while your account is open and for as long as we need it for the purposes above. Recordings, transcripts and study data stay available to the researcher’s team for their research. You can delete your account in Account settings. We email you to confirm, and delete it 3 days later; log in before then and you can keep it. We then remove your name, profile details and mobile money number, withdraw open applications and close your login; sessions you took part in, and their recordings, stay with the teams who paid for them, without your name, and those teams see that your account was deleted. We keep payment records the law makes us keep. When you ask us to delete your account instead, we delete or anonymise your information within 30 days, with the same exceptions.

• Access: ask what we hold about you and get a copy.
• Correction: fix your name, profile and payout number (a new payout number is confirmed with an emailed code) yourself in Account settings, or ask us to fix anything else that is wrong or incomplete.
• Deletion: delete your account yourself in Account settings (it is deleted 3 days later, so you can change your mind), or ask us to delete your account and information, subject to what the law makes us keep.
• Objection and consent: object to a use of your information, or withdraw consent you gave, at any time.

Email hello@myusersinsight.com from the address on your account. We reply within 30 days. You can also complain to Ghana’s Data Protection Commission.

myUsersInsight is for people aged 18 and over. We don’t knowingly collect information from anyone younger.

We follow Ghana’s Data Protection Act, 2012 (Act 843).

If we change this policy in a way that matters, we’ll tell you in the app or by email before it applies.

Questions about this policy or your information: email hello@myusersinsight.com.