Privacy policy for researchers

myUsersInsight connects researchers with people who get paid to take part in their studies. It is run by USERINSIGHT LIMITED COMPANY, a company registered in Ghana (“we”, “our”, “us”). We are responsible for your personal information under this policy.

• Your account: name, email address, country, password (stored only as a secure hash), and which side you joined as. If you sign in with Google, Google shares your name, email address and profile picture with us, never your Google password.
• Your organisation and studies: your organisation’s name, type and size, your role, and the projects and studies you create, including screeners, survey questions, your decisions on survey responses, schedules and how you pay. Paystack keeps your card or mobile money details; we only keep a summary such as “Visa ending 4081” and a record of each payment and refund.
• Documents you start a study from: if you upload a research plan, brief or survey, or paste a Google Forms link, we read its text once (opening the form’s public page), send it to Groq to draft your study, and drop it. We don’t keep the file, the form or their text; only the draft you then save.
• If you apply to the startup programme: your startup’s name, website or app link, your LinkedIn profile link, its stage, what you’re building and want to learn, and any hub or accelerator. We open your website once to check it loads, and our team looks at your LinkedIn profile to check there’s a real person behind the application.
• Sessions: bookings, attendance, ratings and notes. Calls are recorded (video, audio and your screen when you share it) after you agree, and we make a transcript and summary from the recording. The stars you give a participant count toward their average rating, which other teams see when that person applies to their studies. Your comments and tags stay with your team.
• When you contact us: what you send us, such as an email.
• Using the app: technical logs (such as browser and IP address) that our hosting keeps to run the service and spot problems. If something breaks while you use the app (an error screen, or an error in the page or on our server), we keep a short report of what went wrong for 30 days to fix it: the error, the page (with ids removed), your browser and system (such as “Chrome on Android”), whether you’re a researcher or a participant, and a code that changes every day, so we can count how many people it affected. It doesn’t include your name, account or IP address.
• Security record: a log of changes to your account role and payments, and of what our team decides about them, so we can spot fraud and account takeovers and check every payment.
• Invites: your invite code, who joined through your link, and who invited you. To stop people inviting themselves, we keep every phone and mobile money number your account has had, not only the current ones, and compare them with the person who invites you or joins through your link. For researchers we also compare the email domain and the card label (such as “Visa ending 4081”), never the full card number. These records are deleted with your account.

We use cookies to keep you signed in, and save a few settings in your browser (for example a payment method summary, never a full card number). Without them you can’t log in. If you open someone’s invite link, a cookie remembers their invite code for 30 days so it counts when you sign up.

We count visits with Vercel Web Analytics and Umami, neither of which uses cookies or follows you across sites. It records things like which page was opened, the country and the type of device, without identifying you. We don’t use advertising trackers.

We also keep our own record of how the app is used, so we can see where people get stuck and fix it: which page you open (with any study, session or link code removed), error messages shown to you (with numbers and email addresses removed), when, your country, the kind of device and its system (for example Android, iPhone or Windows), and how you first arrived (for example from a search engine or an invite link). If you’re signed in, it’s linked to your account. If you aren’t, we use a code made from your connection and browser that changes every day, so we can’t recognise you from one day to the next. We don’t keep your IP address. It uses no cookies and stores nothing on your device, only the myUsersInsight team can see it, and we delete it after 13 months, or sooner when you delete your account. If your browser sends Global Privacy Control or Do Not Track, we don’t record it.

On a few key steps (signing up, creating and paying for a study, applying to a study, and joining a call, up to the moment you’re in it), we also keep a masked replay of how you moved through the screen: where you clicked, scrolled and paused, so we can see where people get stuck. It’s not a video. Everything you type, your name, amounts and other text about you, photos and camera video are hidden in your browser before anything is sent; only our own button and label words stay readable. The call itself, your settings and money pages are never recorded. If you’re signed in, the replay is marked researcher or participant and new or returning, never with your name or email. It’s stored with Cloudflare, only the myUsersInsight team can see it, and we delete it after 30 days. If your browser sends Global Privacy Control or Do Not Track, we don’t record it.

In the same record we note which tools you use, so we can see which ones help researchers and which to improve or remove: drafting a study with AI, starting a study from a document or Google Form, the AI help with screener questions, voice typing, Ask your data, and saving findings as a PDF or PowerPoint file. We record that you used the tool, when and for which study, never what you typed, said, asked or uploaded.

• To run your account and let you sign in.
• To publish your studies, run screeners, book sessions and hold calls and task tests.
• To record sessions and make transcripts, summaries and highlights for your team.
• To work out what studies cost, take your payments, pay participants from them, and refund money a study didn’t use.
• To send the emails and notifications the service needs, such as confirming your email or reminding you of a session. New notifications can also play a sound while the app is open and, if you allow pop-ups in your browser, show a pop-up, even when the app is closed. Both can be switched off in the notification panel, and signing out stops pop-ups on that browser.
• To review startup programme applications and decide who joins.
• To run invites: count who joined through your link, work out referral credit and stop fake accounts.
• To keep the service safe and fair, and to improve it. If we block an account, we keep a note of who blocked it, when and why, while it stays blocked.
• To see which pages people use and where they get stuck, including masked replays of a few key steps, so we can make the app easier to use.
• To meet our legal duties.

We do this with your consent (for example to recordings), because we need it to provide the service you signed up for, or because the law requires it.

• Participants see your name, organisation and study details, and you in the call.
• People you share survey findings with see your organisation’s name and the survey’s title with the findings.
• The person who invited you, if you joined through an invite link, sees your first name and last initial (such as “Kofi A.”) and how far you’ve got, nothing else. If you invite people, your first name and last initial appear on your invite link’s sign-up page and its preview when the link is shared.
• Service providers that run parts of the app for us and may only use your information to do that: Supabase (database, sign-in, file storage), Cloudflare (storing session recordings: call audio, and screen and call recordings; and the masked replays of key steps we use to improve the app), Resend (sending our emails: confirm-your-email, password reset, the welcome email, codes and sign-in links you ask for, and notices about your studies, sessions, payments and account; it receives your name, email address and what the email says), Vercel (hosting and visit counts), Umami (visit counts: the page opened, country, device type and where you came from — no cookies, nothing that identifies you), Sentry (error reports, stored in Germany: when something breaks, or a payment, refund, recording or email of ours fails, it receives what went wrong, the page or job it happened in, your browser and operating system, and the reference and amount of the item concerned — never your name, email address, phone number, IP address or account), LiveKit (video calls), ElevenLabs (transcripts, and reading test steps aloud when you press Listen), Paystack (your card and mobile money payments and refunds: it receives your name, email address and the card or mobile money details you enter in its payment window), Groq (transcripts, summaries, study drafting, including the text of a document you start a study from, survey findings and Ask your data), Google (only if you sign in with Google) and your browser’s push service, such as Google, Mozilla or Apple (only if you allow pop-ups; it carries the notification’s text to your device).
• Authorities, when the law requires it.

We don’t sell your information.

Some of our providers store information on servers outside Ghana. We only use providers that protect it to the standard the law requires.

Information travels over encrypted connections, passwords are stored only as secure hashes, and each person and team can reach only their own data. No system is perfectly secure; if a breach puts your information at risk, we will tell you and the regulator as the law requires.

We keep your information while your account is open and for as long as we need it for the purposes above. Recordings, transcripts and study data stay available to the researcher’s team for their research. You can delete your account in Account settings. We email you to confirm, and delete it 3 days later; log in before then and you can keep it. We then remove your name, take you out of your team and close your login; your team’s projects, studies and recordings stay with the team, and if you were its last member its live studies stop taking applications. We keep payment records the law makes us keep. When you ask us to delete your account instead, we delete or anonymise your information within 30 days, with the same exceptions.

• Access: ask what we hold about you and get a copy.
• Correction: fix your name and organisation details yourself in Account settings, or ask us to fix anything else that is wrong or incomplete.
• Deletion: delete your account yourself in Account settings (it is deleted 3 days later, so you can change your mind), or ask us to delete your account and information, subject to what the law makes us keep.
• Objection and consent: object to a use of your information, or withdraw consent you gave, at any time.

Email hello@myusersinsight.com from the address on your account. We reply within 30 days. You can also complain to Ghana’s Data Protection Commission.

myUsersInsight is for people aged 18 and over. We don’t knowingly collect information from anyone younger.

We follow Ghana’s Data Protection Act, 2012 (Act 843).

If we change this policy in a way that matters, we’ll tell you in the app or by email before it applies.

Questions about this policy or your information: email hello@myusersinsight.com.