Privacy Policy

Last updated August 2026

This tool is provided by Amplifier Health Inc. to site staff participating in the K2 Connect (LifeKey) proof-of-concept, for capturing de-identified voice recordings under a documented chain of custody. It is used by authorized site staff, not by trial subjects directly.

What we collect

Staff account information: the email address and password (stored as a bcrypt hash, never in plain text) used to sign in, provisioned by an Amplifier administrator.
Voice recordings: audio captured by site staff during a study visit, tagged only by the CRIO Subject ID assigned to that visit. No patient name, date of birth, or other identity information is ever entered into the App or stored in a recording's filename or metadata.
Chain-of-custody audit events: a time-stamped, hash-chained log of who captured, viewed, or signed each recording, recorded against the signed-in staff member's email.
Notes and signatures: any clinical notes a staff member attaches to a recording, and, where electronic signature is enabled, a record of who signed a recording and when.

How we use it

Data collected in this App is used solely to capture, store, and maintain a tamper-evident chain of custody for de-identified voice recordings on behalf of the K2 Connect proof-of-concept. We do not use this data for advertising, and we do not sell or rent it to third parties.

Where it's stored

Account and session data, recording metadata, and the audit trail are stored in Amplifier's own database. Audio recordings are stored in Google Cloud Storage, in Amplifier's Google Cloud environment. Object keys use the Subject ID/Job ID only, no patient identity is present in storage paths or metadata.

Sharing

Data is not shared with third parties except the infrastructure providers named above (Google Cloud), strictly as needed to operate the App, and K2 Medical Research and its Quality & Compliance team as the sponsoring party for this proof-of-concept.

Your choices

Because the chain-of-custody record is append-only and hash-chained by design, individual audit events cannot be edited or deleted once written. To request deletion of an account or raise a question about data handling, contact us using the information below.

Contact

Questions about this policy can be sent to amit@amplifierhealth.com.