Privacy Policy

Diversity Arrays Technology Pty Ltd (“DArT”, “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how KDSmart (“the app”) collects, uses, and shares information about you when you use our mobile application independently and in conjunction with the KDDart platform.

The following sections are separated into the following sub-sections where relevant:

  • User Data: For this policy, “user data” refers to any scoring data or multimedia collected by users with KDSmart.

  • Third-Party Data: Device data collected and used by third-party libraries.


1. Data Collection

1.1 Types of Data Collected

  • Device Information: Device-related information such as hardware model, operating system version, and unique device identifiers.

  • Location Information: - General Location: Country-level location data gathered from your IP address. - Precise Location: We collect precise location data for required features if location services are enabled.

  • Crash Data: Diagnostic and crash data is collected via Firebase Crashlytics to improve app performance.

  • Analytics Data: Firebase Analytics collects anonymised app usage data to track engagement.

  • Scoring Data: Data collected by users with the app. Scoring data includes (but is not limited to): - Trials, including trial information, layouts, and associated traits and tags with scored values - Traits and trait values (including phenotypic data) associated with plots or sub-plots. - Tags and their application to plots or sub-plots. - Plot information. - Device information, including the device identifier, is recorded when the user scores data. The device identifier is available to identify the device used to capture the phenotypic data when exporting it. However, this is only used to initialise the data item, and you can change it to whatever value you decide if you do not wish to make the device identifier public. - Time and date of scoring activities

  • Multimedia: Audio and images captured by users in conjunction with scoring data. The app saves multimedia in relation to plots or sub-plots.

1.2 User Data Collection by DArT

We only collect user data if you decide to upload your scored data to a database that is, by formal agreement, managed and located on DArT servers.

KDXchange collects device data from connected KDSmart devices to uniquely identify devices. The KDXchange server does not permanently record device data.

1.3 Third-Party Data Collection

The app uses third-party APIs such as Google Play Services and Firebase, which may collect additional device information. Please refer to their respective privacy policies for more details.

The list of third-party libraries that may collect data or could impact data collection are listed here:

  • Firebase Libraries (Firebase Messaging, Firebase Analytics, Firebase Crashlytics, Firebase Config, Firebase BOM)

  • Google Play Services Vision

  • RxJava/RxAndroid

  • NanoHTTPD


2. Data Usage

Data usage varies depending on the type of data collected.

2.1 User Data Usage

DArT does not use any user data collected through KDSmart unless:

  • You choose to upload your collected data to a database managed by DArT under a formal agreement.

  • You share data with DArT to receive technical support.

2.2 Third-Party Data Usage

Third-party services, including Firebase and Google Play Services, may collect device information for analytics and performance improvement. Their data collection is governed by their privacy policies.


3. Data Sharing

3.1 User Data Sharing

The data users collect is shared only at a location where you decide to perform this operation and only when you choose to perform it.

Share destinations include:

  • CSV, ZIP or KDX file on your KDSmart device.

  • KDXchange server (DArT service provided with KDXplore to create a local server on a laptop or desktop to transfer data via Wi-Fi between KDSmart devices).

  • The KDDart server, when enabled, is only for your chosen server destination.

  • Third-party sharing services such as Google Drive or Dropbox. Note that these are external sharing services and are distinct from third-party libraries used within the app.

3.2 Third-Party Data Sharing

If you choose to use a third-party data-sharing application, your data is subject to that application’s data security and privacy provisions.

Data collected by third parties is subject to that application’s data security and privacy provisions. This includes third-party sharing applications and third-party libraries used for the reasons described in section 2.2.


5. Data Security

We take the following measures to protect your data:

  • Data Encryption: We use Android’s File-Based Encryption (FBE) to safeguard stored data and encrypted shared preferences for key pairs using AES encryption.

  • Secure Communication: All data transmitted over the network is encrypted using SSL/TLS protocols.

  • Secure Storage: We use SQLite with encrypted Room functionality (via Android SDK) for secure local data storage.

The Lockdown feature allows you to protect scoring data with a four-digit PIN code.


6. Data Retention

We only store user data if you decide to upload your scored data to a database that is, by formal agreement, managed and located on DArT servers.

Data collected by third-party services like Firebase or Google Play Services is retained according to their respective privacy policies. DArT does not retain any data collected by these third-party services.


7. Children’s Data

In compliance with the Children’s Online Privacy Protection Act (COPPA):

  1. We do not knowingly collect, use, or disclose personal information from children under 13.

  2. If a parent or guardian becomes aware that their child has provided us with personal information without their consent, they should contact us at [privacy@diversityarrays.com](mailto:privacy@diversityarrays.com). We will delete such information from our files within a reasonable time.

  3. We do not condition a child’s participation in any activity on the disclosure of more personal information than is reasonably necessary to participate in that activity.

  4. Parents can review, delete, manage or refuse with whom their child’s information is shared by contacting us directly.


8. User Contact

If you have any questions about this Privacy Policy or would like to request the deletion of your data, please get in touch with us at privacy@diversityarrays.com


9. Changes to this Policy

We may update this Privacy Policy periodically. We will post changes here; the “last updated” date will reflect the most recent changes. We encourage you to review the policy regularly.

Last updated: 2024-09-18