Privacy Statement – Pave app
The Cancer Institute NSW (‘the Institute’), which is an agency within the NSW Government, operates the Pave app (App). We are regulated by NSW privacy legislation. Non-NSW government third-party providers who help us provide, operate or evaluate the App are regulated by NSW and Australian privacy legislation.
What information does the App collect?
When you first access the App, you provide your email address, a nickname and login details so your data is not lost if you change your device.
Your age, postcode and information about your vaping and quitting are collected so we can provide the most relevant information to help you quit. We also aggregate this data (which means you are not identified) to make sure the App is reaching people who need it and help us decide how to improve the App.
We store data you tell us about your vaping and quitting in a separate database to any data that identifies you specifically.
How is information collected by the App used and shared?
Information collected through the App may be used by the Institute to:
- provide you with the most useful information to help you quit vaping
- contact you about participating in future research, including asking for feedback about the App, to improve it, or to participate in vaping research studies. If we ask you, you can choose not to participate in that research and that won’t affect your use of the App
- enable you to manage your App account and to avoid losing access to information you have put into the App if you update, change or lose your mobile device.
- complete statistical analyses, or other research and administrative purposes.
Other purposes for which the Institute will use information collected through the App are:
- for ongoing monitoring and reporting of the uptake of the App
- for research on vaping, quitting and/or the groups of people who use the App (the Institute will seek appropriate ethics approvals to do that research)
- to help the Institute to improve the App and to increase its popularity with users.
The Institute will also apply de-identification techniques to the information collected through the App to create a de-identified dataset. De-identified information cannot identify individual users of the App. This de-identified information will help the Institute to understand how the App is used, if it is reaching the people who need it, if it is being effective, and if we need to make improvements to it.
For research purposes, we might share de-identified information to third parties such as research agencies or university academics which may result in publication of de-identified information in journals and other publications.
The Institute discloses aggregated information to: Google Analytics, NSW Health and other state and territory health agencies. The Institute does not disclose your personal information unless required or authorised by law. If you choose to use a federated login (e.g. Google or Apple) to access the App, those service providers may become aware that you use the App.
Are you required to provide personal or health information?
You don’t need to answer every question in the App, but it might mean that the information about vaping and quitting the App offers you isn’t always relevant to your situation. You can’t skip questions where information is needed for the App to function well.
Is my information stored securely?
The information you provide the Institute through the App is stored on NSW government private cloud servers (hosted by Microsoft) located in New South Wales. Personal and health information is stored securely, in a way that prevents unauthorised access, and is properly handled to keep it safe. For example, the data is securely transmitted to us from your device, is encrypted when stored in our database, and our account holders require usernames, strong passwords and multi-factor authentication to access your information.
Under the NSW Health Records and Information Privacy Act (2002), the Institute may be required to store your personal information and de-identified data for two years since your last login to the App. The Institute will apply its records and information management policy to minimise how long it keeps your data when complying with its archiving and data disposal obligations under GDA 17 and GA28 of the State Records Act (1998).
Can I delete my account?
You can delete your account (including the App and locally stored data) from your phone. Go to Delete your account in Pave for more information.
Can I request access to (or to correct) the information the Institute has collected about me through the App? How can I learn more about how my privacy is protected?
If you want to access or correct information the Institute has collected about you through the App, or have a general privacy enquiry, a third party enquiry, or a complaint about the App, please contact:
The Privacy Officer
Cancer Institute NSW
Locked Bag 2030, St Leonards NSW 1590
Email: cinsw-privacy@health.nsw.gov.au
Phone: (02) 8374 5600
You can also access the Institute’s Privacy Policy here: https://www.cancer.nsw.gov.au/what-we-do/get-in-touch/privacy.
