This agreement ("Agreement") is between you and Westminster College, a non-profit Utah corporation ("Westminster"). The Hepius app ("Hepius") is owned and operated by Ferry, LLC, a Utah limited liability company. The technologies and intellectual property used by Hepius are subject to limited, revocable licenses granted by third parties. This Agreement Agreement describes how Hepius and Westminster collect, use and share personal information of consumer users (individually, "You," jointly, "Users") of Hepius and other products (jointly, "Software"). By using the Software, you agree to the following.
Hepius provides automated contact tracing to Users. Hepius uses Users' mobile devices geo-location and Bluetooth functionality, among other technology. The contact tracing application collects necessary data from the Users and aggregates that data for contact tracing applications.
Geofencing, Data Sets
The Software collects and stores locations of contact events, duration of the contact events, proximity between devices of contact events, chain of a mobile device's to the nearest confirmed positive diagnoses, and the time and date of contact events ("Data Sets"). Data Sets collected from outside Westminster's campus, and all dormitories pursuant to Westminster's control only ("Geofenced Area") are never provided to Westminster, Hepius, or any other party, and are only used for notifying other Users of exposure events.
You retain custody of your data.
You retain sole control and custody of all data collected. Users who are confirmed positive diagnoses shall consult solely with their healthcare provider to discuss authorizing release of the Data Sets collected within the Geofenced Area to Westminster only, which includes the contact log and Data Sets on their devices, and Users up to three (3) degrees of contact with their devices. Users shall never transmit or receive personally-identifiable information between each other. Hepius may request from Westminster limited access to certain data generated for the sole purposes of 1) improving the Software, 2) assisting in contact tracing efforts of Hepius platforms, or 3) pursuant to a lawful government order. Hepius shall never receive any personally-identifiable information.
Automatic Data Expiration
All Data Sets shall expire and automatically delete within twenty-one (21) days of collection, for data not forwarded to Westminster by Users, and fourteen (14) days for all data forwarded by Users to Westminster. Westminster and Hepius shall never copy, retain, transmit, or sell any data, for any reason, except as explicitly identified in the Agreement.
The Software uses technology owned exclusively by, and used pursuant to revocable license from third parties.
You may opt out anytime by deleting the Software from your devices AND sending us an email at firstname.lastname@example.org, confirming that you are opting out. You can stop all collection of information by the Software by uninstalling the Software. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
Changes to this Agreement
Westminster may change this Agreement. If that happens, the Last Updated date above shall be updated to reflect the date of the latest change, and you agree to any changes by continuing to use the Software.