Privacy Policy

1. Introduction

Vision Research ("the App") is the ComRatings app for voluntary participation in market research, advertising research, media measurement and user-experience research. The App is developed by OneSource AI.

This Privacy Policy explains what data we collect, how we use it, where it is stored, how it may be disclosed, and your rights. Available capabilities vary by edition, platform, organization, and assigned task.

2. Data We Collect

When you use Vision Research, we may collect the following information:

• Survey responses and answers you provide
• Account information: the email address or phone number used for login, the account identifier supplied by WeChat if you sign in that way, or, for participants recruited through a research partner, the participation number tied to the access code they were given. A phone number is used only to sign in and recover your account, never for marketing
• Device information, such as device model, OS version, app version, region, and diagnostic logs, together with a device identifier — a number used to tell one device from another, so that research data uploaded from the same device can be grouped and the right device credited for tasks and rewards; it contains nothing that directly identifies you, and is never used for advertising or sold
• Reward points balance and transaction history when rewards are enabled
• Task state, upload state, and app usage signals needed to run assigned research tasks
• Explicit screen capture or screen-frame metadata when a task asks you to start screen capture
• Camera-derived gaze and calibration data on supported iOS devices and on supported Android devices (enterprise edition) when a task explicitly requires gaze measurement
• Outside a research task, usage behaviour only: which apps you open and close, switches between apps, screen on and off, and audio playback state
• Pausing a task stops the task timer only — the study keeps running and collection does not stop
• In-app usage records to improve the App, such as which entry led you to the task wall, whether the rewards page loaded, whether an invitation entry was shown, and whether you opened system settings to turn on a permission a study needs, together with app version, OS version, phone brand and language. These records contain no name, contact details, survey answers, profile content, screen content or device model, are sent separately from research data, and are used only to improve the App and measure the participation flow

We do NOT collect:

• Face ID identifiers or biometric templates
• Raw camera face images, camera video, depth maps, or 3D face meshes
• Contacts, photos, media libraries, passwords, or financial information
• Precise geographic location unless a separate task disclosure and permission request says otherwise
• The text on your screen outside a research task, unless a study explains it separately and you consent again
• What you type into password or verification-code fields, at any time

2A. Front Camera and Face Data

On supported iOS devices, assigned gaze research tasks may use the TrueDepth front camera to process face tracking locally on the device. On supported Android devices (enterprise edition), assigned gaze research tasks may also use the front camera. Camera frames are analysed on your phone to estimate where on the screen you are looking; the frames themselves are never stored or uploaded.

• The app stores and uploads only derived research signals, such as normalized gaze coordinates, estimated screen points, gaze direction, head angles, approximate distance to the screen, confidence values, face-detected and eye-validity flags, eye-state labels, calibration quality, calibration error, and calibration profile identifiers
• Camera-derived gaze data is used only for the assigned research task, quality checks, aggregate attention/exposure analysis, and troubleshooting
• Camera-derived data is retained with the related research task data only as long as needed for the stated purposes, normally no longer than 24 months, and is then deleted or irreversibly anonymized unless law requires a different retention period

We do NOT upload or store:

• Raw face images or camera video
• Depth maps or 3D face mesh/geometry
• Face ID identifiers
• Biometric templates
• Face data for authentication, identity verification, emotion recognition, or unrelated personal profiling

2B. Research Scope

The App supports voluntary commercial market research, advertising research, media measurement, and user-experience research tasks. It is not a medical, clinical trial, diagnostic, therapeutic, or regulated human-subject research app, and it does not collect health data or provide health recommendations.

Each study is confirmed separately. Before you start a task, you can open the study description from its task card to see what the study collects, when, and why. Tapping Start means you agree to that study's collection scope. You can withdraw your authorization for a study at any time in Me > Study authorizations.

2C. Vision Research Community

The Vision Research Community helps us match you with research invitations. Joining is your choice, and you make it when you first sign in: the option is selected by default, and you can clear it before signing in. If you have made this choice before, we keep your earlier choice.

If you join, we:

• Use the basic profile you provide in the App and your device information to match you with studies that may suit you
• Show matching invitations on your task wall, and notify you if you have turned on study alerts
• Leave every decision to you — an invitation never obliges you to take part

Joining does not include taking part in industry research or allowing your data to be used for AI training; each of these still needs your separate consent. You can leave the community at any time in Me > Privacy settings > Cross-brand study invites. After you leave, we stop sending you new invitations; rewards for studies you have already completed still follow the original task terms.

3. How We Use Data

• Delivering assigned research tasks and recording your responses
• Aligning explicit screen capture frames, derived ad or content events, and gaze samples for aggregate attention and exposure analysis
• Managing reward points and redemption when rewards are enabled
• Checking task completion quality, calibration quality, upload integrity, app stability, and performance
• Communicating with you about available tasks, rewards, support, and privacy or terms updates

We do not sell, rent, or share your personal data, camera-derived data, or face data with third parties for marketing or advertising purposes.

4. Permissions

Vision Research requests only the permissions required for the edition and task you use:

• Internet access — to load tasks, submit responses, and upload research packages
• Network state — to check connectivity before submissions
• Camera (the TrueDepth front camera on supported iOS devices and the front camera on supported Android devices, enterprise edition) — only for explicit gaze setup or gaze research tasks
• Screen broadcast or screen capture on supported platforms — only after you explicitly start a capture task. A screen broadcast records your whole screen: while it runs, the screens of every app you open are uploaded for that study. Close anything you do not want recorded before you start
• Accessibility on supported Android devices — some studies collect screen images through this feature instead of screen recording. Those studies never ask you to authorise screen recording and show no system recording indicator; the app’s own collection notification stays visible for the whole time collection is running, and turning the permission off stops screen collection immediately

The Google Play edition does NOT request or use:

• Camera or eye-tracking permissions
• Accessibility permissions
• Microphone permissions
• Contacts, photos, or media library permissions
• Storage access beyond app-private or task-selected data
• Background collection or boot-start permissions
• Location permissions

5. Data Storage & Security

• All data is encrypted during transmission using TLS/SSL
• Uploaded research packages are stored in OneSource AI-controlled cloud infrastructure with encryption at rest and access controls
• Account credentials are never stored in plain text
• Research task data, including camera-derived gaze data when present, is normally retained no longer than 24 months and then deleted or irreversibly anonymized unless law requires a different retention period
• In-app usage records are kept for 180 days and then deleted automatically; only statistics that can no longer be linked to you are retained
• We use security safeguards, access records, and access controls to protect your information

6. Your Rights & Control

• Choose which surveys to participate in — participation is always voluntary
• Withdraw your authorization for any study at any time in the App — collection for that study stops right away; data collected before you withdraw is not deleted automatically, but you can ask us to delete it
• View your reward points balance and history at any time
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Uninstall the App at any time

7. Children's Privacy

Vision Research is not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately for deletion.

8. Data Sharing and Service Providers

Vision Research may disclose or process data only in the following limited cases:

• Authorized customer organizations or study sponsors — to receive the results and reports for the research project they commissioned, typically in aggregated or de-identified form
• Contracted infrastructure, cloud, storage, analytics processing, notification, email, verification, app distribution, crash reporting, or support providers — only as service providers under confidentiality and data protection obligations
• Legal, regulatory, judicial, or administrative requests when required by law
• Protection of our rights, users, services, and security where legally permitted

Service providers may process data only to provide the contracted service to us and are not allowed to use it for their own advertising or unrelated purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy inquiries, data deletion requests, or any questions about this policy: