Privacy Policy

ScottyLabs (“ScottyLabs” or “we” OR “us” OR “our”) provides the CMU Orientation Quest App (“Orientation Quest App” or “O-Quest App” or “App”), including all digital content, functionality, content, and services offered on the App. This privacy policy applies to the App.

This Privacy Policy governs personal and non-personal information which we collect from you when using the App. “Personal information” means information which, on its own or in combination with other information, can be used to identify you. We respect your right to privacy and will only process personal information in accordance with applicable data protection legislation in the USA (including the Children’s Online Privacy Protection Act) and elsewhere.

1. Children’s Privacy
   We do not and will not knowingly collect personal information from any child under the age of 16, as the App is not intended nor permitted for use by those under the age of 16. If we learn we have collected or received Personal Data from a User under 16, we will delete that information. If you believe we might have any information from or about a user under 16, please contact us at [email protected].
2. Information We Collect
   1. When you first open the App, you will need to sign in using your Carnegie Mellon University Andrew ID. We will have access to your Andrew ID, and by extension the email address associated with your Andrew ID, and (if it displays in the CMU Directory) the first and last name associated with your Andrew ID (but NOT your password). This access is necessary to ensure only members of Carnegie Mellon University (“CMU”) can play, to ensure that incoming first-year students are the ones playing the game, and to prevent other members of the CMU community from impacting the game. The Terms of Service prohibits signing in with an Andrew ID that is not yours, so we will only knowingly collect your Andrew ID (and corresponding information) if you provide it to us.
      1. Separately, ScottyLabs will create a distinct, Orientation Quest-specific account (“App ID”), tied to your Andrew ID.
   2. After signing in for the first time, you will be asked to select your CMU Housing Community
   3. When you use the App, we will also collect:
      1. Technical Data: Technical information about your device, including: device identifiers; your operating system; NFC capabilities, and hardware information (including NFC capabilities)
      2. Usage and Gameplay Activity: Information relating to your usage of the App, including ScottyCoins and Thistlestones (collectively “Virtual Currency”); and prizes claimed in the Terrier Trade.
      3. Precise Location Data
      4. User Data: Your Andrew ID and App ID
      5. Other Information: Your housing community at Carnegie Mellon University
   4. We also collect information from any issues that you reported through the App, including your App ID.
3. How We Collect Information From You
   We collect information from you in the following ways:
   1. Directly from you when you provide it to us (through either normal App usage or provided when you submit an issue report).
   2. Automatically when you use or access content in the App.
4. How We Use Your Information
   We will use your information (including Personal Information) in the following ways:
   1. Providing you access to the App content
   2. Keeping track of claimed prizes from the in-app Terrier Trade
   3. Employing measures designed to ensure fair gameplay (“Anti-Cheat”), including:
      1. Verifying Challenges were completed authentically, using precise location data, device ID, and App ID.
5. Data Sharing
   Other users will be able to see the following information about you on the Leaderboard:
   1. your ScottyCoin count and housing community.
   2. if visible on the directory, your first, last name, and your Andrew ID
   3. the average Thistlestone count amongst all the users in your housing community, which may be used to estimate your own Thistlestone count
6. Your Rights
   To exercise your rights, please contact [email protected]. You have the right to the following:
   1. to access your Personal Information.
   2. to request correction of Personal Information we hold about you.
   3. to request erasure of your game data. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
   4. to object to the processing of your Personal Information where such processing is based on our legitimate interests.
   5. to request the restriction of processing of your Personal Information.
   6. to request the transfer of your Personal Information to another person or entity.
   7. to withdraw consent at any time where we are relying on consent to process your Personal Information. However this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
   8. to lodge a complaint with the applicable regulator or supervisory authority. If you have any complaints about the way in which we process your Personal Data please do contact us, as set out below, as we would appreciate the opportunity to resolve your complaint.
7. Retention and Security
   1. We will only retain your Personal Information for as long as necessary to fulfill the purposes for which we collected your Personal Information.
   2. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of that Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements. If by law we are required to retain any information about our customers or their interactions with us, we will retain your Personal Information insofar as required to comply with such law.
   3. We may anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
8. Changes to this Privacy Policy
   Any changes we make to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to this Privacy Policy.
9. How To Contact Us
   Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to [email protected].