Our study is completely HIPAA compliant and our protocols are managed by the MGH Internal Review Board (IRB). They app server is encrypted and it does not collect any personal information-- participants are specifically given deidentified email addresses to use when registering.