ORCA

The Online Remote Child Assessment (ORCA) Mobile App

OVERVIEW

Developmental science, from your living room

The Online Remote Child Assessment (ORCA) is a research application developed by the WILD Lab in the Department of Psychology at the University of California, Irvine. ORCA was built to make participation in developmental science research easier and more accessible for families, allowing approved study activities to be completed from home rather than requiring a visit to a university laboratory.

The app presents brief, engaging, age-appropriate activities designed for infants and young children. A caregiver holds the device or positions it in front of the child, and the child watches short videos and images while the app records how they look and attend to what is on the screen. Depending on the study, a session may also involve a caregiver questionnaire, a short parent–child interaction task, or the use of a wearable heart rate monitor provided by the research team.
‍
ORCA is a research tool only. It is not a medical device, does not provide diagnostic or clinical information, and does not generate individual results, scores, or feedback about a child's development. Families enrolled in a study participate voluntarily and may withdraw at any time.

Camera-based and sensor-based data collection is available only to families who have separately enrolled in an approved study and received a unique login code from the research team; general users of the app do not have these features enabled.

PRIVACY

Privacy policy for the ORCA research app

Last Updated / Effective Date: July 13, 2026

‍1. Overview
ORCA is a research application operated by the WILD Lab at the University of California, Irvine ("we," "us," "our," or "the research team"). ORCA is used to conduct IRB-approved developmental science studies. It is not a medical device, is not a diagnostic tool, and is not intended to provide clinical, diagnostic, or treatment information.ORCA is designed for use by parents or legal guardians on behalf of their children. Account registration is completed by an adult caregiver, who must be 18 years of age or older. Participation is entirely voluntary. You may stop using the app and request deletion of your account and associated data at any time without penalty.This policy describes what information we collect, how we use and protect it, who has access to it, and the choices available to you. Your use of ORCA is also governed by the informed consent document for the specific study in which you are enrolled. ‍

‍
2. Two Tiers of Access and Data Collection

‍ORCA collects different data depending on how you access the app. Please read this section carefully, as it determines which of the sections below apply to you.

Tier 1 — General app access (no consented study enrollment): If you download and use ORCA without a study-issued login code, we collect only the minimum information needed to operate the app: account information, device and technical information, and app usage information.We do not collect video, camera, gaze, audio, physiological (ECG/heart rate), or parent–child interaction data from general-access users. Camera- and sensor-based data collection is disabled at the account level unless a valid study code has been entered.
‍
‍Tier 2 — Enrolled study participants (consented, code-based access): Video, gaze, audio, physiological, and parent–child interaction data are collected only from families who:have provided informed consent outside of the app, in person or through a separate IRB-approved consent process administered by the research team; andhave been issued a unique login code by the research team as part of that enrollment.The unique login code unlocks study-specific assessment modules and enables camera and sensor-based data collection for the specific study for which consent was obtained. Without a valid, active study code, ORCA does not record or transmit video, audio, gaze, or physiological data.Your login code is confidential and is intended for your household only. Please do not share it. If you believe your code has been shared or compromised, contact us and we will deactivate it and issue a replacement.

3. Information We Collect
From all users:
‍
Account information: the email address used to create the caregiver account, and account credentials.Device and technical information: device type and model, operating system version, app version, and crash or error logs.
‍App usage information: dates and times of access, which screens and features you use, and navigation history within the app. This information is used to operate, troubleshoot, and improve the app.

From consented, code-verified study participants only:
‍Video and gaze data: while your child engages with in-app assessment activities, the device camera records your child's face and eye movements so we can measure looking behavior and attention. Recording occurs only during assessment sessions that you affirmatively start within the app.Audio data: where a specific assessment requires it, the device microphone may record sound during the session. This is described in the consent document for that study.Parent–child interaction data: for certain assessments, the camera may record interactions between you and your child for later coding and analysis.
‍Physiological data: if you use a compatible heart rate or ECG monitor provided or approved by the research team, we may collect electrocardiogram (ECG), heart rate, and heart rate variability data during sessions.Study demographics and questionnaire responses: information such as your child's date of birth or age, gestational age at birth, developmental and health background, and caregiver-reported questionnaire responses that you provide as part of the study protocol.
‍Study identifiers: a study ID linked to your enrollment and login code.

We do not collect precise geolocation data. We do not use ORCA to serve advertising, and ORCA contains no advertising or third-party marketing trackers.

4. How We Use This Information

We use the information described above only for the following purposes:
- To conduct the IRB-approved research study for which you provided consent;
- To advance scientific understanding of early child development, including infant attention, cognition, and physiological regulation;
- To develop, validate, and improve the accuracy and reliability of remote assessment methods;
- To operate, secure, troubleshoot, and improve the app itself;
- To communicate with you about your participation, including scheduling, session reminders, and study-related updates;
- To produce de-identified and aggregated results for scientific publications, presentations,
‍
‍We do not sell, rent, or lease your information, and we do not use your data or your child's data for advertising or marketing purposes.

‍5. How We Handle Video, Audio, and Physiological Data

Because these are the most sensitive data ORCA handles, we apply additional protections:

‍Consent-gated collection. As described in Section 2, these data are collected only from families who consented outside of the app and were issued a unique study login code.
‍Session-scoped recording. Recording occurs only during assessment sessions that a caregiver starts in the app. The app does not record in the background, and it does not access the camera or microphone outside of an active session.
‍Encryption. Recordings are encrypted in transit (TLS) and encrypted at rest on protected research servers.
‍Separation of identifiers. Recordings and physiological files are stored under a study ID. Directly identifying information (such as your name and email) is maintained separately, and the key linking them is stored separately with restricted access.
‍Restricted access. Only authorized members of the research team who are trained in human subjects research and listed on the approved IRB protocol may access identifiable research files.
‍De-identification. Where a study protocol permits, video frames may be processed to obscure or blur faces before further analysis or archival storage.
‍Retention. Recordings and physiological files are retained only as long as necessary for the purposes of the study and for the period required by our institution, IRB, and funding agencies. When no longer needed, they are securely deleted or permanently de-identified.

6. Who Has Access to Your Information

We may share information in the following limited circumstances:
‍
‍The research team. Authorized WILD Lab personnel and approved collaborators listed on the IRB protocol, on a need-to-know basis.
‍
‍Oversight bodies. If required, your records may be reviewed by the UC Irvine IRB, the UC Irvine Office of Research, the National Institutes of Health, or other entities responsible for ensuring that research is conducted in compliance with federal regulations and good research practice.
‍
‍Legal requirements. We may disclose information where required by law, including as required by mandatory reporting laws.
‍
‍De-identified and aggregated data. We may share de-identified or aggregated findings and datasets with the scientific community, including through funder-required data repositories, in accordance with your consent document. De-identified data cannot reasonably be used to identify you or your child.

We do not share your information for marketing purposes, and we do not sell it under any circumstances.

7. Data Security

Data are stored on encrypted servers with access controls, authentication requirements, and audit logging. We apply security and privacy safeguards consistent with University of California policy and, where applicable to our work, standards such as HIPAA and the GDPR.

No system of electronic transmission or storage can be guaranteed to be completely secure. While we take substantial measures to protect your information, we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify you as required by applicable law and by our IRB.

8. Children's Privacy

ORCA is used by adult caregivers on behalf of their children in a research context. Children do not create accounts, and we do not knowingly collect information directly from a child except through the assessment activities that a caregiver starts on the child's behalf under the terms of a signed consent document.If you believe that data about a child were collected without appropriate caregiver consent, please contact us and we will investigate and delete the data as appropriate.

9. Your Rights and Choices

‍Voluntary participation. Participation is voluntary. You may withdraw from the study at any time, for any reason, without penalty or loss of benefits to which you are otherwise entitled.

‍Access. You may request a copy of the data we hold about you and your child.

‍
Deletion. You may delete your account and request deletion of your associated data from within the app (Settings → Account → Delete Account) or by contacting us. Please note that de-identified data already incorporated into completed analyses, published results, or funder-required repositories may not be able to be withdrawn.
‍
‍Camera and microphone permissions. You may revoke camera and microphone permissions at any time in your device settings. Doing so will prevent you from completing camera-based assessments.
‍
‍Correction. You may ask us to correct inaccurate information about you.
‍
‍California residents. If you are a California resident, you may have additional rights under California law. Note that information collected as part of a clinical or research study conducted under the Common Rule, Good Clinical Practice, or FDA human-subjects requirements may be subject to specific exemptions under the California Consumer Privacy Act.

10. Data Retention

We retain research data for the period required by the study protocol, by University of California policy, and by our funding agencies, and no longer than necessary for the purposes described in this policy. Account and technical data are retained for as long as your account is active and for a limited period afterward as needed for security, troubleshooting, and legal compliance. When data are no longer needed, they are securely deleted or permanently de-identified.

11. Changes to This Policy

We may update this policy from time to time. The updated version will be indicated by a revised "Last Updated" date and will be effective when posted. If we make material changes affecting how we handle research data, we will notify enrolled participants directly and, where required, obtain re-consent through the IRB-approved process.