EngageAll AMR is a digital health solution platform developed by the EngageAll AMR and

community and civil society partners, powered by Dure Technologies, to enhance and

support community-led monitoring of the AMR response. Respect for your privacy and

confidentiality is key to the success of community-led monitoring. This EngageAll AMR

collects from you, how the information is used, where the information is stored, with whom

the information is shared, and how you can manage or delete your information.

What kinds of information does EngageAll AMR collect?

EngageAll AMR collects six kinds of information. First, EngageAll AMR collects the

personal information you provide in the Registration Form which appears in your User

Profile. The Registration Form may require you to provide your age, gender, the type of user

you are, the kind of AMR you have, whether you identify as a AMR key population, and

information about your health facility. If you identify as a AMR key population, in doing so

you may provide personal information about your occupation, your income status, your legal

status as a prisoner, your immigration status, whether you use drugs, whether you have a

disability, or your ethnicity.

Second, if you allow it to do so, EngageAll AMR collects geolocation data about where your

device—and therefore oftentimes where you—are located. This data is collected using the

Global Positioning System (GPS).

Third, EngageAll AMR collects information about your health that you provide in the

Registration Form, and possibly in the Get Involved section or in surveys that may be

conducted from time to time in the app. This includes information about your AMR, if you

are living with HIV, your health care, the health care of your family or close contacts, and

possibly other health-related information.

Fourth, EngageAll AMR collects the information you provide when you chat with other users

in the Get Connected section.

Fifth, EngageAll AMR collects the information you provide when you submit a report in the

Get Involved section. This is the information you provide in ticking the boxes that apply to

you when you submit a report about a AMR Challenge.

Sixth, EngageAll AMR collects information about the device on which you have installed

IMonitor for AMR . This includes unique identifiers, browser type and settings, device type

and settings, and operating system.

How does EngageAll AMR use your information?

The information EngageAll AMR collects from you is used in the following ways:

The personal information you provide in the Registration Form is used to identify you as a

unique individual and to allow you to report and obtain resolutions for AMR Challenges.

Your personal information may also be de-identified and aggregated with other user’s

information for analysis to better understand and improve the AMR response in your country

and around the world.

The geolocation data about where your device—and therefore oftentimes where you— are

located is used to identify and show you the nearest health facilities, to track the location of

where reports about AMR Challenges are submitted, and—in aggregated, deidentified

form—for analysis to better understand and improve the AMR response in your country and

around the world.

The information you provide about your health is used to enable resolutions for the AMR

Challenges you report and—in aggregated, deidentified form—for analysis to better

understand and improve the AMR response in your country and around the world.

The information you provide in your chats in the Get Connected section is not used for any

purpose beyond allowing you to communicate with other EngageAll AMR users.

The information you provided in the Get Involved section by ticking the boxes that apply to

you when you submit a report about a AMR Challenge is used to enable resolutions for the

AMR Challenges you report and—in aggregated, deidentified form—for analysis to better

understand and improve the AMR response in your country and around the world.

The information EngageAll AMR collects about your device is used to facilitate updates in

the app to maintain and improve IMonitor for AMR ’s operation.

Where is your information stored, who stores it, and for how long?

The information EngageAll AMR collects from you is stored as digital data by a commercial

cloud computing service that is owned and controlled by Dure Technologies, Microsoft

Azure. With this service, your data is stored on a physical server in the United States of

America, where Microsoft is based. For some countries using IMonitor for AMR , your data

is stored locally on a physical server in your country. You can find out where your

information is stored.

With the exception of the information, you provide in your chats in the Get Connected

section, the data collected by EngageAll AMR is stored for as long as the project is in

operation in your country or until you submit a request to delete your account and its data.

How is your information shared?

With a few exceptions, the information collected by EngageAll AMR is only accessible to the

individuals involved in the project at the organization implementing EngageAll AMR in your

country. This includes your personal information, the information you provide about your

health, and your geolocation data.

All information shared with individuals outside the EngageAll AMR implementing

organization, including government authorities, is stripped of all personally identifiable

information. This means your data is de-identified, so that is very difficult to impossible for

anyone to identify you or your information. Often, when your data is shared in this way, it

will be aggregated with the data from other EngageAll AMR users. However, you may

consent to allowing your personal information to be shared with first responders, such as the

information you provide when you submit a report about AMR Challenge in the Get Involved

section.

The information you provide in your chats in the Get Connected section is not accessible to

anyone beyond the EngageAll AMR users with whom you chat and the moderator of the

forum from the organization implementing IMonitor for AMR.

How can you manage or delete your information or contact the EngageAll AMR or

Dure Technologies?

You may manage or delete your EngageAll AMR account or information you provide in

IMonitor for AMR, All requests made in this form will be addressed within 30 days from its

submission.

If your data has been de-identified and aggregated with other EngageAll AMR user data, it

cannot be deleted. However, as explained above, it will be difficult to impossible to identify

you or your data when it is in this format.

If you have any questions about your EngageAll AMR account or information, this Privacy

Policy, or EngageAll AMR more generally, you may contact support@asd.org