Research Partner Data Access Agreement

1Purpose

This Agreement governs the provision of pseudonymised Exercise Data by IP2X Limited ("IP2X") to approved Research Partners.

By accessing or using IP2X research datasets, the Research Partner agrees to be bound by this Agreement.

The purpose of data sharing under this Agreement is strictly limited to:

• academic research;
• public health studies;
• exercise science validation;
• statistical analysis of anonymised or pseudonymised behavioural data;
• publication of aggregated findings.

2Definitions

Research Partner means any university, NHS body, academic institution, public authority or other organisation approved by IP2X to access Exercise Data for research purposes.

Exercise Data means pseudonymised exercise-related data generated through the IP2X platform, including but not limited to:

• exercise session records;
• motion sensor data;
• wearable device measurements;
• timestamps;
• exercise programme adherence data;
• behavioural indicators;
• verification outputs.

Personal Data means any information that directly identifies an individual, including name, contact details, or account identifiers.

Pseudonymised Data means data that cannot be attributed to a specific individual without the use of additional information held exclusively by IP2X.

3Scope of Data Access

IP2X may provide Research Partners with access to Exercise Data only.

Under no circumstances will Research Partners receive:

• Personal Data;
• direct identifiers;
• account credentials;
• contact information;
• Commercial Partner Data;
• raw linking keys or re-identification tools.

IP2X retains sole control of all information that could re-identify individuals.

4Permitted Use

Research Partners may use Exercise Data solely for:

• approved research projects;
• academic publication;
• statistical modelling;
• population health analysis;
• validation of exercise adherence and behaviour patterns;
• development of research insights relating to physical activity.

Research Partners must not use the data for any commercial purpose unrelated to the approved research project without prior written consent from IP2X.

5Prohibited Uses

Research Partners must not:

• attempt to re-identify any individual;
• attempt to link data with other datasets for identification purposes;
• contact any Client or individual represented in the dataset;
• share raw datasets with unauthorised third parties;
• sell, license or commercially exploit the data;
• use the data for profiling individuals;
• use the data for insurance underwriting, employment decisions or commercial targeting;
• publish any information that could reasonably lead to identification of individuals.

6Publication and Outputs

Research Partners may publish findings derived from Exercise Data provided that:

• all published results are aggregated or anonymised;
• no individual can reasonably be identified from the publication;
• no Commercial Partner can be identified without consent;
• publication complies with applicable ethical and academic standards.

Where there is any doubt regarding identifiability, the Research Partner must seek prior written approval from IP2X before publication.

7Data Security

Research Partners must implement appropriate technical and organisational security measures, including:

• restricted access controls;
• encryption of stored data;
• secure storage environments;
• audit logging where appropriate;
• access limited to authorised personnel only;
• secure deletion protocols.

Research Partners must immediately notify IP2X of any suspected or actual data breach.

8Retention and Deletion

Unless otherwise agreed in writing:

• Exercise Data may only be retained for the duration of the approved research project;
• upon completion, data must be securely deleted or further anonymised so that individuals can no longer be identified;
• Research Partners must confirm deletion or anonymisation in writing upon completion of the project.

9Ethics and Compliance

Research Partners must comply with all applicable laws and ethical standards, including:

• UK GDPR and Data Protection Act 2018;
• institutional ethics committee requirements;
• NHS or health research governance frameworks where applicable;
• any relevant academic or public research codes of conduct.

Where required, Research Partners must obtain appropriate ethical approvals before accessing data.

10Intellectual Property

IP2X retains all intellectual property rights in:

• the IP2X platform;
• Exercise Data structures;
• data formatting methodologies;
• verification outputs;
• underlying datasets and system architecture.

Research Partners retain intellectual property in their own research outputs.

However, no rights are granted to reverse engineer, replicate or commercially exploit IP2X systems or datasets beyond the scope of this Agreement.

11Confidentiality

Research Partners must keep confidential:

• all non-public Exercise Data;
• dataset structures;
• access methodologies;
• any information disclosed by IP2X in connection with the Services.

Confidentiality obligations survive termination of this Agreement.

12Liability

IP2X provides Exercise Data on an "as is" basis.

IP2X does not warrant:

• accuracy of research interpretations;
• suitability of data for any specific research purpose;
• that data will be free from errors or omissions.

To the maximum extent permitted by law, IP2X shall not be liable for any indirect or consequential loss arising from use of the data.

Nothing in this Agreement excludes liability that cannot lawfully be excluded under English law.

13Suspension and Termination

IP2X may suspend or terminate access to Exercise Data if a Research Partner:

• breaches this Agreement;
• attempts re-identification of individuals;
• misuses data;
• fails to comply with ethical or legal obligations;
• compromises data security.

Upon termination, all data must be deleted or returned as instructed by IP2X.

14Governing Law

This Agreement is governed by the laws of England and Wales.

Any dispute arising from this Agreement shall be subject to the exclusive jurisdiction of the courts of England and Wales.