BMDL Raw Data Register

BMDL Raw Data Register is an internal research tool of the Bio-Integrated Microdevices Laboratory (BMDL), Koç University. It is distributed only to authorized laboratory members and is used to document and verify research raw data.

What the app records

Registered files.When you register files, the app creates a manifest on your computer with file and folder names, sizes, SHA-256 checksums and timestamps, the experiment you chose, and a random installation identifier. The app never reads or changes the contents of your research files beyond computing their checksums.
Your identity.When you sign in, the app receives your name and your institutional Koç University email address from Google. It records you as the operator of the files you register.
A computer profile.Once per computer you say whether it is an instrument computer (and which instruments) or a personal/office computer. With each upload the app also sends the operating system and version, the computer manufacturer and model, whether it has a battery, the names of installed applications, whether the files came from a fixed, removable or network drive, and a one-way fingerprint of the computer name. The computer name itself is never sent or stored. These details only help the laboratory check that data came from the instrument it claims to; they never block an upload.
Each sign-in.Every time you sign in, the app sends the laboratory the app version, an installation identifier, the operating system and version, the processor architecture, the computer type (instrument or personal/office) and a machine fingerprint. The fingerprint is a SHA-256 hash of a fixed laboratory prefix and the computer name. It is not reversible in general, but someone who already knows a computer's name can compute the hash and match it. The computer name itself is never sent.
An installation register.The laboratory keeps a register of installations showing who signed in on each and how many uploads were made. It is linked to your signed-in email address and is visible only to the principal investigator.
How files were made.On personal or office computers, each upload also records your answer to whether the files were recorded on that computer or copied from another.
What it does not collect.No location, contacts, browsing history, usage analytics, advertising identifiers or tracking.

Google sign-in and Google user data

What the app asks Google for.Only your basic identity: the openid and email permissions. The app does not ask for access to your own Google Drive, Gmail, calendar or any other Google data.
How sign-in data is handled.Your sign-in tokens are kept only in the app's memory while you are signed in. They are never written to disk, never shown on screen and are discarded when you sign out, after 15 minutes without activity, or when the app closes.
Where files go.Files you upload are written directly to the laboratory's own Google Drive (the BMDL laboratory account), not to your Drive. The laboratory's server holds the only Drive permission, limited to files it creates (drive.file), and it checks each uploaded file's SHA-256 checksum with Google Drive.
Limited Use.BMDL Raw Data Register's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to sign you in, attribute and verify your research data, and deliver it to the laboratory. It is not used for advertising, not sold, and not used to train AI models.

Where data goes

On your computer.Registration, checksums and export work without Internet access. Nothing leaves your computer until you upload or transfer a package.
Laboratory services.Uploads go to the laboratory's Google Drive. The manifest, checksums, computer profile and verification results go to the laboratory's LabMate server (hosted on Railway), which confirms the transfer and sends a receipt to you and the principal investigator in the laboratory Slack workspace.
Update checks.When you choose “Check for updates”, the app asks the BMDL release site for the current version number; no personal data is sent. Windows updates are delivered by Microsoft Store.

Use, sharing and retention

Data is used only to document and verify research data within BMDL and is kept according to Koç University and laboratory research-data policies. It is not sold or shared with anyone other than the service providers named above (Google, Railway, Slack) acting for the laboratory. Every sign-in, upload and verification step is recorded in the laboratory's audit log.

To ask what data is held about you, or to request correction or deletion, contact bmdl@ku.edu.tr. You can also remove the app's access to your Google account at any time at myaccount.google.com/permissions.