Privacy Policy — My BP Diary

✅ Our Core Privacy Commitment

We never collect, access, or transmit your blood pressure or pulse rate data
All physiological data is stored exclusively on your device, your iCloud account, or your authorized Apple Health database
The developer is technically incapable of accessing any of your personal health information

1Introduction

My BP Diary (hereinafter referred to as "the Application") is developed and maintained by an independent individual developer. This application is designed to help you conveniently record and track blood pressure and pulse rate measurements for personal health awareness.

This Privacy Policy explains how we treat your information — and more importantly, how we do not collect your sensitive data. Please read this document carefully to understand our practices regarding data privacy.

2Information We Collect

📌 My BP Diary does not collect, store on remote servers, or transmit any personal health or sensitive identity data. All blood pressure readings, pulse rates, dates, and notes you enter remain entirely under your control. The唯一的 data processing is strictly limited to non-sensitive backend telemetry required for core app functionality, such as Pro version purchase validation.

Except for the essential infrastructure required to validate purchases and unlock Pro features, this application does not contain any of the following services:

Third-party advertising tracking or behavioral analytics (e.g., Meta Pixel, Google Analytics)
Crash reporting services that harvest user identities (e.g., Firebase Crashlytics)
Third-party telemetry or general data-mining SDKs
Session recording, heatmaps, or user interaction tracking tools

3Health & Physiological Data

My BP Diary handles sensitive physiological information. We are committed to the following practices in full compliance with Apple App Store Review Guidelines (including Guideline 5.1.3 for HealthKit) and applicable privacy regulations:

Health data (blood pressure, pulse, timestamps, and associated notes) is never collected or seen by the developer.
Health data is never used for advertising, marketing, or cross-app tracking purposes.
Health data is never used for user profiling or any other form of automated behavioral evaluation.
Health data is never disclosed or sold to third parties for any purpose whatsoever.
Health data is processed solely on your device, in your local Apple Health app, or via Apple's encrypted CloudKit infrastructure.

4How Data Is Stored

💾 Local Storage — Apple SwiftData

All blood pressure and pulse readings you enter are stored locally on your device using Apple SwiftData technology. This data never leaves your device through any channel controlled by the developer. No external servers are involved in storing your health logs.

☁️ iCloud Sync — Apple CloudKit

If you are signed into an Apple ID with iCloud enabled, your health records may be synchronized across your multiple Apple devices via Apple CloudKit. This synchronization is:

End-to-end encrypted and managed entirely by Apple.
Governed by Apple's Privacy Policy.
Completely inaccessible to the developer at all times.

You can disable iCloud synchronization at any time from your device's system Settings app.

🍎 Apple HealthKit Integration

If you enable Apple Health integration in the Application, the Application will write your blood pressure and pulse measurements directly to the official Apple Health app (HealthKit) on your device. This integration is:

Stored Locally: All data is saved directly into Apple's secure, system-encrypted health database on your device.
No External Transmission: The developer does not upload, transmit, or share your HealthKit data with any external servers.
Strict Compliance: We commit to never using this health data for any advertising, marketing, tracking, or profiling purposes.

You can manage or completely revoke this permission at any time via the system settings, as detailed in Section 8.

🔐 App Preferences & Local Configuration

The Application uses local storage (such as SharedPreferences) to store basic operational states and user preferences. This data is stored strictly on your device and includes:

Purchase Status: To verify your Pro version status and enable premium features locally.
Consent Records: To remember that you have reviewed and accepted our Privacy Policy and Terms of Use.
App Settings: Such as language preferences or chart display options.

Data Integrity Statement: These operational preferences do not contain any health-related data (e.g., blood pressure logs) or personally identifiable information (PII).

5Third-Party Services

My BP Diary integrates only essential core infrastructure services, including the following Apple-provided systems and RevenueCat:

🛒 Apple App Store In-App Purchase (IAP)

Purchases of the Pro version upgrade are processed exclusively through Apple's App Store payment infrastructure. The developer receives no credit card numbers, payment account details, or financial information from these transactions. All IAP receipts are verified securely through Apple's servers, governed by Apple's Privacy Policy.

☁️ Apple iCloud / CloudKit

As described in Section 4, CloudKit synchronization is an Apple service. The developer does not operate backend servers and cannot access CloudKit data belonging to any user, governed by Apple's Privacy Policy.

🧾 RevenueCat (Purchase Management)

We use RevenueCat to securely validate and manage App Store purchase receipts. In alignment with our App Store privacy disclosures, RevenueCat processes only randomly generated anonymous App User IDs, basic device metadata, and purchase history to ensure premium features are unlocked across your devices (essential App functionality). RevenueCat does not access, collect, or link to any of your blood pressure, pulse, or health data. For details, please refer to the RevenueCat Privacy Policy.

🍎 Apple HealthKit (System Integration)

HealthKit is an integrated iOS system service provided by Apple for securing and consolidating personal health metrics. The integration with HealthKit is governed by Apple's Privacy Policy. The Application does not share your HealthKit data with any third parties.

6Feedback Communications

When you use the in-app feedback feature to send an email, your email address and the content of your message will be used solely to respond to your inquiry and to improve the application. This information is never shared with any third parties.

This communication occurs entirely through your personal email client on your device. No data is sent to or stored on developer-operated web servers.

7Children's Privacy

My BP Diary is not directed at children under the age of 13. We do not knowingly collect personal information from children. Since the application does not harvest personal identity data from any user, children's information is likewise never collected, stored, or transmitted.

If you believe a child has provided personal information through feedback communications, please contact us immediately so we can take appropriate action.

8Your Rights & Choices

Because all health data is stored locally on your device or within your encrypted cloud, you retain full control at all times:

Delete individual records — within the application at any time.
Delete all data — instantly via the app settings, or by uninstalling the application from your device.
Disable iCloud sync — via iOS Settings > [Your Name] > iCloud > Apps Using iCloud.
Manage Apple Health Permissions — you can view, enable, or revoke the Application's read/write privileges for health data at any time via the iOS Settings app (Settings > Privacy & Security > Health > My BP Diary) or directly inside the Apple Health app.
Request refunds — through Apple's standard IAP refund process at reportaproblem.apple.com.

If you are located in the European Economic Area (EEA), California, or other jurisdictions with applicable data protection laws, please note that since we do not harvest personal data, data subject rights such as access, rectification, and erasure are exercised directly through your device's native operating system controls.

9Data Security

The security of your health data is of paramount importance. Because we do not transmit or store your data on external servers, the primary security layer is your device's own operating system, which includes:

iOS device encryption (AES-256) when your device is locked.
Apple's Secure Enclave for biometric authentication protection.
Apple CloudKit's end-to-end encryption for synced database segments.

We strongly encourage you to use a strong passcode and enable Face ID/Touch ID on your device to protect access to your health information.

10Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

Your continued use of My BP Diary after any modifications to this Privacy Policy constitutes your acceptance of the updated terms.

11Contact Us

✉️

Questions or Concerns?

If you have any questions about this Privacy Policy or
our data practices, please reach out to us.

tuna.ryu.dev+ios@gmail.com