Everything in Blood Pressure Log & Report is typed in by you. The app measures nothing itself.

• Readings — blood pressure, pulse, weight, blood oxygen (SpO₂), and the date and time each was taken
• A note against any reading, in your own words
• Your name, if you enter one. It appears at the top of the app’s screens and on every page of a report you print
• Your medications — names, doses, how often you take them, and, if you choose, a photograph of the bottle
• Your settings — colour theme, text size, which vitals to record, reminder times, and pounds or kilograms

That is the whole list. The app asks for no address, no date of birth, no phone number, no doctor’s details and no email address.

What you record is stored on your iPhone and in your own private iCloud account. That is your iCloud, not mine. It is what lets a year of readings survive a phone that is lost, broken or replaced.

I never see any of it. I do not run a server, there is no account, and nothing you record is sent to me. Your readings, your name, your medications and your photographs never reach me, because there is nowhere for them to go.

Apple carries the sync between your iPhone and your iCloud as part of the iCloud service you already have. What Apple does with iCloud is covered by Apple’s own privacy policy.

Because the store is your own iCloud, deleting the app does not delete your readings — see section 8.

• No analytics and no usage tracking. I do not know how many readings you have taken, which screens you visit, or whether you opened the app today.
• No crash reporting of my own, and no advertising identifier.
• No third-party software that gathers anything. The app contains no advertising network, no analytics library and no tracker.
• Nothing is sold or shared. Your health information is not used for advertising, is not sold, and is not given to advertisers or data brokers. There is nothing for me to sell, because I hold nothing.

This is why the app’s App Store listing reports Data Not Collected.

You can add a photograph of a medication bottle, which is useful when a label is hard to read. It is entirely optional.

The camera is used only when you tap Take a photo on a medication screen, and iOS asks your permission the first time. You can also choose an existing picture from your photo library instead.

The photograph is stored with that medication, in the same private store as everything else, and syncs the same way. It is not printed on your report, and it is not sent anywhere. A photograph taken inside the app is not added to your camera roll, so removing it from a medication removes the only copy.

The daily reminders are local notifications, scheduled by the app on your own iPhone. Nothing is sent to a server, and no server sends anything to you. iOS asks your permission before the first one is scheduled.

You can turn them off at any time in the app, under Settings → Daily reminders, or in iOS Settings.

Pro is an optional yearly subscription, and Apple handles the purchase, not me.

I do not receive your name, your payment details, your card, your billing address or your Apple ID. The app asks Apple one question — does this Apple account have a current subscription? — and gets back yes or no. Nothing about the subscription is stored by the app.

What Apple does with a purchase is covered by Apple’s own privacy policy and the App Store terms.

The app can produce a PDF report and a spreadsheet from what you have recorded. You decide whether to save, print, email, message, AirDrop or otherwise send them, and to whom.

The moment one leaves the app it is out of my reach and out of yours. Whoever handles it next — Apple, an email provider, a printer, a clinic, a cloud drive, a family member — handles it under their own rules, not this policy.

A report carries your name on every page, deliberately, because printed pages get separated and stapled wrong. Treat it as you would any other medical paperwork.

Settings › Write to the developer opens your iPhone's own mail screen with your message already in it. The app does not send anything itself. You send it, from your own email account, and you see the whole message before you do.

What goes with it is written into the message where you can read it: the app's version number and your iPhone's model identifier, so a problem can be found faster. No readings, notes, medications or photographs are ever included.

Because it arrives as ordinary email, I see your email address and whatever you choose to write. Those messages sit in my own mailbox, and I use them only to answer you and to fix the app.

If your iPhone has no email account set up, the app cannot start a message for you and shows my address instead, so you can write from somewhere else.

You control all of it, and you do not need to ask me.

• One reading — open it from History and tap Delete this reading. That removes everything recorded with it, including its note.
• Everything — Settings → Delete everything. This removes every reading, note and medication from this iPhone and from your iCloud backup. It cannot be undone.

Copies you have already exported or shared are outside the app, and neither of us can reach them.

Your record is protected by your iPhone’s own security: your passcode, Face ID or Touch ID, and the encryption iOS and iCloud provide. Keeping those turned on is the thing that matters most, because they are what stands between your record and somebody holding your phone.

There is no password to this app and no account of yours for anyone to break into, because there is no account.

No device or storage system can be promised to be perfectly secure, and I do not promise it.

Privacy laws — including the California Consumer Privacy Act, the UK and EU General Data Protection Regulation, and others like them — give you the right to see the personal information a company holds about you, to correct it, to take a copy of it, and to have it deleted.

Every one of those rights is in your own hands, without asking anyone, because the information is on your own device and in your own iCloud:

• See it — it is all in the app
• Correct it — open any reading and edit it
• Take a copy — the Report tab prints a report free, and with a Pro subscription Settings → Save a copy makes a spreadsheet of everything
• Delete it — Settings → Delete everything

I hold no copy of your information, so there is nothing for me to send you, correct or erase on request. There is also nothing to sell, so there is no sale to opt out of.

HIPAA governs healthcare providers and the companies that work for them. I am neither, and this app is not a clinic’s records system — which is another way of saying that nobody but you has what is in it.

Blood Pressure Log & Report is not directed at children. The Terms of Use require you to be at least 18 to use the app.

I do not knowingly collect personal information from children — or from anybody else — because, as section 3 says, nothing is collected at all.

This policy may be updated when there is a reason to, such as a change to the app or to the law. The effective date at the top shows when it was last changed. If a change ever means information starts being collected, this policy will say so plainly before it happens.

Questions about this policy, or about privacy in Blood Pressure Log & Report:

Kristina Nelson
kjoysky31@gmail.com