Privacy policy for Blood Pressure

• No account, no sign-in. The app sends me no data on its own.
• What you create in the app stays on your device.
• No ads, no analytics, no tracking.
• The app reads and writes health data only in Apple Health or Health Connect on your device. It sends it nowhere.

Responsible for the app Blood Pressure is:

For any question about data protection, write to [email protected]. There is no data protection officer, because the law does not require one for a business of this size.

The app stores on your device only your reminder settings. It does not keep your readings itself but saves them in Apple Health.

This data lives only on your device; I have no access to it. It is needed for the features you use (section 25(2) no. 2 TDDDG, Art. 6(1)(b) GDPR). Deleting the app removes it.

If backups are turned on (iCloud or Google), the operating system includes the app data in them. You control this in your device settings; Apple’s or Google’s terms apply.

The app asks for a permission only when you use the feature. You can revoke any permission in your device settings at any time; the rest of the app keeps working. The legal basis is your permission in the system dialog (Art. 6(1)(a) GDPR, section 25(1) TDDDG).

• Camera: To measure your pulse you place a finger on the camera; the app evaluates the brightness of the images with the light on. The images are processed only on the device, not added to your photos and not sent.
• Notifications: The app reminds you to measure in the morning and evening if you turn that on. It schedules the reminders on the device.

With your permission, the app reads from Apple Health (iPhone) or Health Connect (Android): blood pressure (systolic and diastolic), heart rate and heart rate variability. It writes: the blood pressure readings you enter and, if you enter it, the heart rate.

Health data is specially protected (Art. 9 GDPR). The app processes it only on your device to show it to you and sends it neither to me nor to anyone else. The legal basis is your explicit consent in the system dialog (Art. 9(2)(a) GDPR). You can change what the app may see at any time in Apple Health or Health Connect.

For questions, write to [email protected].

I use your message only to help you and delete it once the matter is settled. The legal basis is your use of the app (Art. 6(1)(b) GDPR) or my legitimate interest in answering (Art. 6(1)(f) GDPR). The mailboxes are hosted by STRATO GmbH, Berlin, as my processor.

When you download or update the app, Apple processes data such as your account details and device ID under its own responsibility. I have no influence on this. From the stores I receive only aggregated statistics (such as downloads per country) and crash reports not linked to you, if you allowed sharing them in your device settings.

Where I process personal data about you, you have these rights:

• Access to your data (Art. 15 GDPR)
• Correction of wrong data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Receiving your data in a common format (Art. 20 GDPR)
• Withdrawal of consent, at any time and for the future (Art. 7(3) GDPR)

Objection (Art. 21 GDPR): Where processing rests on a legitimate interest (Art. 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation. I then stop, unless there are compelling legitimate grounds that override your interests, or the processing serves legal claims.

An informal email to [email protected] is enough. You may also lodge a complaint with a data protection authority (Art. 77 GDPR), for example the one responsible for me:

www.baden-wuerttemberg.datenschutz.de

I do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

When the processing changes, I update this policy. The date at the top shows the last revision. The German version prevails.