Privacy Policy

This policy covers BP Log on iOS and Android. CORDOC LLC ("we", "us") is the controller of the personal data described below. We built BP Log to keep your health data off our servers entirely — where that data goes differs by platform, and both are described below.

Information we collect

Blood pressure readings and health data. Your readings, context tags, and orthostatic checks are always stored on your device first.

On iOS, this data additionally syncs through your own private iCloud account (via Apple's CloudKit) if you're signed into iCloud — never to a server we operate. On Android, this data stays on your device only: BP Logdisables Android's automatic backup entirely, so nothing syncs to Google Drive or anywhere else. If you connect Apple Health or Health Connect, that data lives in Apple's or Google's own on-device health store, governed by their respective privacy controls, not ours.

We never receive, see, or store your readings, notes, or health data on any server we operate, on either platform.

Purchase data. If you unlock BP Log Lifetime, Apple, Google, and our payments partner (RevenueCat) process your purchase and provide us an anonymous subscriber identifier and entitlement status — never linked to your name or email by us. We do not receive or store your payment card details; Apple and Google handle billing directly.

Product analytics — off by default. BP Log can optionally send a small, fixed set of anonymous usage events (e.g. app opens, feature usage counts, onboarding progress, purchase outcomes) through PostHog, our analytics processor, hosted in the United States. This is disabled until you turn it on yourself in Settings → Privacy → "Share Anonymous Usage Data" — a fresh install sends nothing. The allow-list of what an event can contain is enforced in our code, not just this policy: no event is capable of carrying a blood pressure value, category, note, tag, or any other clinical data, even once enabled. Where analytics data leaves the EEA/UK (as it does, to PostHog's US infrastructure), we rely on Standard Contractual Clauses with PostHog as the transfer safeguard.

Our legal basis for processing

Blood pressure and health data are "special category data" under GDPR. We rely on your consent for this processing — given practically through the platform permissions you control directly (enabling iCloud sync, granting Apple Health/Health Connect access) and, for analytics, through the Settings toggle described above, which defaults to off. Purchase data is processed under our contractual necessity to deliver the Lifetime features you paid for.

How we use it

Analytics data, when enabled, is used only to understand feature usage and improve the app. It is never sold or shared with advertisers, and BP Log does not show ads.

Purchase/entitlement data is used only to determine whether BP Log Lifetime features are available to you.

How long we keep it

Health data lives on your device (and, on iOS, your private iCloud account) for as long as you keep it there — we have no separate retention schedule of our own since we never receive a copy. Analytics events, when enabled, are retained by PostHog only for as long as necessary for the purposes above, under our data processing agreement with them. Purchase/entitlement records are retained by RevenueCat for as long as needed to support your purchase and to meet legal recordkeeping requirements.

Your rights

Since your health data lives only on your device (and your own iCloud account, on iOS), you already hold full, direct control over it: view, export as CSV, or delete it at any time from within the app, or erase all of it at once by uninstalling — we have no copy on our end to separately delete.

For the smaller amount of data held by our processors (purchase records with RevenueCat, and analytics events with PostHog if you've enabled them), you have the right to access, correct, delete, restrict, or object to that processing, and to receive a copy of it in a portable format. Email [email protected] to exercise any of these rights; we'll respond within one month. If you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority at any time.

You can manage or cancel any purchase anytime in your device's subscription settings (Apple ID → Subscriptions on iOS, Google Play → Payments & subscriptions on Android). If you connect Apple Health or Health Connect, that connection and everything it shares is controlled by you in the Health app's or Health Connect's own privacy settings, and you can revoke access at any time.

Children

BP Log is not directed at children and we do not knowingly collect data from anyone under the age required to consent to data processing in their jurisdiction.

Changes to this policy

If we make a material change to how we handle your data, we'll update the "Last updated" date above and, for significant changes, note it in the app itself.

Questions or rights requests? [email protected]
CORDOC LLC, 4030 Wake Forest Rd, Ste 349, Raleigh, NC 27609