BPLog Privacy Policy
1. Introduction (The Short Version)
This Privacy Policy (the "Policy") explains how information is handled in BPLog (Japanese name: 血圧手帳), an iPhone application (the "App") provided by Yuya Sato ("we," "us," or "our").
- The blood pressure records you enter are stored only on your iPhone. We operate no server, and we never receive your records.
- The App has no account registration. There is no screen anywhere in the App for entering a name, email address, or phone number.
- The App contains no third-party software (SDKs) for advertising, analytics, crash reporting, or tracking.
- The only device permission the App uses is notifications. It does not access the camera, photos, location, contacts, the microphone, Health data, or anything similar.
- The only way we receive personal information is if you choose to email us.
That said, "we do not receive your data" is not the same as "your data can never leave your device." Apple handles purchase records, and if you use the share feature yourself, a file goes to the recipient you choose. The sections below explain that distinction precisely.
2. Information the App Handles on Your Device
| Information | Examples | Source | Where it is stored |
|---|---|---|---|
| Blood pressure records | Date and time, upper value, lower value, pulse (optional), morning / evening / other category, note | Entered by you | The App's private area on the device (SwiftData) |
| Reminder settings | Whether the morning and evening reminders are on, and at what times | Set by you | On the device (UserDefaults) |
| Whether you have finished the introduction | Yes / No | App behavior | On the device (UserDefaults) |
| Dates used to decide when to ask for a review | First launch date, date we last asked, and the App version at that time | App behavior | On the device (UserDefaults) |
Purposes: storing and displaying your blood pressure records, calculating averages and charts, creating PDF reports, running reminders, deciding whether to show the introduction again, and avoiding asking for an App Store review too often.
None of this is sent to us. The App contains no code for communicating with any server of ours or with any external service, other than App Store purchase processing and opening the App Store review page.
Blood pressure values and notes are health information and deserve careful handling. The App performs no processing that takes this information off your device other than the action you take yourself, described in Section 3.
3. The Only Way Information Leaves Your Device: Sharing It Yourself
Two features of the App create files on your device:
- the PDF report (Report screen); and
- backup files (Settings screen) — a CSV you can open in a spreadsheet and a dedicated format (JSON) that restores everything including notes, both created at once.
These files contain the blood pressure values, pulse, and notes you entered, exactly as entered. A file is first placed in a temporary area on your device. The standard iOS share sheet then opens, and you choose where it goes — printing it, emailing it, sending it in Messages, saving it to the Files app or cloud storage, and so on.
We cannot specify that destination and have no way of knowing what was shared. Managing a file after you share it is your responsibility. Please check the recipient carefully, including when you hand a report to a medical facility.
Files left in the temporary area are deleted automatically by iOS as needed.
4. Information We Receive
The only channel through which we receive information from you is email you send us.
| What we receive | Your email address and whatever you write in the message (your name, device and OS version, a description of a problem, and so on — whatever you choose to include) |
|---|---|
| Purpose | Replying to your inquiry, and considering fixes and improvements based on it |
| Disclosure to third parties | None. We use no processors and no joint controllers |
| Retention | Deleted within roughly one year after the exchange ends and no further reply is needed |
| Deletion requests | Email the same address to request deletion and we will act on it |
There is no need to include blood pressure values, medical history, or other health information in your message beyond what is necessary for us to reply.
5. Information Apple Handles
In connection with your use of the App, there are situations in which Apple handles information. Apple processes it under Apple's Privacy Policy, and we never receive it in a form that identifies you.
| Situation | What Apple handles | What we can see |
|---|---|---|
| In-app purchase (buying or restoring the PDF export) | Purchase records tied to your Apple Account, and payment details | Only the sales reports in App Store Connect (aggregate counts and amounts). We cannot tell who purchased |
| Posting a review on the App Store | The rating, text, and nickname you post | Only the same content that is publicly visible on the App Store |
| Sharing crash and usage data (if you have allowed it under Settings > Privacy & Security > Analytics & Improvements) | Crash logs and usage statistics | Only the aggregate data shown in Xcode. Individuals cannot be identified |
| Whole-device iCloud Backup (if you have it turned on) | A backup of your device, which includes the App's records | Nothing. We have no access whatsoever |
A note about iCloud Backup: the App itself sends nothing to iCloud, but if you have whole-device iCloud Backup turned on, the App's records are included in that backup. This is standard iOS behavior, and Apple stores the backup in encrypted form. You can review or change the setting under Settings > [your name] > iCloud on your device.
The decision about whether to ask you for a review is made entirely on your device, using the dates listed in Section 2. iOS decides whether the request is actually shown, and we have no way of knowing whether it was.
6. Device Permissions the App Uses
| Permission | Used? | Details |
|---|---|---|
| Notifications | Yes (optional) | Used for the morning and evening reminders. Off by default; permission is requested only when you turn a reminder on. Declining does not restrict any other feature. You can change it at any time in the iOS Settings app |
| Camera / Photos / Microphone / Speech Recognition / Location / Contacts / Calendars / Reminders / Bluetooth / Motion / Health / Face ID / Tracking | None of them | The App's configuration file (Info.plist) contains no usage description for any of these permissions. You will never be asked for them |
The file picker used when restoring a backup is the standard iOS document picker. Only the single file you select is passed to the App, so no permission for broader file access is required.
7. Advertising, Analytics, Tracking, and Third-Party Disclosure
- The App displays no advertising. No advertising SDK is included.
- The App performs no analytics and collects no behavioral logs. No analytics SDK is included.
- The App uses no third-party crash reporting service (such as Firebase Crashlytics or Sentry).
- The App never requests App Tracking Transparency permission. It does not obtain the advertising identifier (IDFA) and does not track you across other companies' apps or websites.
- We do not disclose personal information to third parties, share it for joint use, or entrust its handling to anyone.
- We do not provide personal information to third parties located in other countries.
- We never use health information for advertising, marketing, or data sales.
Every software component in the App is one that Apple ships with iOS (SwiftUI, SwiftData, StoreKit, UserNotifications, PDFKit, Swift Charts, and the like). The App contains no third-party libraries at all.
The App's privacy manifest (PrivacyInfo.xcprivacy) likewise lists no collected data types and declares that no tracking occurs. Our App Store Connect "App Privacy" answer is "Data Not Collected."
8. Retention and How to Delete
| What | Retention | How to delete |
|---|---|---|
| Blood pressure records | Until you delete them or delete the App from your device | "Delete this record" on the record editing screen, or swipe left in the list. To erase everything, delete the App from your device |
| Reminder settings, introduction flag, review-timing dates | Until you delete the App from your device | Deleting the App erases all of them |
| Scheduled reminder notifications | Until you turn reminders off or delete the App | Turn the switches off in Settings, or delete the App |
| Temporary PDF and backup files | Deleted automatically by iOS as needed | — |
| Files you shared or saved | For as long as you keep them | Delete them in the app or service where you saved them |
| Email inquiries | Within roughly one year after no further reply is needed | Email us to request deletion |
| Purchase records held by Apple | Per Apple's policy | Contact Apple |
Deleting the App from your device erases your records, and they cannot be recovered. Before deleting it, export anything you need using "Save a backup" in Settings.
9. Security Measures
- Your blood pressure records are stored in an area that iOS keeps separate for each app. Other apps cannot read them.
- If your iPhone has a passcode (or Face ID / Touch ID) set, iOS data protection safeguards those files. We strongly recommend setting a passcode.
- Because we operate no server, there is no server of ours from which your information could leak.
- The App is designed to collect as little as possible and to avoid gathering information it does not need.
- For encryption, the App uses only the functionality that iOS provides as standard (declared to Apple as exempt for export-compliance purposes).
No method of protecting information is completely secure. We do not warrant complete security.
10. Your Rights Depending on Where You Live
The App is distributed worldwide, and depending on where you live, the following laws may be relevant. In every case, however, we hold no means of access to the records on your device, so there is no data in our hands to disclose, correct, or delete (other than the email described in Section 4). You can delete the records on your device yourself, using the methods in Section 8.
If you live in Japan
Under the Act on the Protection of Personal Information, you may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of the personal data we hold (the information contained in your email inquiries). Please contact us using Section 13. We will respond to the extent we can verify that the request comes from you.
If you live in the EEA or the United Kingdom
- With respect to the records on your device, we are neither a controller nor a processor under the GDPR. We cannot access those records and are not in a position to determine the purposes or means of processing them.
- We act as a controller only in respect of email inquiries. The legal basis for that processing is our legitimate interest in replying to you (GDPR Article 6(1)(f)). If you include health information in your message, we treat it as information you have manifestly made public to us by your own choice (Article 9(2)(a), explicit consent).
- You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability. Please contact us using Section 13.
- We operate as an individual based in Japan and have no establishment in the EU or the UK. Given the small scale and occasional nature of this processing, and the absence of large-scale processing of sensitive data, we believe no representative is required under GDPR Article 27. This is not a definitive legal determination, and we will act accordingly if the position changes.
- You have the right to lodge a complaint with the supervisory authority in your country.
If you live in the United States
- We do not "sell" personal information, and we do not "share" it for cross-context behavioral advertising.
- We do not believe we meet the revenue or volume thresholds that make the California or other state privacy laws applicable to a business. In any event, we neither sell nor share personal information, as stated above.
- For questions about exercising your rights, please contact us using Section 13.
11. Children
- The App is not designed for children and is not listed in the App Store Kids Category. It is intended primarily for adults who measure their blood pressure at home with their own monitor.
- The App has no screen that asks your age and collects no age information.
- The App collects no personal information from any user, including children, and displays no behaviorally targeted advertising.
- If a minor wishes to buy the paid feature, please obtain a guardian's consent and use a mechanism such as Ask to Buy in Apple's Family Sharing.
12. Changes to This Policy
We may change this Policy when the App's features change or when the law requires it. Changes take effect when posted on this page. If a change affects the information we obtain or the purposes for which it is used, we will note it in the App's release notes or on the App Store product page. The Japanese version of this Policy is the authoritative text; this English version is provided as a reference translation.
13. Contact
- Operator
- Yuya Sato
- yuya.sato1986@gmail.com
- Languages
- Japanese or English
The App is developed and operated by one person, so a reply may take some time.