Privacy Policy

Effective date: October 30, 2026

This policy explains what happens to your information when you use the BP Notebook app on iPhone, iPad or Android. BP Notebook is published by Aetheris Innovations LLC, Mount Joy, Pennsylvania, USA (“we”, “us”).

1. What the app stores on your phone

BP Notebook is a diary. You type in the numbers from your own devices, and the app saves them in a database inside the app's private storage on your phone. This includes:

• Readings: blood pressure, pulse, blood glucose, weight, oxygen saturation (SpO₂) and body temperature, with the date, time and time zone of each reading, and details you add such as arm, body position, meal timing and notes.
• Reminders: the times and days you choose.
• Settings: units, the blood pressure table you chose, theme, language, and backup dates.
• Ad timing records: when the app was first opened, how many times it has been opened, and when an ad, a saved reading or a very high reading last happened. The app uses them to keep ads rare and away from those moments. They stay on your phone and are never sent to Google.

If you add a name, date of birth or doctor's name to a PDF report, that text is used only to create that PDF. The app does not keep it after you leave the report screen.

The app does not use the camera, microphone, location or body sensors. It does not take any readings itself.

2. What we never do

• We do not ask you to create an account or sign in.
• We do not run a server for the app. Your readings are never uploaded to us, and we cannot see them.
• We do not use analytics, tracking or crash reporting tools in the app.
• We do not send your readings or other health information to Google, RevenueCat or anyone else.
• We never use your health information for advertising. Ad requests from the app contain no readings, notes, reading types or blood pressure categories.
• We do not sell your health information.

3. Reports, exports and backups

You can create a PDF report, a CSV file or a backup file. These files are made on your phone. They leave your phone only when you choose where to send or save them, for example email, a messaging app, Files, Google Drive or iCloud Drive. After that, the service you chose handles the file under its own privacy terms.

• Backups contain your readings, reminders and settings. A normal backup is not encrypted, so keep it somewhere private.
• Encrypted backups (Pro) are locked with a passphrase you choose (AES-256-GCM, with a key made from your passphrase using Argon2id). We never see your passphrase and cannot recover it. Without it, the backup cannot be opened by anyone, including us.
• Automatic weekly backups (Pro, if you turn them on) are saved, not encrypted, in the app's own folder on your phone: on iPhone in Files › On My iPhone › BP Notebook › Backups; on Android in the folder Android/data/com.aetheris.bpnotebook/files/Backups. They are not sent anywhere.
• The last report or backup you shared stays in the app's private temporary storage until your next export, so the app you shared it with can finish reading it. Delete all data removes it, and your phone may also clear this storage.

4. Ads from Google

The free version shows ads from Google AdMob. Pro has no ads. Ads are never shown on the add-reading screen, during setup, on the backup and purchase screens, or with a very high reading notice.

What Google may collect

When the app loads an ad, the Google Mobile Ads software in the app sends a request to Google. According to Google's disclosures, Google may collect:

• your device's IP address, which can be used to estimate your general location (for example your city or region, not your exact location);
• device identifiers, such as the Android advertising ID and app set ID, or on iPhone the advertising identifier (IDFA) only if you allow tracking, and other identifiers limited to the app or developer;
• ad and app interactions, such as app launches, taps on ads, ads seen and video views;
• diagnostic information about how the app and Google's software perform.

Google uses this data to show ads and report on how they perform, for analytics and to prevent fraud, under its own policies. Google says this data is encrypted in transit. Google never receives your readings from the app.

Sources: Google Mobile Ads data disclosure for Android, Google Mobile Ads data disclosure for iOS, How Google uses information from sites or apps that use its services, and the Google Privacy Policy.

Your choices

• Consent message. In the European Economic Area, the United Kingdom and Switzerland, and in some US states, the app shows Google's consent message (Google's User Messaging Platform) before it loads ads. You can accept or refuse personalized ads. If you refuse, you may still see ads that are not personalized or are limited, which Google may still use some data for, such as preventing fraud and counting ads.
• Change your choice later: open Settings › Privacy › Privacy options in the app. This item appears where Google's consent rules apply.
• iPhone and iPad: after the consent message, the app may ask if it may track your activity (Apple's App Tracking Transparency). If you chose “Do not consent” in the consent message, the app does not ask. If you choose “Ask App Not to Track”, Google does not receive the advertising identifier and the app works exactly the same. You can change this at any time in the iPhone Settings app › Privacy & Security › Tracking. See Apple: If an app asks to track your activity.
• Android: you can reset or delete your advertising ID in your phone's settings (usually Settings › Privacy › Ads, or Settings › Google › Ads, depending on your phone).
• Google ad settings: you can control ad personalization in Google's My Ad Center.

We ask Google to show only ads suitable for a general audience (rated up to PG) and to block some sensitive ad categories, such as dating, gambling, weight loss, drugs and supplements, alcohol and politics.

5. Purchases

BP Notebook Pro is sold through the Apple App Store or Google Play. Apple or Google handles the payment. We never see your card or bank details, your name or your email address.

We use RevenueCat to check whether you have Pro and to let you restore a purchase. When the app opens, it asks RevenueCat whether Pro is active. RevenueCat then receives:

• a random app user ID that the app creates. It is not your name, email or account, and it is not linked to any other information about you;
• your purchase history for BP Notebook from Apple or Google (products, dates, prices, store transaction IDs and renewal status), plus your store country and currency;
• basic technical information needed to make a connection, such as your IP address, app version and platform.

We have turned off RevenueCat's collection of device advertising identifiers and its diagnostics. We do not send RevenueCat any profile details or health information. RevenueCat processes this data on our behalf to provide the purchase features. Sources: RevenueCat Privacy Policy, RevenueCat: Apple App Privacy, RevenueCat: Google Play Data safety.

Apple and Google handle your purchases under their own privacy policies: Apple Privacy Policy and Google Privacy Policy.

6. Permissions the app asks for

• Notifications, only if you turn on reminders. Reminders are scheduled on your phone. Their text, such as “Time to log your blood pressure.”, never contains your readings.
• Tracking (iPhone and iPad only), as described in section 4. Saying no does not change how the app works.
• Internet access, used only for ads, the consent message and purchases. Links you tap, such as this policy, open in your web browser.

When you restore a backup, you pick the file in your phone's own file picker. The app gets access only to the file you pick.

7. Phone backups and moving to a new phone

• Android: the app turns off Google's automatic cloud backup for its data. On newer Android versions, a direct transfer from your old phone to a new phone (by cable or wirelessly) may copy the app's data to the new phone.
• iPhone and iPad: if you use iCloud Backup or back up your device to a computer, Apple's device backup can include the app's data, including automatic backups in the app's folder. Apple handles those device backups under your Apple Account; we cannot access them.

The most reliable way to move your data is a BP Notebook backup file. See Support: moving to a new phone.

8. Children

BP Notebook is meant for adults. It is not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom, and the app's audience in the app stores is set to 18 and over. We do not knowingly collect personal information from children. If you believe a child has used the app and you have a concern, contact us.

9. Keeping and deleting your data

Your data stays on your phone until you delete it. Because we don't have your readings, we can't delete or restore them for you.

• Delete one reading: the reading disappears at once and you can tap Undo for a few seconds. When Undo goes away, the reading is erased from the app's database for good. If the app is closed before then, it is erased the next time you open the app. Until then it is hidden and is not in reports, exports or backups.
• Delete everything: in the app, open Settings › Your data › Delete all data. This removes all readings, reminders and settings from the app's database, cancels your reminders, and deletes the automatic backup files in the app's Backups folder and the last report or backup you shared from the app's temporary storage. It does not remove backup files or reports you saved elsewhere (for example in Files, Google Drive, iCloud Drive or email), or other files you put in the Backups folder yourself.
• Uninstall the app: your phone removes the app and all of its data, including the automatic backup folder. Copies you saved elsewhere, and phone backups made by Apple or Google's device transfer, are not affected.
• Ad data: Google keeps data under its own retention rules. You can manage it in My Ad Center and your Google Account, and reset or delete your advertising ID as described in section 4.
• Purchase data: RevenueCat keeps purchase records for as long as we need them to provide Pro and for legal and accounting reasons. To ask us to delete your RevenueCat record, contact us with your store order number (from your Apple or Google receipt). If we delete it, you may need to tap Restore purchases to turn Pro on again. Apple and Google keep their own purchase records.

10. Security

• Your readings are kept in the app's private storage, which other apps cannot read. Your phone's own protection, such as its screen lock and storage encryption, protects them. The app does not add a separate password to its database, so please use a screen lock.
• Connections to Google and RevenueCat are encrypted in transit.
• Pro encrypted backups use AES-256-GCM. Choose a passphrase that others cannot guess, and keep it safe.

No method of storage or transfer is perfectly secure, but keeping your health information off our servers means it cannot be exposed in a breach of our systems.

11. Your privacy rights

Your readings are fully under your control on your phone: you can see them, export them (PDF or CSV), copy them (backup) and delete them at any time, without asking us.

European Economic Area, United Kingdom and Switzerland

For the limited data handled in connection with the app, Aetheris Innovations LLC is the controller, and RevenueCat processes purchase data on our behalf. Google decides how it uses ad data under its own policies. Our legal bases are:

• your consent for personalized ads and for storing or reading information on your device for ads, collected through Google's consent message (you can withdraw it at any time in Settings › Privacy › Privacy options);
• our legitimate interest in funding the free version with non-personalized or limited ads and in preventing fraud, where Google's consent message lists this purpose;
• performance of a contract to provide Pro features you buy.

You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. You can also complain to your local data protection authority. Because we hold no readings and the RevenueCat ID is random, we may ask for your store order number to find your record.

United States

Depending on your state (for example California, Colorado, Connecticut, Virginia and others), you may have the right to know, access, correct and delete personal information, and to opt out of the “sale” or “sharing” of personal information for targeted advertising.

• We do not sell your readings or any other health information, and we do not use them for advertising.
• When the free version lets Google collect device identifiers and ad interactions for personalized ads, some state laws may treat this as “selling” or “sharing” for targeted advertising. To opt out, use Settings › Privacy › Privacy options in the app where it appears, choose “Ask App Not to Track” on iPhone, or delete your advertising ID on Android. Buying Pro also removes ads.
• We will not treat you differently for using your privacy rights.
• You can make a request, or appeal our answer to one, by contacting us. An authorized agent can make a request for you.

12. Where data is processed

We are based in the United States. Google processes ad data on its servers around the world. RevenueCat stores data in the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, these companies use legal safeguards such as standard contractual clauses or the EU-U.S. Data Privacy Framework, as described in their own policies.

13. Not a medical device

BP Notebook is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Always talk to your doctor before making medical decisions.

If you have a medical emergency, call your local emergency number now.

14. Changes to this policy

If we change this policy, we will post the new version on this page and update the effective date. If a change affects how your information is handled in a significant way, we will also tell you in the app or in the app store release notes before it takes effect.

15. Contact us

Aetheris Innovations LLC
Mount Joy, Pennsylvania, USA
Email: support@bpnotebook.com

We aim to reply within 3 business days, and to complete privacy requests within the time the law requires (usually 30 to 45 days).