Privacy policy

This policy explains what BP & Sugar Tracker collects, why, where it is stored, and how you can export or delete it. It is written to be read, not to be skipped.

1. What we collect

Category	Examples	Why
Account	Email address, password hash, account created date	To sign you in and keep your records separate from everyone else's
Profile (optional)	Name, date of birth, gender, height, units, time zone	To display readings in your units and label your report
Health records	Readings, medicines and dose logs, meals, activity, sleep, symptoms, notes, uploaded photos	This is the product — it exists to store them for you
Technical	IP address, browser type, timestamps of sign-in and API requests	Security, abuse prevention and debugging

We do not sell your data, and we do not use your health records to serve advertising.

2. Where it is stored

Records are stored in a managed database on our server infrastructure, transmitted over HTTPS, with passwords stored only as salted hashes. Copies of your data may exist in encrypted backups for a limited retention window after deletion.

3. How the assistant handles your data

When you use the in-app assistant, a summary of your own recorded data for the period in question is sent to a third-party language-model provider to generate the reply. Only your data is sent — never another user's. If you would rather this never happens, turn the assistant off in Settings › Privacy, and no data is sent to that provider.

4. Third-party services

• Hosting and database infrastructure
• A language-model provider, used only for assistant replies you request
• Email delivery, for account verification and password resets

We do not claim any certification (such as HIPAA or ISO 27001) that we have not actually completed and verified.

5. Your rights

• Export. Download all of your records as CSV at any time from Settings › Privacy › Data export.
• Correct. Every record in the app can be edited or deleted individually.
• Delete. See below.

6. Deleting your data

Settings › Privacy › Delete account removes your profile and every health record associated with it. Deletion is permanent and cannot be reversed, so export first if you want a copy. Encrypted backups are purged on their normal rotation, within 30 days.

7. Children

Accounts are intended for adults. A parent or guardian may record a child's measurements within their own account, and remains responsible for that information.

8. Changes

If this policy changes materially, we will show a notice in the app before the change takes effect.

9. Contact

Privacy questions and deletion requests: see the contact page.