Privacy policy

The short version

Under Pressure keeps a logbook of blood pressure readings you type in yourself. The application keeps those readings on your device and nowhere else. The application has no account, no sign-in, no analytics, no advertising, and no network permission at all: it cannot send anything anywhere, because the operating system will not let it open a connection.

Nothing is collected. Nothing is shared. Its Play Data Safety form names no data type, because there is none to name.

What is stored, and where

Everything you enter is written to the application's own private storage on your device. Readings, the times you took them, any note you attach and your protocol series go into its database; your reminder times go into its settings file. Other applications cannot read either one. The application itself copies nothing anywhere, and has no server to copy it to.

One copy can exist that the application does not make. If Android's own backup is turned on for your account, the system may include this application's storage in the device backup it keeps, as it does for other applications; that copy is made, kept and restored by the system under your account's backup settings, and the application has no part in it.

Removing the application removes its storage. Removal does not reach that backup copy, and it does not reach the two things covered in the next section: a file you exported, and a reading you sent to Health Connect.

What leaves the device, and only when you send it

Two things can leave, and both of them are actions you take:

1. Export. You choose export, the application writes an export file or a summary document, and the system's own share sheet asks you where it should go. The application hands the file to whichever app you pick and has no part in what happens after that.
2. Health Connect. If you turn it on, readings you have already entered are written to Android's Health Connect store, which is on your device and under your control. The permission this application holds is write only. It never reads what other applications have put there, and it has never asked for the permission that would let it (AndroidManifest.xml).

Neither is automatic and neither happens in the background. If you never use them, nothing ever leaves. Both leave a copy that removing the application does not touch: the Health Connect store is the system's, and an exported file is wherever you sent it.

What the application asks the system for

Five of Android's permissions. Four are for a feature you can see:

• Notifications, asked for the first time you turn on a reminder, so a reminder can appear.
• Exact alarms, so a reminder lands at the time you set rather than whenever the system gets to it.
• Start after reboot, so your reminders survive a restart.
• Write blood pressure to Health Connect, asked for only if you open that room and turn it on.

The fifth is a wake lock, which arrives with the library that draws the home-screen widget: the widget is drawn inside a unit of work that library runs, and the library holds the lock while that work runs. There is no INTERNET permission. Two more permissions that the same library would otherwise have added, one for reading network state and one for foreground services, are explicitly removed from the manifest, so they do not appear on the application's permission list either.

Children

Under Pressure is for adults keeping their own logbook. It is not directed at children and collects nothing from anyone.

Changes

If this text ever changes, the version published at underpressure.aldermetric.com/privacy is the one that applies, and the date at the top of it says when it last moved.

Contact

Alan Gaudet, [email protected].