Privacy Policy

This policy covers BP Log on iOS and Android, BP Log for Mac and Windows, the BP Log Excel workbook, the free printable log, and the free tools and purchase pages on bplog.cc. CORDOC LLC("we", "us") is the controller of the personal data described below. We built BP Log to keep your health data off our servers entirely. Where that data goes differs by product, and each is described below.

Information we collect

Blood pressure readings and health data. Your readings, context tags, and orthostatic checks are always stored on your device first.

On iOS, this data additionally syncs through your own private iCloud account (via Apple's CloudKit) if you're signed into iCloud, never to a server we operate. On Android, this data stays on your device only: BP Logdisables Android's automatic backup entirely, so nothing syncs to Google Drive or anywhere else. If you connect Apple Health or Health Connect, that data lives in Apple's or Google's own on-device health store, governed by their respective privacy controls, not ours.

On Mac and Windows, your readings are stored in a database on your computer, protected by your computer's user account. If you turn on backup, the app writes backup snapshots to a destination you choose, and they travel directly from your computer to that destination:

Google Drive.If you choose "Connect Google Drive", you sign in to Google in your own web browser and grant BP Log the drive.filepermission only. With it, the app creates a folder called "BP Log Backups" in your My Drive and can see and manage only the files it created there. It cannot see, read, or change any other file in your Google Drive. Backups are uploaded straight from your computer to your Google account using Google's Drive API; they never pass through a server we operate, and we cannot access them. The sign-in token Google issues is kept in your operating system's keychain (macOS Keychain or Windows Data Protection). Choosing "Disconnect" revokes the token at Google and deletes it from your computer. You can also remove access at any time from your Google Account's security settings.

A synced folder.If you pick a folder instead, such as one in iCloud Drive, OneDrive, or Dropbox, the app saves snapshots there and that provider's own app syncs them under its own privacy policy.

If you set a backup password, snapshots are encrypted on your computer (AES-256-GCM, with a key derived from your password) before they are written anywhere. We never receive your password and cannot recover it.

Google API Services User Data Policy. BP Log's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The app uses Google Drive access only to store and restore your own backups, at your request. Google user data is never transferred to us or to anyone else, never used for advertising, and never read by a person.

Excel workbook and printable log. Whatever you type into the workbook stays in your copy of the file, wherever you save it. The printable log is paper, or a PDF you fill in on your own device. We never see either.

Free tools on bplog.cc.The calculators run entirely in your web browser. Numbers you enter are not sent to us. Some tools remember your progress or recent results in your browser's local storage, on your device only, and you can clear them with your browser's site data settings.

We never receive, see, or store your readings, notes, or health data on any server we operate, in any of our products.

Purchase data (iPhone and Android). If you unlock BP Log Lifetime, Apple, Google, and our payments partner (RevenueCat) process your purchase and provide us an anonymous subscriber identifier and entitlement status, never linked to your name or email by us. We do not receive or store your payment card details; Apple and Google handle billing directly.

Purchase data (bplog.cc). When you buy BP Log for Mac, BP Log for Windows, or the Excel workbook on bplog.cc, checkout is handled by Stripe, which collects your payment details, email address, and the billing address needed to calculate sales tax. We never receive your full card number. Stripe sends us your email address, the product you bought, the amount, and Stripe's reference numbers. We store those, together with your license key and whether the purchase was refunded, in a database hosted by Cloudflare, so we can show your purchase after checkout, resend it when you ask, and tell the desktop app whether a key was refunded. Purchase emails are sent through Resend, which processes your email address and the message (your license key and download links). None of this includes health data.

License checks.When it is online, the desktop app may send your license's purchase reference to bplog.cc to ask whether that purchase was refunded. The request carries nothing else from the app, and the app never needs it to open, show, or export your data.

Website and security data.bplog.cc is hosted on Cloudflare, which processes standard request data such as IP addresses to deliver the site and protect it from abuse. To limit misuse of the "resend my purchase" form, we store a one-way hash of the email address and IP address for one hour. The website does not use advertising or tracking cookies.

Product analytics, off by default (iPhone and Android). BP Log can optionally send a small, fixed set of anonymous usage events (e.g. app opens, feature usage counts, onboarding progress, purchase outcomes) through PostHog, our analytics processor, hosted in the United States. This is disabled until you turn it on yourself in Settings → Privacy → "Share Anonymous Usage Data"; a fresh install sends nothing. The allow-list of what an event can contain is enforced in our code, not just this policy: no event is capable of carrying a blood pressure value, category, note, tag, or any other clinical data, even once enabled. Where analytics data leaves the EEA/UK (as it does, to PostHog's US infrastructure), we rely on Standard Contractual Clauses with PostHog as the transfer safeguard. The Mac and Windows apps do not send usage analytics.

HIPAA

BP Log is a consumer product you use for yourself. CORDOC LLC is not a HIPAA covered entity or business associate, and BP Log is not offered on behalf of a doctor, hospital, or health plan, so HIPAA does not apply to it. We follow a simpler rule instead: your health data never reaches our servers at all.

Our legal basis for processing

Blood pressure and health data are "special category data" under GDPR. We rely on your consent for this processing, given practically through the platform permissions you control directly (enabling iCloud sync, granting Apple Health/Health Connect access, connecting Google Drive) and, for analytics, through the Settings toggle described above, which defaults to off. Purchase data is processed under our contractual necessity to deliver what you paid for. Security data and the resend rate limit are processed under our legitimate interest in keeping the service safe.

How we use it

Analytics data, when enabled, is used only to understand feature usage and improve the app. It is never sold or shared with advertisers, and BP Log does not show ads.

Purchase and entitlement data is used only to deliver your purchase: unlocking BP Log Lifetime, issuing and resending license keys and download links, handling refunds, and meeting tax and accounting obligations. We do not send marketing email.

How long we keep it

Health data lives on your device (and in your own iCloud, Google Drive, or synced folder, if you choose) for as long as you keep it there. We have no separate retention schedule of our own since we never receive a copy. Analytics events, when enabled, are retained by PostHog only for as long as necessary for the purposes above, under our data processing agreement with them. Purchase and entitlement records are retained by RevenueCat, Stripe, and us for as long as needed to support your purchase and to meet legal recordkeeping requirements (generally up to seven years for tax records). Resend keeps delivery logs for a limited period under its own policy.

Your rights

Since your health data lives only on your devices and in accounts you control, you already hold full, direct control over it: view, export as CSV, or delete it at any time from within the app, delete your backups from your own Google Drive or folder, or erase everything by uninstalling. We have no copy on our end to separately delete.

For the smaller amount of data held by us and our processors (purchase records with RevenueCat, Stripe, Cloudflare, and Resend, and analytics events with PostHog if you've enabled them), you have the right to access, correct, delete, restrict, or object to that processing, and to receive a copy of it in a portable format. Email support@cordoc.comto exercise any of these rights; we'll respond within one month. If you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority at any time.

You can manage or cancel any purchase anytime in your device's subscription settings (Apple ID → Subscriptions on iOS, Google Play → Payments & subscriptions on Android). If you connect Apple Health or Health Connect, that connection and everything it shares is controlled by you in the Health app's or Health Connect's own privacy settings, and you can revoke access at any time.

International transfers

Stripe, Cloudflare, Resend, RevenueCat, and PostHog may process data in the United States. Where data leaves the EEA or UK, we rely on Standard Contractual Clauses or an equivalent safeguard offered by each provider.

Children

BP Log is not directed at children and we do not knowingly collect data from anyone under the age required to consent to data processing in their jurisdiction.

Changes to this policy

If we make a material change to how we handle your data, we'll update the "Last updated" date above and, for significant changes, note it in the app itself.

Questions or rights requests? support@cordoc.com
CORDOC LLC, 4030 Wake Forest Rd, Ste 349, Raleigh, NC 27609