BPal app icon

Privacy Policy

Blood Pressure Monitor : BPal · LuvleeLab

Last updated: August 2026

This Privacy Policy describes how BPal (“the App”) handles your information. Blood pressure readings are health data, and the App is built so that they stay on your device.

1. Information We Collect

The App does not require you to create an account or provide your name or email address. The following categories of data are processed:

  • Blood pressure readings – The systolic value, diastolic value, pulse, timestamp, measurement context (morning, evening, before medication, after medication, after exercise, other), tags (seated, standing, lying, left arm, right arm, stressed, caffeine, medication) and any note you write. Entered manually, imported from a Bluetooth monitor, or read from Apple Health. Stored on your device.
  • Weight entries – Weight value, unit and timestamp, entered by you or read from Apple Health. Stored on your device.
  • Health profile – Optional onboarding answers such as age, whether you have been diagnosed with hypertension, how often you measure, and your goals. Used to personalise the experience and to apply age-appropriate privacy settings. Stored on your device.
  • Classification standard and units – Whether you use AHA/ACC 2025 or ESC 2024 categories, and your preferred weight unit. Stored on your device.
  • Medication list – Medication names and details you choose to record so readings can be tagged before or after taking them. Stored on your device.
  • Reminders – Scheduled notification times you configure. Stored on your device; notification delivery is handled entirely on-device by iOS.
  • Paired devices – The identifier and name of any Bluetooth blood pressure monitor you pair, and which user slot on that device is yours. Stored on your device.
  • App settings – Language preference, colour scheme, text size and accessibility options. Stored on your device.

We do not collect your name, email address, precise location, or any other directly identifying information.

2. Health Data Storage

All blood pressure readings, weight entries, medication records and health profile data are stored entirely on your device using Apple’s SwiftData framework. There is no automatic cloud synchronisation of your health data to us. Your data never leaves your device except through Apple Health, if you grant permission (Section 3), or through a backup or report export that you initiate yourself.

This local-only approach means your health information stays under your direct control. We cannot access it, and it is not transmitted to our servers or to any third-party cloud storage service.

To move your data to another device you can export a JSON backup from Settings and restore it on the new device. Backup files and exported reports contain your health data — store and share them carefully.

3. Apple Health (HealthKit)

With your permission, the App exchanges data with the Apple Health app:

  • Blood pressure – read and written. A reading saved in BPal can be written to Health as a systolic sample, a diastolic sample and a blood pressure correlation, so other health apps and your Apple Watch can use it.
  • Heart rate – read and written, paired with the corresponding blood pressure reading.
  • Weight (body mass) – read only. The App never writes weight to Apple Health.

Where the App uses Apple Health to keep your own devices in sync, that data flows through Apple’s Health store under your iCloud settings, not through any server of ours.

Data obtained through HealthKit is never used for advertising, never shared with third parties, and never transmitted to our servers or to our analytics or crash-reporting providers. You can grant or revoke each permission at any time in iOS Settings › Health › Data Access & Devices, and the App continues to work with manual entry if you do.

4. Bluetooth Blood Pressure Monitors

If you pair a Bluetooth monitor, the App communicates directly with that device over Bluetooth Low Energy to import the readings it has stored. It supports monitors implementing the standard Bluetooth Blood Pressure Profile and several Omron models using their own protocol.

This connection is local to your phone and the cuff. No reading is sent to us or to the monitor’s manufacturer by the App. The App requests Bluetooth permission for this purpose only, and uses a background mode solely to complete an import that is already in progress. You can revoke Bluetooth access at any time in iOS Settings › Privacy & Security › Bluetooth.

5. Advertising & App Tracking Transparency

The App displays interstitial advertisements powered by Google AdMob for users who have not subscribed to Premium. Non-personalised ads are shown by default. The App asks for your permission using Apple’s App Tracking Transparency (ATT) framework before any personalised advertising.

  • Default (no ATT permission): only non-personalised ads are shown. Your device’s advertising identifier is not used for targeting or measurement.
  • If you grant ATT permission: Google AdMob may use your device’s advertising identifier (IDFA) to show personalised ads and measure ad performance.

No health data is ever used for ad targeting, regardless of your ATT choice. Your blood pressure readings, categories, pulse, weight, medication list, diagnosis status and health profile are never shared with any advertising provider.

In the European Economic Area and the United Kingdom, the App also asks for your consent under EU and UK privacy law, via Google’s User Messaging Platform, before requesting any advertising identifier. You can reopen that consent form from Settings at any time.

If you have told the App you are under the age of consent, ad requests are tagged accordingly and personalised advertising is not requested.

You can change your ATT choice at any time in iOS Settings › Privacy & Security › Tracking. Subscribing to Premium permanently disables all advertising and the associated data collection within the App.

Google AdMob Privacy Policy: policies.google.com/privacy

6. Third-Party Services

The App uses the following third-party services:

  • RevenueCat – processes and verifies your Premium subscription. RevenueCat receives an anonymous user identifier and your Apple purchase receipt. No health data is shared. Privacy Policy
  • Mixpanel – collects anonymous usage analytics so we can understand how the App is used and improve it. Events are linked only to an anonymous device identifier, never to your name. Health-related fields are removed before any event is sent, in every region — this includes your systolic, diastolic, pulse and weight values, the category a reading falls into, its severity flag, its measurement context, and your diagnosis status, medication information and health goals. Note text is never sent. Data obtained through Apple Health is never sent. What remains is ordinary product analytics: which screens are opened, which features are used, and non-health demographics such as age group. Privacy Policy
  • Sentry – collects crash reports and error logs so we can improve stability. Reports include the anonymous device model, iOS version and app version, and a trail of which actions were taken before a crash — recorded as event names only, never with their values. No readings, notes, medication records or other health data are included. Privacy Policy

7. Medical Disclaimer

BPal is a logging tool intended to help you record and organise blood pressure readings you take with your own monitor. It does not measure blood pressure, does not provide medical advice, diagnosis or treatment, and is not a substitute for professional care. The categories, averages, distributions, MAP figures and statistical summaries it calculates are for informational and self-monitoring purposes only. A single reading cannot diagnose hypertension. Always consult your doctor about your readings and before making any change to your treatment.

8. Data Retention & Deletion

Your readings, weight entries, medication records and health profile remain on your device until you delete them. You can delete an individual reading from its detail screen in History. To remove data in bulk, use the delete option in Settings › Data & Backup, which confirms before proceeding. Where the App created Apple Health samples itself, it removes those too on a best-effort basis; samples written by other apps are left untouched. Deleting the App from your device removes all locally stored data.

9. GDPR (European Users)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct or request deletion of any data held about you. Because your health data is stored on your own device, you already have direct control over it and can export or delete it yourself at any time. For data held by the third-party services listed in Section 6, please refer to their respective privacy policies, or contact us and we will assist where we can.

10. CCPA (California Users)

We do not sell your personal information. For advertising purposes, Google AdMob may use your IDFA only with your explicit ATT consent. You may opt out at any time as described in Section 5.

11. Children’s Privacy

The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you tell the App you are under the age of consent in your region, advertising requests are tagged accordingly and personalised advertising is not requested. If you believe a child under 13 has used the App, please contact us and we will take appropriate steps.

12. Changes

We may update this Privacy Policy from time to time. We encourage you to review it periodically. Continued use of the App after a change constitutes acceptance of the updated policy.

13. Contact

[email protected]