Privacy Policy

1. Controller

The provider of the Blood Pressure Diary app for iOS and Android, and the controller within the meaning of the General Data Protection Regulation (GDPR) for the processing described in this policy (for example when you write to us), is:

Sprint Zero UG (haftungsbeschränkt)
Wienburgstraße 23
48147 Münster
Deutschland

Represented by the managing directors Thomas Kraaibeek and Niklas Feldmann.
Email: apps@sprint-zero.de

Further details are in our legal notice (German).

2. Your data stays on your device

The app is built so that we, as its provider, receive no personal data from you. Everything you record in the app is stored only locally on your phone:

• Readings: blood pressure (systolic and diastolic), pulse, date and time, arm and note
• Settings: for example reminder times, app lock, a running measuring week and the name you may enter for the doctor report

On iPhone, this data is kept in a SwiftData database in the app’s protected storage area (app container); on Android, in a Room database and DataStore in the app’s private storage. Other apps cannot access this storage area. Your device’s encryption also protects the data; for this, set up a passcode or screen lock. If you like, you can also lock the app (section 7).

We run no server for the app. Your readings and settings are not transferred to us. This means we can neither see them nor restore or delete them for you. In addition:

• no user account, no registration
• no cloud sync; on iPhone, the app deliberately does not sync via iCloud (CloudKit)
• no analytics or statistics services, no advertising, no tracking
• no third-party software components (SDKs) for analytics or advertising
• no access to your device’s advertising ID
• no cookies

Storing your entries and settings on your device is strictly necessary for the features you use in the app (Section 25(2) no. 2 of the German TDDDG).

3. Health data (Art. 9 GDPR)

Blood pressure and pulse readings are health data and therefore belong to the special categories of personal data under Art. 9 GDPR. The app processes them only on your device, at your initiative, under your control and for your own personal purposes: you decide which readings you enter, import, export or delete. We do not receive this data, we do not store it on our own systems, we cannot see it and we have no access to it.

For this processing, we only provide you with the software. We are therefore not a controller within the meaning of the GDPR for what you record in the app on your device; it is a purely personal activity (Art. 2(2)(c) GDPR). We nevertheless describe in full how the app handles this data so that you can follow it.

The app accesses Apple Health or Health Connect only if you explicitly allow this in the operating system’s permission dialog (see section 5).

4. Network and device backups

Android

The Android app has no permission to access the internet. It is therefore technically unable to send data over the internet.

Android’s automatic backup of app data to Google Drive (Auto Backup) is turned off for your readings and settings: the app excludes this data through its backup rules. A direct device-to-device transfer, which Android 12 and later offers when you set up a new phone, remains possible. Whether you use it is up to you; it is controlled by the operating system, and we receive no data in the process.

iPhone

The iOS app makes no network connections of its own for your data. If you use your iPhone’s device backup (iCloud Backup or a backup on a computer), the app’s data is part of that backup, as with any other app. You set up and control this backup yourself in the iOS settings; Apple’s terms apply to iCloud backups. We have no access to it.

5. Apple Health and Health Connect (optional)

Connecting to Apple Health (iPhone) or Health Connect (Android) is optional. The app accesses them only if you allow it in the operating system’s permission dialog, and only these data types:

• Read: blood pressure and heart rate, to copy readings into the app (“Import from Apple Health” or “Import from Health Connect”). This feature is free.
• Write: blood pressure and heart rate, and only if you turn on “Save to Apple Health” or “Save to Health Connect” (Pro feature). While this is on, the app automatically also saves new readings there, including imported ones. If you edit or delete a single reading in the app, the app also edits or deletes the entry it created for it in Apple Health or Health Connect. It does not change entries from other apps and devices.

The exchange happens only on your device, between the app and Apple Health or Health Connect. We do not receive this data. The app uses data from Apple Health or Health Connect only for its features: to show your readings, calculate averages and include them in reports and exports that you create yourself. We do not use it for advertising, do not sell it and do not share it; nobody at our company can see it. Data stored in Apple Health or Health Connect is managed by the operating system; Apple’s or Google’s terms apply.

Without your permission in the dialog, the app neither reads nor writes. Insofar as this access is attributed to us under data protection law, granting the permission is your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw it at any time with effect for the future by revoking the permissions:

• iPhone: Settings › Health › Data Access & Devices (iOS 18 and later: Settings › Apps › Health › Data Access & Devices), or in the Health app via your profile picture › Apps
• Android: in the Health Connect settings under “App permissions”

If you turn saving off, use “Delete all readings”, revoke the permission or uninstall the app, the readings the app has already saved to Apple Health or Health Connect stay there. You then delete them directly in Apple Health or Health Connect.

6. Purchases (Pro)

Pro is available as a one-time purchase or a yearly subscription. Purchase and payment are handled entirely by Apple (App Store) or Google (Google Play), under their own responsibility and privacy policies: apple.com/legal/privacy and policies.google.com/privacy. Data may also be transferred to the USA in the process; according to Apple and Google, they base this on the EU-US Data Privacy Framework or on standard contractual clauses.

Your payment details go only to Apple or Google. On your device, the app asks the store whether you have bought or subscribed to Pro and unlocks the features accordingly; this information stays on your device. “Restore purchases” asks the store about your purchases again; this, too, gives us no data about you.

From Apple and Google we receive sales reports without names, email addresses or payment details. They can, however, relate to individual purchases: Apple’s subscription reports show a random ID per subscriber as well as country and device type; Google Play’s reports show, among other things, an order number, the device model and the buyer’s country, region and in some cases postcode for each purchase. We use these reports only for accounting and tax purposes and keep them for as long as commercial and tax law requires, usually 8 to 10 years (Art. 6(1)(c) GDPR).

7. Reminders, app lock and ratings

Reminders

The app schedules reminders for your readings, including during a measuring week, as local notifications directly on your device. There is no push server, and no data is transferred. You allow or block notifications in the operating system settings. On Android, the app reschedules its reminders after the device restarts or the time changes; for this it has permission to run when the device starts.

App lock

If you turn on the app lock (“Lock with Face ID” on iPhone, “Lock with screen lock” on Android), the operating system checks that it is you: with Face ID or Touch ID, or with fingerprint or face unlock, falling back to your screen lock code. The app only receives “success” or “failure”, never biometric data.

Ratings

The app may occasionally show Apple’s or Google’s rating dialog. Whether and how you rate is processed by Apple or Google. We receive no data through the dialog itself; we see published reviews in the store like everyone else.

8. Export, backup and import

The app creates CSV exports, PDF reports for your doctor and backup files (JSON) on your device, and only when you trigger it. These files leave your device only when you share or save them: through the share sheet, the Files app, a storage location of your choice, by email or when printing. Where a file goes from there is your choice, and the terms of that service apply, for example those of your email or cloud storage provider. We do not receive these files. Please keep them safe, as they contain your health data.

Until you share or save a file, it stays only in the app’s protected storage: on iPhone in the app’s temporary folder, which iOS clears itself; on Android in the app’s cache. On Android, the app deletes files there that are older than one hour the next time it starts.

When you import (“Import readings”) or restore a backup, the app reads a file you select yourself, locally on your device: CSV files from other apps, the Apple Health export (export.zip or export.xml) or a backup file of this app. No data is transferred to us in this case either.

9. Crash reports

The app contains no crash reporting service of its own. However, Apple and Google provide diagnostic data to us as developers under the following conditions:

• iPhone: Only if you have turned on “Share With App Developers” in the iOS settings under Privacy & Security › Analytics & Improvements does Apple share crash reports and diagnostic data with us, according to Apple in aggregated form or in a form that does not personally identify you.
• Android: Google Play provides us with aggregated data and reports about crashes and “app not responding” errors (ANR, Android vitals). They come only from devices on which you have agreed to automatically send usage and diagnostics data to Google.

These settings are controlled by Apple or Google, and you can change them there at any time. The reports contain technical details such as device model, operating system and app version and the program state at the time of the error; the app adds no readings to them. We view them in Apple’s and Google’s developer consoles and use them only to fix errors; how long they are kept there is determined by Apple or Google. The legal basis is our legitimate interest in an app that works without errors (Art. 6(1)(f) GDPR).

10. Links in the app

Some links in the app open content in your browser or in the store: this privacy policy, the legal notice, the source of the measuring guide at the Deutsche Hochdruckliga (German Hypertension League), on iPhone Apple’s terms of use (standard licence agreement) and, on Android, Google Play’s subscription management and, if needed, the Health Connect page in Google Play. Only when you tap such a link is data such as your IP address transferred to the website concerned, whose privacy policy applies. For our website sprint-zero.de (server log files, visitor statistics with Plausible), see the website’s privacy policy (German).

11. Contacting us by email

If you write to us, for example via “Contact support” in the app or directly at apps@sprint-zero.de, we process your email address, your name (if provided), the content of your message and the technical metadata of the email (e.g. time of receipt) in order to handle and answer your request.

The legal basis is Art. 6(1)(b) GDPR where your request relates to the performance of a contract or to steps taken prior to entering into a contract; in all other cases Art. 6(1)(f) GDPR, our legitimate interest being to answer your request.

Please do not send us readings, export files or backup files unless your request requires them. If you send us such health data anyway, we use it only to answer your request and delete it once your request has been dealt with. The legal basis is then your explicit consent, which you give by sending us this information for your request (Art. 9(2)(a) GDPR); you can withdraw it at any time with effect for the future.

We delete your data as soon as it is no longer needed for this purpose, unless statutory retention obligations (in particular under commercial and tax law) prevent this. Our mailboxes are hosted by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Incoming emails are processed on their servers in Germany. We have concluded a data processing agreement with ALL-INKL.COM in accordance with Art. 28 GDPR.

Answers to common questions are on the app’s support page.

12. Deleting your data

You can delete single readings in the history (iPhone: swipe left; Android: tap the reading › “Delete reading”), and all of them at once in the settings with “Delete all readings”. If you uninstall the app, all of its data on the device is deleted. If “Save to Apple Health” or “Save to Health Connect” is on, deleting a single reading also deletes the app’s entry there (see section 5).

This does not cover copies outside the app: export and backup files you have saved or shared, readings in Apple Health or Health Connect (except in the case just mentioned), and device backups such as iCloud Backup. You delete those where they are stored.

13. Your rights

With regard to personal data concerning you, you have the following rights against us:

• Access to the data we process (Art. 15 GDPR)
• Rectification of inaccurate or incomplete data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Notification of recipients about rectification, erasure or restriction (Art. 19 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR, see below)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR), for example by revoking the app’s access to Apple Health or Health Connect

To exercise your rights, an informal message to apps@sprint-zero.de is enough. Please note: we do not hold data that exists only on your device, i.e. everything you record in the app. That data is under your control, and you can export or delete it at any time.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
(State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
www.ldi.nrw.de

14. Further information

You are under no legal or contractual obligation to provide us with personal data. You can use the app in full without transmitting any data to us. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

The app is not a medical device. It only stores values you enter or import; it does not measure and does not diagnose. It is intended for adults.

We will update this privacy policy whenever the app or the legal situation changes. The version published here applies. This English version is a translation; if it differs from the German version, the German version prevails.

Last updated: 25 October 2026 · Deutsche Fassung