Privacy Policy

BloodPressure is committed to protecting your privacy and personal data. This Privacy Policy describes how we collect, use, store, and protect your information when you use the app.

We fully comply with applicable data protection laws and international privacy standards including GDPR and HIPAA.

2.1 Information you provide directly:

• Account info: Full name, email address, password (encrypted), date of birth, gender.

• Health data: Systolic blood pressure, Diastolic blood pressure, Heart Rate, and measurement timestamp.

• Optional profile info: Height, weight, medical history (entirely optional).

2.2 Information collected automatically:

• App usage data: Session frequency, features used, session duration.

• Device info: Device type, operating system, app version, timezone.

• Crash reports: Technical error data to improve the app (no health data included).

We use the information collected for the following purposes:

• Service delivery: Store and display your blood pressure data, generate charts and trend analysis.

• Personalization: Tailor the interface, reminders, and reports to your habits.

• App improvement: Analyze anonymized data to enhance feature quality and performance.

• Technical support: Resolve issues and assist users when needed.

• Important notifications: Send account-related, security, or policy-change notices.

We do NOT use your health data for advertising purposes or sell it to third parties.

4.1 Storage location: Your data is stored on cloud servers compliant with ISO 27001 international security standards.

4.2 Encryption: All health data is encrypted at rest using AES-256. All connections between the app and our servers are protected with TLS 1.3.

4.3 Access control: Only you can access your personal data. Our staff cannot read your health data unless you explicitly share access.

4.4 Backups: Data is automatically backed up daily to prevent loss.

4.5 Retention: Data is retained for as long as your account is active. Upon account deletion, all data is permanently erased within 30 days.

We do not sell, trade, or transfer your personal data to third parties, except in the following cases:

• Service providers: Trusted technical partners (cloud hosting, app analytics) who are contractually bound to confidentiality.

• At your request: When you use the report export feature to share data with your doctor.

• Legal requirements: When required by a lawful order from a competent government authority.

• Emergency situations: When necessary to protect the safety or life of you or another person.

Under applicable law, you have the following rights regarding your personal data:

• Right of access: View and download all your data at any time.

• Right of rectification: Update or correct inaccurate information.

• Right of erasure: Request deletion of your account and all associated data.

• Right to restrict processing: Request that processing of your data be limited in certain circumstances.

• Right to object: Opt out of data processing for marketing purposes.

To exercise any of the above rights, please contact us at: admin@thienanstudio.org

The BloodPressure mobile app uses local storage technologies to:

• Save your interface preferences and settings.

• Maintain a secure login session.

• Collect anonymized analytics to improve app performance.

You can clear locally stored data at any time through the app or device settings.

The BloodPressure app is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Users aged 13 to 18 require parental or legal guardian consent and supervision. If a violation is detected, we reserve the right to delete the account immediately.

In the event of a security incident that may affect your data, we commit to:

• Detect and contain the incident as quickly as possible.

• Notify you via email within 72 hours of discovering the incident, in accordance with applicable data protection regulations.

• Provide detailed information about the scope of the impact and the protective steps you should take.

• Fully cooperate with relevant authorities in investigating and addressing the incident.

We may update this Privacy Policy to reflect changes in how we process information or changes in applicable law.

Any significant changes will be communicated via email and an in-app notification at least 30 days before taking effect. The date of the last update is always displayed at the top of this page.

If you have any questions, concerns, or complaints about this Privacy Policy or our data processing practices:

📧 Privacy email: admin@thienanstudio.org

📧 Support email: admin@thienanstudio.org

🌐 Website: https://thienanstudio.org

📍 Address: Vietnam

We are committed to responding within 5 business days of receiving your request.