1. Scope and who we are

This Privacy Policy applies to the SnapBP Android application (“SnapBP,” “the App”), and to the optional SnapBP account and synchronization services operated. “We,” “us,” and “our” mean the developer of SnapBP.

2. Information we handle

“Handle” includes information kept only on your device as well as information collected by transmitting it off your device. The information involved depends on the features you choose to use.

Local use and Android backup

You may use the core record, history, trend, and educational features without signing in. These records are stored in the App’s private local database. If Android backup or device-to-device transfer is enabled on your device, Android may back up or transfer the local database and non-authentication preferences according to your device and Google account settings. SnapBP excludes access tokens, refresh tokens, and other saved login session fields from Android backup.

Information we do not intentionally collect

The current version does not include advertising or third-party behavioral analytics. We do not collect precise location, contacts, SMS messages, call logs, microphone audio, or payment card numbers. The current release does not request camera permission.

3. How and why we use information

We use information only as reasonably necessary to:

• save, organize, edit, classify, filter, chart, and export your blood pressure and pulse records;
• manage family profiles and keep each measurement associated with the profile you selected;
• authenticate your optional SnapBP account through Google and maintain your signed-in session;
• synchronize eligible profile and measurement changes across the SnapBP server, resolve updates, and prevent duplicate records;
• provide, verify, and restore the lifetime Premium purchase through Google Play;
• operate, secure, troubleshoot, and protect the App and server from abuse or unauthorized access;
• respond to support, privacy, and account-deletion requests; and
• comply with applicable legal obligations.

Where applicable law requires a legal basis, we rely on performance of the service you request, your consent or deliberate choice for optional sign-in and sync, our legitimate interests in keeping the service secure and reliable, and compliance with law. You may use SnapBP offline if you do not want to use account synchronization.

4. When information is disclosed

We do not sell your personal information. Information may be disclosed only as follows:

• Google Sign-In: Google processes the sign-in request and provides the account details you authorize. See the Google Privacy Policy.
• Google Play Billing: Google processes the purchase, payment method, transaction, and restoration of Premium. We receive only the information needed to determine and acknowledge entitlement.
• Android backup and device transfer: if enabled by you or your device, Google or the device platform may process a backup or transfer of local App data.
• SnapBP service providers: infrastructure and hosting providers may process data on our behalf to operate authentication, synchronization, security, and backups. They may use it only to provide those services and under appropriate confidentiality and security obligations.
• Legal and safety reasons: we may disclose information if reasonably necessary to comply with law, enforce rights, investigate fraud or abuse, or protect users and the public.
• Business transfer: if the App or its service is reorganized, transferred, or acquired, information may transfer subject to this policy and applicable law.

5. Security

The App uses Android private application storage for local records and HTTPS for communication with the SnapBP server. Authentication tokens are excluded from Android cloud backup. We limit data handling to what is needed for the features described above. No security method is completely reliable, however, and we cannot guarantee absolute security. Protect access to your device, Google account, and any reports you export.

6. Retention and deletion

• Local data: remains on your device until you delete records or profiles, clear App storage, or uninstall the App. An Android backup created before deletion may remain under your Google backup settings and retention rules.
• Synced data: is retained while needed to provide your account and synchronization service. Deleted records can remain temporarily as deletion markers so that deletion is synchronized across copies.
• Account and security records: are retained for the period reasonably necessary for authentication, security, fraud prevention, dispute resolution, and legal compliance.
• Server backups: deleted information may remain for a limited period in protected backups until those backups rotate, unless a longer period is legally required.
• Export files: are created in App cache, but any copy you save or send is controlled by you and the selected destination.
• Google transactions: are retained by Google under Google’s own policies and legal obligations.

7. Request account and server-data deletion

If you used Google Sign-In, you may request deletion of your SnapBP account and the personal and health data associated with that account on the SnapBP server. Deleting your SnapBP account does not delete your Google account.

We may take reasonable steps to verify that the requester controls the account. After verification, we will delete or de-identify the account and associated synchronized profiles and health records without undue delay, except information we must retain for legal, security, fraud-prevention, transaction, or dispute purposes.

A server-side deletion request cannot erase copies that remain only on your offline device or reports you previously exported. Delete those in the App, clear the App’s storage, or uninstall the App. Google Play purchase records are managed by Google and may be retained separately.

8. Your choices and privacy rights

Depending on your location, you may have rights to:

• access or receive a copy of personal information we hold about you;
• correct inaccurate profile or account information;
• delete records, profiles, or your SnapBP account;
• object to or restrict certain processing;
• withdraw consent where processing relies on consent; and
• complain to your local data-protection authority.

You can edit or delete individual records and family profiles in the App, export data as PDF or CSV, sign out to stop new synchronization, and revoke SnapBP’s Google account access through your Google Account settings. Signing out alone does not delete data already synchronized to the server.

We do not sell personal information or “share” it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. Contact us to exercise a right. We may need to verify your identity and may deny or limit a request where permitted by law.

9. Children and dependent profiles

SnapBP is not directed to children who are below the minimum age required to manage their own online account under applicable law, and they should not create a SnapBP account themselves. An adult caregiver may create a local or synchronized family profile for a child or dependent only when the caregiver has the legal authority and appropriate consent to handle that person’s health information. Please enter only information necessary for the record-keeping purpose.

10. International data transfers

SnapBP, Google, and service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers and apply the protections described in this policy regardless of processing location.

11. Changes to this policy

We may update this policy when the App, our data practices, or legal requirements change. We will update the “Last updated” date and, where required, provide additional notice in the App or request consent. Material changes apply prospectively unless law permits otherwise.

12. Contact us

For privacy questions, support, or account and data deletion requests, contact the developer at danledian0121@gmail.com.

1. 适用范围与运营者

本隐私政策适用于 SnapBP Android 应用（下称“SnapBP”或“本 App”）， 提供的可选 SnapBP 账户和数据同步服务。“我们”指 SnapBP 的开发者。

2. 我们处理的信息

本政策中的“处理”既包括仅保存在您设备上的信息，也包括传输至设备外的信息。实际处理的信息取决于您选择使用的功能。

本地使用与 Android 备份

您无需登录即可使用记录、历史、趋势及健康知识等核心功能，相关记录会保存在 App 的私有本地数据库中。如果您的设备开启了 Android 云备份或设备间迁移，Android 可能根据设备和 Google 账户设置备份或迁移本地数据库及非登录类偏好设置。SnapBP 已将访问令牌、刷新令牌等已保存的登录会话字段排除在 Android 备份之外。

我们不会主动收集的信息

当前版本不包含广告或第三方行为分析功能。我们不会收集精确位置、通讯录、短信、通话记录、麦克风音频或银行卡号。 当前发布版本不会申请相机权限。

3. 我们如何及为何使用信息

我们仅在合理必要的范围内，将信息用于：

• 保存、整理、编辑、分类、筛选、绘制趋势图及导出血压和脉搏记录；
• 管理家庭档案，并确保每条记录归属于您选择的档案；
• 通过 Google 验证可选的 SnapBP 账户并维持登录会话；
• 在 SnapBP 服务器同步符合条件的档案和测量变更、解决更新冲突及避免重复记录；
• 通过 Google Play 提供、验证和恢复终身会员权益；
• 运行、保护和排查 App 与服务器问题，防范滥用或未经授权的访问；
• 处理客服、隐私和账户删除请求；以及
• 履行适用的法律义务。

在适用法律要求说明处理依据的地区，我们会基于履行您请求的服务、您对可选登录和同步作出的同意或主动选择、 保障服务安全可靠的合法利益，以及履行法律义务来处理信息。如您不希望使用账户同步，可以继续离线使用 SnapBP。

4. 信息在何种情况下会被披露

我们不会出售您的个人信息。仅可能在以下场景披露信息：

• Google 登录：Google 处理登录请求，并向我们提供您授权的账户信息。请参阅 Google 隐私权政策。
• Google Play 结算：Google 处理会员购买、付款方式、交易和恢复购买；我们仅取得判断和确认会员权益所需的信息。
• Android 备份与设备迁移：如果您或设备启用了该功能，Google 或设备平台可能处理 App 本地数据的备份或迁移。
• SnapBP 服务提供商：基础设施及托管服务提供商可能代表我们处理数据，以提供认证、同步、安全和备份服务； 其只能为提供相应服务而使用数据，并受适当的保密和安全义务约束。
• 您选择的个人或 App：只有您通过 Android 系统分享界面选择接收目标时，PDF 或 CSV 才会离开 SnapBP； 此后由接收方的隐私规则约束。
• 法律与安全原因：为遵守法律、维护权利、调查欺诈或滥用、保护用户及公众安全，我们可能在合理必要时披露信息。
• 业务变更：如 App 或服务发生重组、转让或收购，信息可能在遵守本政策和适用法律的前提下随业务转移。

5. 数据安全

App 使用 Android 私有应用存储保存本地记录，并通过 HTTPS 与 SnapBP 服务器通信。认证令牌已排除在 Android 云备份之外。我们将信息处理限制在上述功能所必需的范围。 但任何安全措施都无法保证绝对安全，请妥善保护您的设备、Google 账户及导出的报告。

6. 信息保留与删除

• 本地数据：会保留在您的设备上，直至您删除记录或档案、清除 App 数据或卸载 App。删除前创建的 Android 备份仍可能按照您的 Google 备份设置和保留规则保存。
• 同步数据：会在提供账户与同步服务所需期间保留。被删除的记录可能暂时作为删除标记保留，以便将删除操作同步到其他副本。
• 账户与安全记录：会在认证、安全防护、欺诈预防、争议解决和履行法律义务所合理必要的期间内保留。
• 服务器备份：已删除信息可能在受保护的备份中保留有限时间，直至备份轮换；法律要求更长保留期的除外。
• 导出文件：在 App 缓存中生成，但您保存或发送的任何副本由您和所选接收方管理。
• Google 交易记录：由 Google 根据其自身政策和法律义务保留。

7. 您的选择与隐私权利

根据您所在地区的法律，您可能有权：

• 访问或获取我们持有的个人信息副本；
• 更正不准确的档案或账户信息；
• 删除记录、档案或 SnapBP 账户；
• 反对或限制特定的信息处理；
• 在处理基于同意时撤回同意；以及
• 向当地数据保护监管机构投诉。

您可以在 App 中编辑或删除单条记录和家庭档案，将数据导出为 PDF 或 CSV，退出登录以停止新的同步， 也可以在 Google 账户设置中撤销 SnapBP 的 Google 账户访问权限。仅退出登录不会删除已经同步到服务器的数据。

我们不会按照适用的美国州隐私法所定义的含义“出售”个人信息，也不会为了跨场景行为广告而“共享”个人信息。 如需行使权利，请联系我们。我们可能需要验证您的身份，并可能在法律允许时拒绝或限制申请。

8. 儿童与被照护人档案

SnapBP 不面向低于适用法律规定的独立管理在线账户最低年龄的儿童，儿童不应自行创建 SnapBP 账户。 成年照护者仅可在具有合法权限并取得适当同意的情况下，为儿童或被照护人创建本地或同步的家庭档案。 请仅录入健康记录所必要的信息。

如果您认为儿童自行创建了账户，或相关个人信息在未经适当授权的情况下被提交，请联系我们； 我们会进行核查，并在需要时删除相关信息。

9. 跨境数据传输

SnapBP、Google 及服务提供商可能在您居住国家或地区以外处理信息。 在法律要求的情况下，我们会采用适当的跨境传输保障措施；无论数据在何处处理，均适用本政策所述保护。

10. 本政策的更新

当 App、数据处理方式或法律要求发生变化时，我们可能更新本政策。 我们会更新“最后更新”日期，并在法律要求时通过 App 提供额外通知或重新征求同意。 除非法律允许，重大变更不会追溯适用。

11. 联系我们

如有隐私问题、需要帮助，或希望申请删除账户及数据，请联系 SnapBP 开发者： danledian0121@gmail.com。