VitaBP Privacy Policy

Effective date: August 16, 2026  ·  Last updated: August 16, 2026

This Privacy Policy describes how Eluno Labs LLC (“we”, “us”, or “our”) collects, uses, and protects your information when you use the VitaBP mobile application for iPhone and Apple Watch (the “App”). It also explains your privacy rights and choices.

By using the App, you agree to the collection and use of information as described in this Privacy Policy. Our Terms and Conditions are available separately and also apply to your use of the App.

Who We Are

VitaBP is operated by:

Eluno Labs LLC
13647 SE 10th St
Bellevue, WA 98005, United States
Email: support@elunolabs.com

Eluno Labs LLC is the data controller for the personal data described in this policy.

Privacy at a Glance

Information We Collect

1. Health information you enter (stored on your device)

When you use the App, you may enter:

• Blood pressure readings: systolic and diastolic values, pulse, date and time, measurement arm, time of day, free-text notes, and context tags (for example “Coffee” or “Stressed”);
• Medications: name, dose, schedule, reminder times, an optional doctor’s note, and an optional photo of the medication (chosen from your photo library);
• Medication intake history (doses taken or skipped);
• Weight and other wellness metrics (steps, sleep, resting heart rate, exercise minutes, mindful minutes), entered manually or imported from Apple Health;
• Lifestyle and habit tracking entries and diary notes;
• Profile settings: your blood pressure goal, guideline preset, height, units, and onboarding answers about your health situation.

This information is stored locally on your iPhone in the App’s private storage (including a shared container used by the App’s widgets and your Apple Watch). It is not transmitted to our servers unless you actively use the Sharing feature (Section 3) or the export feature (Section 9). Medication photos, doctor’s notes, reading notes, diary entries, and lifestyle data never leave your device through any App feature other than exports you create yourself.

2. Apple Health (HealthKit)

If you grant permission, the App connects to Apple Health:

• Data the App may read: body weight, step count, sleep analysis, resting heart rate, Apple exercise time, and mindful sessions.
• Data the App may write: your blood pressure readings (systolic and diastolic), pulse, and body weight entered in the App.

You control this access through iOS permission prompts and can change it at any time in the Health app (Sharing → Apps → VitaBP). Health data obtained from HealthKit is used only to display and organize your information inside the App. It is never sent to our servers, never shared with third parties, never used for advertising, marketing, or use-based data mining, and never sold. We do not store your health information in iCloud. Readings imported from Apple Health are never published through the Sharing feature.

3. Sharing feature (optional)

VitaBP lets you share blood pressure readings with people you invite (“your circle”), for example a family member or caregiver. This feature is entirely optional and off by default. If you use it:

• Account data. You sign in with Apple, Google, or email and password. We receive and store your email address, display name (if provided by the sign-in provider), sign-in provider type, and an account identifier (user ID). Authentication is provided by Google Firebase.
• Shared readings. When your circle has at least one member, each blood pressure reading you enter yourself is uploaded to our database (Google Firebase, hosted in the United States) with: systolic and diastolic values, pulse (only if “Share pulse” is enabled in settings; you can turn it off at any time, which also removes pulse from previously shared readings), date and time, time of day, and your device’s time zone. Notes, context tags, medications, weight, and all other data are never shared.
• Invite codes and circle membership. When you create an invite code or join someone’s circle, we store the code, a display label (your display name, or initials derived from your email if no name is available), and the connection between accounts (who follows whom).
• Push notifications. To deliver sharing notifications (for example when someone joins your circle, or an unusual-reading alert to your circle), we store your device’s push notification token and short-lived delivery records (which are designed to expire after approximately 48 hours). Unusual-reading alerts tell your circle that a reading deviated notably from your recent average — the alert itself does not contain your numbers.

People in your circle can see the readings you share. Anyone who has your invite code can join your circle until you reset the code or remove them; share the code only with people you trust. You can remove members, stop sharing, or disband your circle at any time. When you disband your circle or delete your account, your published readings are removed from our servers.

4. Camera scan of your blood pressure monitor (optional, with your explicit consent)

The App can read the numbers from your blood pressure monitor’s display using the iPhone camera. This feature only works after you explicitly agree on a consent screen, and you can withdraw consent at any time in Settings → Privacy inside the App.

When you scan:

• A single photo of your monitor’s display is sent securely to Google (Gemini API via Firebase AI Logic), which transcribes the numbers shown and returns them so the App can prefill your reading form.
• The photo is used only for transcription. Under our configuration of Google’s API terms, Google does not use these photos to train its AI models.
• The photo is not saved on your device, not added to your photo library, and not stored by us. Live camera preview frames are analyzed only on your device to help you aim; they are never transmitted.

VitaBP is a tracking aid: the camera transcribes numbers shown on a separate, medically approved monitor. The App does not measure blood pressure itself.

5. Voice input (on-device only)

You can dictate a reading using your voice. Audio is recorded and transcribed entirely on your iPhone using Apple’s on-device speech technology. Your voice audio and transcripts never leave your device, are never stored, and are never sent to us or anyone else. Only the recognized numbers appear in your reading form.

6. Usage data (analytics)

We use Google Analytics for Firebase to understand how the App is used and to improve it. This includes:

• Feature-usage events, such as completing onboarding, saving a reading (and by which method — manual, scan, voice, or watch), creating an invite, exporting a report, or viewing the paywall;
• Technical information collected automatically by the analytics service: an app-instance identifier, device model, operating system version, app version, language and region, and approximate location derived from your IP address (country/city level).

Analytics events never contain your health data. Blood pressure values, pulse, notes, medication names, and all other health information are deliberately excluded from analytics. You can turn analytics collection off at any time in the App’s Settings; the App remains fully functional. Analytics data is retained by the analytics service for a limited period and then deleted automatically.

7. Crash and diagnostics data

If the App crashes, Firebase Crashlytics collects a crash report (stack trace, device model, operating system version, app version, and a diagnostics identifier) so we can find and fix the problem. Crash reports never include your health data.

8. Purchases and subscriptions

VitaBP offers auto-renewable subscriptions purchased through Apple’s App Store. Payment is processed entirely by Apple; we never see or store your payment card details. To manage subscription status, trials, and purchase validation we use Apphud, a subscription-management service, which processes your App Store purchase receipt, purchase history, subscription status, device model, OS and app version, locale, and time zone, together with a randomly generated user identifier. If you have an account, your purchase history is linked to your account identifier. We do not use the advertising identifier (IDFA) and do not use purchase data for advertising.

9. Reports you export

You can export your readings and medication history as a PDF or CSV report to share with your doctor. Optionally, you can type a patient name and date of birth to appear on the report header; these are used only to generate that report and are not stored by the App. Exported files contain your health data — where you send them via the iOS share sheet is entirely your choice, and that destination (for example your email provider) processes the file under its own privacy policy.

10. Support correspondence

If you contact us via Settings → Feedback, your email app opens a message addressed to support@elunolabs.com that includes your device model, iOS version, and App version to help us assist you. No health data is included. We keep support correspondence for as long as needed to resolve your request.

How We Use Your Information

We use the information described above solely to:

• Provide the App’s features: recording and organizing your readings, medications, and metrics; reminders; widgets; the Apple Watch app;
• Sync with Apple Health at your direction;
• Deliver the Sharing feature to the people you invite, including related push notifications;
• Transcribe monitor photos into numbers (camera scan);
• Process and manage subscriptions and free trials;
• Understand feature usage and improve the App (analytics);
• Diagnose and fix crashes and technical problems;
• Respond to your support requests;
• Comply with legal obligations.

We do not use your personal data for third-party advertising, do not sell it, do not share it with data brokers, and do not use health data for marketing or data-mining purposes. We do not use your data for purposes incompatible with those listed above without asking you first.

Service Providers

We share data only with the service providers needed to run the App, and only to the extent described in this policy:

These providers process data on our behalf under their own privacy and security commitments. Any third party with whom we share user data is required to provide the same or equal protection of your data as stated in this policy. Server-side processing for the Sharing feature takes place in the United States.

Data Retention

• Health data on your device remains until you delete it in the App, use “Delete all data”, or uninstall the App.
• Shared readings remain on our servers while your circle is active and are removed when you disband your circle or delete your account.
• Account data is kept until you delete your account.
• Push tokens and delivery records are short-lived; delivery records are designed to expire after approximately 48 hours.
• Analytics and crash data are retained by Google for limited periods and then deleted automatically.
• Purchase records are retained as long as required for accounting, tax, and legal compliance.

Deleting Your Data

• Delete your account: Settings → Account → Delete Account (in the App). This removes your account record, your circle and invite codes, your published readings, and your push token from our servers. Data stored locally on your device is not affected and remains under your control.
• Delete on-device data: Settings → Delete All Data (in the App) erases the App’s local database on your device. Note: this does not delete your account or readings already published to your circle — use Delete Account for that — and readings previously saved to Apple Health remain in the Health app until you delete them there.
• Remove Apple Health data: open the Health app to delete data the App has written.
• You may also email support@elunolabs.com to request deletion of any data we hold about you, and we will respond within the timeframe required by applicable law.

Your Choices and Withdrawing Consent

• Apple Health access: manage at any time in the iOS Health app (Sharing → Apps → VitaBP).
• Camera scan / third-party AI: consent is requested before first use and can be withdrawn in the App’s Settings → Privacy. Camera permission itself can be revoked in iOS Settings → Privacy & Security → Camera.
• Sharing: remove circle members, reset your invite code, disable “Share pulse”, or disband your circle at any time in the App; sign out or delete your account to stop all cloud processing.
• Analytics: turn off in the App’s Settings at any time.
• Notifications: manage in iOS Settings → Notifications. Medication reminders show the medication name in the notification; you can hide notification previews on the lock screen via iOS Settings → Notifications → Show Previews.
• Widgets: if you add VitaBP widgets, your latest readings may be visible on your Home or Lock Screen. Widgets are optional; remove them if you prefer readings not to appear there. The App’s Face ID/Touch ID App Lock protects the App itself, not widget content.
• The App does not require you to enable notifications, sharing, Apple Health, or any system permission to use its core features.

Security

We take reasonable technical and organizational measures to protect your data: information is stored in the App’s sandboxed storage protected by iOS device encryption, all network communication uses encryption in transit (TLS), and access to server-side data is restricted by authentication rules so that only you and your circle can read your shared readings. You can additionally enable App Lock (Face ID/Touch ID) inside the App; biometric data is processed by iOS and is never accessible to us. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Tracking

The App does not track you across apps or websites owned by other companies, does not use the IDFA advertising identifier, and shows no third-party advertising. Because there is no tracking, the App does not display the App Tracking Transparency prompt.

Children’s Privacy

The App is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us at support@elunolabs.com and we will delete it. If required by the law of your country, you must be old enough to consent to the processing of your personal data to use the Sharing feature.

International Transfers

We are based in the United States, and server-side data (account and sharing data, analytics, crash reports, purchase records) is processed in the United States. If you use the App from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction. We take steps described in this policy to ensure your data is treated safely wherever it is processed.

Your Rights under GDPR (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on these legal bases: your consent (health data you enter, Apple Health access, camera scan, sharing your readings), performance of a contract (providing the App, your account, and subscriptions), legitimate interests (app improvement, crash diagnostics, security), and legal obligations. Health data is processed only with your explicit consent, which you may withdraw at any time as described above.

You have the right to access, correct, export (data portability), restrict or object to the processing of, and erase your personal data, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Most of these you can exercise directly in the App (view and edit your data; export reports; delete data and your account). For anything else, contact support@elunolabs.com. You also have the right to lodge a complaint with your local supervisory authority.

Your Rights under California Law (CCPA/CPRA)

In the last 12 months we have collected these categories of personal information: identifiers (email, name, user ID, device identifiers), health information you choose to enter, commercial information (purchase history), and internet activity (app usage events). We collect them from you directly and from your device, for the purposes described in this policy.

We do not sell your personal information and do not share it for cross-context behavioral advertising. We have no actual knowledge of selling or sharing personal information of consumers under 16. California residents have the right to know, access, correct, and delete their personal information, and the right not to be discriminated against for exercising these rights. Submit requests to support@elunolabs.com; we will verify your request using your account email. You may use an authorized agent as permitted by law.

Not Medical Advice

VitaBP is a wellness and tracking tool. It does not provide medical advice, diagnosis, or treatment, and it does not measure blood pressure. Always consult your doctor about your blood pressure and before making any medical decisions.

Links to Other Websites

The App may contain links to external websites (for example, published research about lifestyle and blood pressure). If you open them, your browser connects to those sites, which operate under their own privacy policies. We are not responsible for their content or practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version at this page, update the “Last updated” date, and, for material changes, notify you in the App before the change takes effect. Your continued use of the App after a change means the updated policy applies.

Contact Us

If you have any questions about this Privacy Policy or your data, contact us: