Privacy Policy
Last Updated: November 7, 2025
Third Horizon Technologies Inc. ("we," "our," or "us") operates the BP Snap mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
Information We Collect
1. Health Data
BP Snap collects and processes the following health-related information:
- Blood Pressure Readings: Systolic and diastolic measurements, pulse rate, and timestamps
- Contextual Data: Optional tags you add (medications, symptoms, lifestyle factors)
- Apple Health Data: If you enable HealthKit integration, we read and write blood pressure, heart rate, and medication data to Apple Health
2. Photos
When you use the Snap-to-Log feature:
- Photos of your BP monitor are sent securely via encrypted HTTPS connection to our third-party AI service provider for digit recognition
- Photos are processed instantly to extract BP readings
- Photos are immediately and permanently deleted after processing
- We do not store, access, or retain your photos
- The extracted BP readings (numbers only) are stored locally on your device
3. Usage & Analytics Data
We collect anonymized analytics data through PostHog (analytics) and Sentry (error tracking):
- App feature usage (which features are used, how often)
- Crash reports and diagnostics
- Device type and iOS version
- Anonymous user identifiers (not connected to your name or health data)
This data does NOT include your BP readings, photos, or health information. It is anonymized and cannot identify you personally.
4. Subscription & Purchase Data
Subscription management is handled by RevenueCat:
- Purchase events and subscription status
- Device identifiers (anonymized)
- Subscription plan and renewal information
Apple processes all payments through the App Store. We do not store your payment information.
5. Advertising Attribution Data
If you install BP Snap through an ad (Apple Search Ads, Facebook/Instagram), we collect:
- Which ad or campaign led to your install
- Device identifiers for attribution
- Conversion events (e.g., "user subscribed") without identifying you
No health data is shared with advertising platforms. You can limit this tracking in iOS Settings → Privacy & Security → Tracking.
6. Account Information
If you enable optional CloudKit sync:
- Your Apple ID is used for authentication (we do not see your Apple ID)
- BP readings are synced to your private iCloud account
- We do not have access to your iCloud data
How We Use Your Information
We use the collected information to:
- Provide Core Functionality: Process photos to extract BP readings, display trends, generate reports
- Apple Health Integration: Sync your BP data with Apple Health (if you enable this feature)
- Improve the App: Analyze anonymized usage patterns to improve features and fix bugs
- Customer Support: Respond to your inquiries and provide technical assistance
We do not:
- Sell your health data to third parties
- Use your BP readings or photos for advertising
- Share your health data with insurance companies or employers
- Share your health data with marketing or analytics platforms
- Track you across other apps or websites (we respect iOS tracking preferences)
Data Storage and Security
Local Storage
All BP readings, notes, and health data are stored locally on your device using secure iOS storage mechanisms. Your data remains under your control.
Apple Health
If you enable HealthKit integration, data is synced with Apple Health and stored according to Apple's privacy policies. You can revoke this permission at any time in iOS Settings.
Optional CloudKit Sync
CloudKit sync is off by default. If you enable it:
- BP readings are encrypted and synced to your private iCloud account
- We use Apple's CloudKit service and do not have direct access to your synced data
- You can disable sync and delete all synced data at any time in the App settings
Photo Processing
Photos are transmitted to our AI service provider using industry-standard HTTPS encryption. Photos are processed in memory and immediately deleted—they are never written to disk or stored in any database.
Third-Party Services
Important: Your blood pressure readings, photos, and health data are NOT shared with marketing, analytics, or advertising services. These services help us operate the business, improve the App, and understand what marketing works—but they do not receive your health information.
Health Data Processing
AI Image Processing (Google Cloud Gemini API)
We use Google Cloud's Gemini API to process photos and extract BP readings.
- What they receive: Photos of your BP monitor (temporarily)
- What they do: Extract numbers from the photo, then immediately delete it
- What they DON'T get: Your BP readings (only we receive the extracted numbers), your name, email, or any other personal data
- Privacy policy: Google Privacy Policy
Apple Services
- HealthKit: Your BP data syncs with Apple Health. We don't control this data—Apple does. Apple Privacy Policy
- CloudKit: Optional backup stored in your private iCloud account. We do not have access.
- App Store: For in-app purchases and subscriptions (managed by Apple)
Business Operations & App Improvement
Subscription Management (RevenueCat)
- What they receive: Purchase events, subscription status, device identifiers (anonymized)
- What they do: Manage your Pro subscription, handle billing, prevent fraud
- What they DON'T get: Your BP readings, photos, or health data
- Privacy policy: RevenueCat Privacy Policy
Product Analytics (PostHog)
- What they receive: Anonymized app usage (which features are used, how often), device type, iOS version
- What they do: Help us understand which features are helpful and which need improvement
- What they DON'T get: Your BP readings, photos, health data, or anything that identifies you personally
- Privacy policy: PostHog Privacy Policy
Error Tracking (Sentry)
- What they receive: Crash reports, error logs, device type
- What they do: Help us identify and fix bugs that cause the app to crash
- What they DON'T get: Your BP readings, photos, or health data
- Privacy policy: Sentry Privacy Policy
Advertising & Attribution
We use advertising platforms to understand which marketing channels bring people to BP Snap. These services do NOT receive your health data.
Apple Search Ads (App Store Ads SDK)
- What they receive: Attribution data (which ad led to your install), device identifiers
- What they do: Tell us if you found BP Snap through an App Store ad
- What they DON'T get: Your BP readings, photos, or health data
- Privacy policy: Apple Privacy Policy
Meta Ads (Facebook/Instagram)
- What they receive: App install events, anonymized conversion data (e.g., "someone subscribed")
- What they do: Help us measure the effectiveness of ads on Facebook and Instagram
- What they DON'T get: Your BP readings, photos, or health data. No personal health information is shared.
- Your control: You can limit ad tracking in iOS Settings → Privacy & Security → Tracking → BP Snap (toggle off)
- Privacy policy: Meta Privacy Policy
Important Note on Tracking: If you disable "Allow Apps to Request to Track" in iOS Settings (recommended), advertising SDKs will receive minimal, anonymized data. BP Snap respects your tracking preferences and does not bypass iOS privacy controls.
Your Rights and Choices
You have the following rights regarding your data:
Access and Export
- View all your BP readings in the App at any time
- Export your data as PDF or CSV files
- Access your data through Apple Health
Deletion
- Delete individual readings or all readings from within the App
- Revoke HealthKit permissions in iOS Settings → Privacy & Security → Health
- Disable and delete CloudKit sync data in App settings
- Uninstalling the App deletes all locally stored data
Opt-Out
- Disable photo capture and use manual entry only
- Disable HealthKit sync
- Keep CloudKit sync disabled (default setting)
Children's Privacy
BP Snap is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.
Data Retention
- BP Readings: Stored indefinitely on your device until you delete them
- Photos: Immediately deleted after processing (never stored)
- CloudKit Data: Stored in your iCloud account until you disable sync and delete data
- Analytics: Anonymized data retained for up to 90 days
International Users
BP Snap is operated from Canada. If you are located outside Canada, please be aware that information we collect will be transferred to and processed in Canada and the United States (for AI processing via Google Cloud).
By using the App, you consent to the transfer of your information to Canada and the United States, where data protection laws may differ from your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the App
- Updating the "Last Updated" date at the top of this policy
- Sending an in-app notification (for significant changes)
Your continued use of the App after changes are posted constitutes your acceptance of the revised Privacy Policy.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You can request information about the personal data we collect, use, and disclose
- Right to Delete: You can request deletion of your personal data (subject to certain exceptions)
- Right to Opt-Out: We do not sell your personal information
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us at the email below.
Legal Disclaimer
BP Snap is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease. The App is a wellness tool for tracking and sharing blood pressure readings. Always consult your healthcare provider to interpret your readings and make medical decisions.