Privacy Policy

What the app stores on your phone

Everything you enter is saved in a database on your device:

• blood pressure (systolic, diastolic, pulse, arm, position) and blood sugar readings, with their date, time, context and notes;
• medications (name, dose, form, times of day) and the doses you check off;
• your settings, such as what you track, your glucose unit and reminder preferences.

This data does not leave your phone unless you turn on one of the features below. Deleting the app deletes it, unless you made a backup.

Optional account and backup

You can use the app without an account. If you choose to sign in, with Sign in with Apple or with a one-time code sent to your email, we keep a backup copy of the data listed above so you can restore it on another phone.

• What is stored: your email address or the identifier Apple gives us (which may be a private relay address), and a snapshot of your readings, medications, doses and settings.
• Where: with our hosting provider Supabase, on servers in the United States. Data is encrypted in transit and at rest, and access rules allow each account to read only its own backup.
• Deletion: in the app, Settings → Backup → Delete Account removes your account and your backup permanently. You can also email support@biovalley.ma.

If you also turn on Apple Health sync, readings imported from Apple Health become part of your logbook and are included in your backup. Turn backup off or delete your account if you don’t want that.

Apple Health and Health Connect

If you turn it on in Settings, the app reads and writes exactly these types in Apple Health: systolic blood pressure, diastolic blood pressure and blood glucose (with its meal time). On Android, Health Connect: blood pressure and blood glucose. Nothing else is read. Readings made by other apps are imported into your logbook; readings you log here are written back. You choose which types to allow in the system permission screen, and you can change that at any time. Data from Apple Health is never used for advertising or marketing, never sold, and never shared with third parties except as described in this policy for your own backup. You can revoke access at any time in the Health app (Sharing → Apps) or in Health Connect, or by turning sync off in the app’s Settings.

Purchases

Payments are handled entirely by Apple (or Google). We never see your card or payment details. To know whether Pro is active, the app uses RevenueCat, which receives a random anonymous identifier and your purchase history for this app. It does not receive your health data, your name or your email.

Reminders, reports and exports

Medication reminders are scheduled on your phone; their text never includes a medication name. The PDF report and the CSV export are created on your phone and go only where you send them.

Service providers

We share data only with the providers needed to run the features you use, and only for that purpose:

• Supabase (database hosting, sign-in and sign-in emails) — only if you create an account: your email or Apple identifier and your backup.
• RevenueCat (subscription status) — an anonymous identifier and your purchases in this app.
• Apple and Google — payments, Sign in with Apple, and Apple Health or Health Connect if you turn them on.

Each of these providers is bound by contract or by its own terms to protect your data at least as well as this policy does, and may not use it for its own purposes, such as advertising. We have no parent company or affiliate that receives your data.

International transfers

Backups are stored in the United States. If you live in the European Union, the UK or another country with transfer rules, your data is transferred under the safeguards those rules provide, such as the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms.

What we don’t do

• No advertising and no advertising identifiers.
• No analytics, tracking or third-party SDKs that profile you.
• We never sell, rent or trade your data.
• We don’t use your data to train AI models.

Legal basis and retention

We process backup data because you asked for the backup (your consent, which you can withdraw by deleting your account) and to provide the service you signed up for.

• On your phone: until you delete a reading or medication, or delete the app.
• Backup and account: until you delete your account. Deletion is immediate in our database; copies in our hosting provider’s encrypted system backups expire within 30 days.
• Purchase records: kept by Apple, Google and RevenueCat as long as tax and accounting law requires.
• Support emails: deleted once your question is resolved, and at the latest after 2 years.

To withdraw consent: turn off Apple Health sync in Settings or revoke it in the Health app; turn off reminders in Settings; delete your account in Settings → Backup → Delete Account; or email support@biovalley.ma.

Your rights

Wherever you live, you can ask us to access, correct, export or delete your data, or to stop processing it. Most of this you can do yourself in the app: the CSV export gives you all of your readings, and Delete Account erases the backup. For anything else, email support@biovalley.ma and we will answer within 30 days. If you are in the EU or UK, you can also complain to your data protection authority; in Morocco, to the CNDP (law 09-08). California residents: we do not sell or share personal information as those terms are defined in the CCPA.

Children

The app is not directed at children under 13, and we do not knowingly collect their data.

Medical disclaimer

The app is a logbook. It is not a medical device, does not measure anything, and does not diagnose or treat any condition. Reference categories shown next to readings are for information only.

Changes

If we change this policy, we will update the date above, and tell you in the app if the change is significant.

Contact

BioValley.Ma, Morocco · support@biovalley.ma