Overview
BloodChart ("we", "our", or "the app") is a blood test tracking application. Blood test results are health data, among the most sensitive categories of personal data there is, and this policy explains how the app is built so that they never leave your control.
Information the App Handles
Blood test data: the values, units, and reference ranges from lab reports you import or enter manually, along with the sample dates. The doctor visit summary and its questions are assembled from this data when you export them, not stored separately.
Imported documents: lab report PDFs you share into the app. They are parsed entirely on your device; no document is ever uploaded anywhere for processing.
Health data (optional): if you connect Apple Health, the app reads only the categories you approve in iOS's own permission sheet, and uses them solely to add context to your results within the app.
We do NOT collect:
- Personal identification information (name, email address, or similar)
- Location data
- Device identifiers for tracking purposes
- Usage analytics or behavioral data
- Any data for advertising purposes
Consent
Because blood values are sensitive health data, BloodChart asks for your explicit consent before storing anything, and records the date of that consent so it can always be demonstrated. That consent is the legal basis for holding them, under Article 9(2)(a) of the GDPR.
You can withdraw your consent at any time in Settings. Withdrawing it erases all data the app holds, on your device and in your iCloud, because consent with no data has nothing to attach to. You can export everything first if you want to keep a copy.
Data Storage
Local storage: all your data is stored locally on your device using secure storage mechanisms provided by iOS.
iCloud sync: if you enable iCloud sync, your data is stored in the private database of your personal iCloud account using Apple's CloudKit technology. It is encrypted and accessible only through devices signed into your Apple ID. No health data is ever at rest on any server we operate, because we operate none.
On-device processing: PDF parsing, charting, and export generation all happen on your device. Nothing is sent out for processing.
Third-Party Services
BloodChart uses the following Apple-provided services only:
- iCloud / CloudKit: syncs data across your devices (optional, user-controlled, private database only)
- HealthKit: reads only the health categories you explicitly approve (optional, requires your permission)
We do not use any third-party analytics, advertising, crash reporting, or tracking services. There are no SDKs from Facebook, Google, Mixpanel, Amplitude, or any similar provider embedded in BloodChart.
Data Security
We implement appropriate security measures to protect your data:
- All iCloud data is encrypted in transit and at rest by Apple
- Local data is stored using iOS secure storage mechanisms
- We do not transmit your data to any external servers, because there are none to transmit to
- Exports are created only when you explicitly initiate them, and you choose where each file goes
Your Rights
You have complete control over your data at all times:
- Access: view all your data within the app at any time
- Export: create a PDF summary for your doctor, or a full export of everything as CSV and JSON, from Settings
- Delete: remove individual results, whole reports, or everything at once by withdrawing consent in Settings
- Portability: the full export uses standard formats you can open anywhere and keep indefinitely
- iCloud removal: disable iCloud sync at any time; your data remains local on your device
Because we collect no personal data on our end, there is nothing for us to look up, correct, or delete on your behalf. All data management happens directly through the app on your device.
Children's Privacy
BloodChart does not knowingly collect information from children under 13. The app requires no personal information to use, and no data leaves your device unless you explicitly enable iCloud sync to your own account.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy. Continued use of the app after any changes constitutes your acceptance of the updated policy.
We will never introduce data collection, analytics, or advertising without making this clearly visible through an updated policy and a prominent in-app notice, and any such change would ask for your consent first.
Contact
If you have any questions or concerns about this Privacy Policy or how BloodChart handles data, please contact us:
We typically respond within 48 hours.