Who we are
Blood Pressure Tracker (also called KeepBP) is a personal web app for logging blood pressure readings. Contact: whirrett@pm.me or support@bloodpressuretracker.app.
What we collect
- Account: email address and/or username, and a password hash (we never store your password in plain text).
- Blood pressure readings: systolic, diastolic, optional pulse, and timestamps you enter or import.
- Optional report fields: if you generate a doctor PDF, we may receive patient name, date of birth, phone, clinician name, notes, and date range you type into the form for that request. Those fields are used to build the PDF and are not stored as a separate long-term “report profile” in the database beyond what you choose to keep as readings.
- Session: a signed session cookie so you stay logged in.
- Technical: standard server logs (e.g. IP address, timestamps) may be processed by our host for security and reliability. We do not run third-party advertising trackers.
- Optional analytics: when Google Analytics 4 is enabled by the operator (via an environment variable), the browser may load Google’s analytics script. See “Cookies and analytics” below.
Where data is stored
Account and reading data are stored in an SQLite database on a persistent volume on Render (typically at /data). Production traffic is served over HTTPS.
Security
- In transit: HTTPS encrypts data between your browser and the server.
- Passwords: hashed with bcrypt.
- At rest: blood pressure readings and account fields in SQLite are not encrypted at rest beyond whatever protections the hosting provider applies to the disk. Treat this as a personal tracker, not a hospital-grade vault.
How we use data
We use your data only to run the app: authenticate you, store and show your readings, import CSV/FHIR data you request, and generate PDFs you ask for. We do not sell your personal data.
Cookies and sessions
We use an HTTP-only session cookie (bp.sid) to keep you signed in. It is required for the logged-in app to work. We do not use advertising cookies.
Cookies and analytics (optional Google Analytics 4)
If the site operator configures a Google Analytics 4 measurement ID, the app may load Google’s gtag.js script and set analytics cookies/storage to collect aggregated usage metrics (for example page views and anonymous product events such as “signup success” or “reading saved”). Measurement IDs and event names do not include your blood pressure values, email, or password.
GA4 is designed with IP anonymization / non-logging of full IP addresses as a default for standard web collection. Analytics stays off when no measurement ID is configured. Google processes data under Google’s Privacy Policy.
Third parties
Hosting is on Render. Optional features may call Cloudflare Turnstile (bot protection), Google Analytics 4 (when enabled), or Epic/MyChart FHIR APIs when you choose to connect. Those services process data under their own policies when you use those features.
Your choices
You can log out anytime. To delete your account or readings, contact us at the email above and we will help as reasonably as we can for this small app.
Children
This app is not directed at children under 13. Do not create an account for a child without appropriate parental/guardian oversight.
Changes
We may update this policy. The “Last updated” date at the top will change when we do.