Vivelog Privacy Policy

Vivelog Privacy Policy
Effective date: 7 November 2026 · Version 1.0
App: Vivelog: blood pressure, blood sugar, weight and medicine diary (Android package com.bunker.carelog)

Other languages: Deutsch · Français · Español · Italiano. The English version is the original. Translations are provided for convenience. If they differ, the English version applies.

Separate policy for US state health-data laws: Vivelog Consumer Health Data Privacy Policy.

1. Who is responsible

Vivelog is published on Google Play under the developer name Bunker Technology. Bunker Technology is an individual developer, not a company. That individual developer is the controller of personal data processed in connection with the app.

Contact: bunkersoftvn@gmail.com. Please write to this address with any question about this policy or your data.

2. Summary

• The health information you enter is stored only on your phone. There is no account and no cloud sync or cloud backup.
• The developer never receives your health data. Your readings, medicines and notes are never sent to advertisers or to analytics services.
• The free version shows ads from Google AdMob. Ads are always non-personalized and never use your health data.
• Optional usage statistics (Google Analytics for Firebase) are off by default. They are only sent if you switch them on in Settings, and you can switch them off at any time.
• You can export, back up or delete all data at any time in the app.

3. Information you enter (stored on your device only)

Data	Examples	Why
Health readings	blood pressure, pulse, blood sugar, weight, date and time, labels, notes	To keep your diary, charts and reports
Medicines	names, amounts and times you type in, taken/skipped log, pill counts	Reminders and adherence history
Profiles	a name or nickname per profile	To keep several people's diaries apart (Pro)
Settings	units, reference table, language, theme, optional blood sugar range	To show the app the way you chose
Lock	a salted one-way hash of your PIN (never the PIN itself)	Optional app lock
Consent record	date and version of your consent	To show that you agreed and when

This information is stored in the app's private storage on your phone. Vivelog turns off Android cloud backup and device-to-device transfer for its data, so the app does not copy it to Google Drive or to another device. It is protected by your phone's own encryption and screen lock. The optional PIN is a convenience lock, not additional encryption.

Legal basis (EEA, UK, Switzerland): health data is a special category of personal data. We process it only with your explicit consent (GDPR and UK GDPR Art. 9(2)(a) and Art. 6(1)(a)). You give this consent in the app before any reading can be saved. You can withdraw consent at any time in Settings → Privacy → Withdraw consent. Withdrawing consent deletes all data stored by the app on your phone.

Retention: until you delete it in the app, withdraw consent, or uninstall the app.

4. Files you export or share

Reports (PDF), CSV files and backup files are created on your phone and passed to the Android share sheet. You decide where they go, for example email, a messaging app or your own cloud drive. Once shared, the file is handled under that service's terms. Backup files contain your health data, so keep them safe.

5. Usage statistics (optional, off by default)

Vivelog includes Google Analytics for Firebase (provided by Google). It is switched off for every user when the app is installed. It only starts when you turn on Settings → Privacy → Help improve Vivelog. Turn the switch off again and collection stops.

When you have switched it on, the app sends:

• Generic event names only, such as "home screen opened", "reading saved", "medicine saved" or "report exported". Events never contain your readings or values, labels or categories, units, medicine names, doses, notes or profile names.
• Information that Firebase adds automatically: a random app-instance identifier, app version, device model, operating system version, language, approximate country and region derived from the IP address, and session start and engagement time.

We configure Firebase so that it does not collect the advertising ID (on iOS, the IDFV is not collected either). Ad personalization signals are off. Google signals are off. Data sharing with Google for other purposes is off. No link to Google Ads or AdMob is set up. Analytics data is kept for 2 months. We use the reports only in aggregate, to see which features are used and to fix problems.

Google processes this data on our behalf as a processor under the Google Ads Data Processing Terms, which we have accepted. Legal basis: your consent (Art. 6(1)(a) GDPR). Using a health diary app could in itself reveal something about your health. That is why we ask for your consent and keep this feature off unless you choose it. See Google Privacy Policy and Firebase privacy information.

6. Advertising (free version)

Vivelog uses the Google Mobile Ads SDK (AdMob) by Google. We configure every ad request as non-personalized, for every user in every country. We never pass your readings, labels, medicine names, notes or any other health information to the SDK. There are no keywords, no content URLs and no custom targeting. We also block sensitive and health-treatment ad categories (for example pharmaceuticals, health conditions, dating, gambling and politics).

Even non-personalized ads involve some device data that Google uses to serve ads, limit how often you see the same ad, measure ads and prevent fraud. Examples: the advertising ID, IP address (used for approximate location), device and app information, and ad interactions. For this data, Google acts as an independent controller. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.

In the EEA, the UK and Switzerland, Google's User Messaging Platform shows a consent message before ads are loaded. You can change your choice at any time in Settings → Privacy → Ad privacy choices. You can also reset or delete your advertising ID in your phone's settings. Buying Pro removes ads.

7. In-app purchases

Purchases are processed by Google Play. We do not receive your payment details. The app checks your purchase status with Google Play on your phone. We do not run a server that stores purchase records.

8. Notifications

Medicine reminders are local notifications scheduled on your phone. They are not sent through any server. On the lock screen they are shown as private, so medicine names stay hidden until the phone is unlocked.

9. What we do not do

• No account, no cloud sync, no cloud backup and no crash-reporting SDK in this version.
• We do not sell personal information or consumer health data. We do not share it for targeted or cross-context behavioral advertising.
• We do not use your data to make automated decisions about you.
• Vivelog does not measure anything with the camera or sensors. It does not diagnose and does not recommend medicines or doses. It is not a medical device.

10. Your rights

Your diary is stored only on your phone, so you control it directly in the app:

• Access and portability: Settings → Your data (PDF report, CSV export, backup file).
• Rectification: edit any reading or medicine.
• Erasure: delete single entries or a profile, or use Settings → Privacy → Delete all data.
• Withdraw consent: Settings → Privacy → Withdraw consent (deletes all data). Usage statistics: switch off Help improve Vivelog.

Analytics data is linked only to a random app-instance identifier, and we cannot see who you are. To have it deleted, switch off usage statistics and email us, or simply uninstall the app; the data expires after 2 months.

If you live in the EEA, the UK or Switzerland, you also have the right to restriction and objection, and the right to lodge a complaint with your data protection authority. For data that Google processes for ads, contact Google or use the ad privacy choices described above. To contact us about your rights, use the email in section 1. We will answer within one month.

US residents (for example California, Virginia, Colorado, Connecticut and other states with privacy laws) can use the same tools and email to access, correct or delete data and to appeal a decision. We do not sell or share personal information as those laws define it.

11. Children

Vivelog is intended for adults. It is not directed to children under 16, and we do not knowingly allow children to use it.

12. International transfers

Your health diary is not transferred anywhere. Google may process advertising data and (if you turned it on) analytics data in countries outside your own, including the United States, under its own safeguards such as the EU Standard Contractual Clauses.

13. Security

Data between the app and Google services (ads, optional analytics, Google Play) is encrypted in transit (HTTPS/TLS). Your diary never leaves the phone unless you export it yourself.

14. Changes

If we change this policy, we will update the effective date above. If a change affects how health data is handled, the app will ask for your consent again before continuing.

15. Contact

Bunker Technology (individual developer) · bunkersoftvn@gmail.com