Android 版:你的健康資料如何被處理
本政策適用於「我的血壓」Android App(套件名稱 com.mkjohnny.bpcare,以下稱本 App)。iPhone 與 Apple Watch 版請見這一頁。
1. 健康資料只存在你的手機
你輸入的血壓、心率、用藥、服藥紀錄、回診、慢性病連續處方箋、攜帶物品清單與藥物照片,都只保存在你手機上本 App 的私有儲存空間(你自行開啟 Health Connect 時,血壓與心率也會存在手機上的 Health Connect,見第 2 節)。開發者不經營任何伺服器,也沒有 App 帳號,因此無法看到、取得或出售你的健康資料。本 App 關閉了 Android 的自動備份,這些資料不會被上傳到 Google 雲端備份。
2. Health Connect(健康資料)與本 App 不會讀取的資料
1.1 版起,你可以在「設定 › 健康資料(Health Connect)」或第一次使用的設定精靈中自行開啟,預設是關閉的,並由 Android 的 Health Connect 權限畫面請你逐項允許:
- 寫入血壓、心率:把你在本 App 記錄的血壓與心率存到手機上的 Health Connect,方便和其他健康 App 一起看。
- 讀取血壓、心率:把其他 App(例如藍牙血壓計的 App)存進 Health Connect 的血壓讀進本 App,並取量測時間前後 3 分鐘內的心率,就不用自己輸入。讀入的紀錄只存在本 App,不會再寫回 Health Connect。
Health Connect 的資料只在你的手機上與本 App 交換,不會上傳到任何伺服器,也不會提供給廣告服務或其他第三方,只用來提供上面說的紀錄功能。你可以隨時在 Health Connect 或 Android 設定中撤銷權限;在本 App 刪除讀入的紀錄,不會刪除其他 App 的原始資料。本 App 使用 Health Connect 資料的方式遵守 Health Connect 權限政策(含限制使用規定)。
本 App 不讀取你的通訊錄、簡訊、通話紀錄或 GPS 定位,不會要求這些權限。
3. 相機與照片
你為藥丸或藥袋拍的照片只保存在本 App 內。「拍血壓計自動帶入數字」:支援裝置端 AI(Gemini Nano)的手機用 Gemini Nano 辨識,其他手機(1.1 版起)用 Google ML Kit 的裝置端文字辨識(文字辨識模型隨 App 安裝);兩種都在你的手機上辨識數字,照片不會上傳到任何伺服器,也不會存到相簿。新版測試包的照片只暫存在 App 私有快取,辨識結束後刪除;若流程中斷,可在 Android 設定清除快取。無法辨識或手機不支援時,仍可手動輸入,不影響其他功能。為了維護與改善服務,Google ML Kit 可能會把裝置與 App 版本、安裝識別碼、效能及功能使用診斷資料傳給 Google,但不包含你的照片與健康資料。詳見 Google ML Kit 資料揭露。
4. 通知、提醒、主畫面小工具與語音朗讀
量血壓、吃藥、回診與領藥提醒都是手機本機通知。「鬧鐘與提醒」權限只用來讓提醒準時響起。這個版本沒有任何自動傳訊息給家人的功能。
你自行加到主畫面的小工具(「今天吃藥了嗎?」「最近血壓」)會在手機主畫面顯示藥名、服藥進度與最近一次血壓,資料直接讀取本 App 內的紀錄,不會傳出手機;不想讓旁人看到時,請從主畫面移除小工具。
「念給我聽」(1.1 版起)使用手機內建的文字轉語音,本 App 只會選用已安裝在手機上、不需要連網的中文聲音,要念的內容不會傳出手機。手機沒有中文聲音時,本 App 會引導你到 Google 文字轉語音的設定下載,下載由 Google 處理。1.2 版起可選台語:台語聲音是預先合成好、內建在 App 裡的 AI 語音片段,在手機上播放,不需要連網,也不會傳出任何內容。
5. 廣告(Google AdMob)
1.1、1.2 測試版(版本代碼 4 起)停用廣告載入與顯示,也不提供移除廣告購買。正式版才會啟用下列廣告服務。舊版測試包仍適用其原有廣告行為。是否已更新請查看 App 版本,以 Google Play 實際提供為準。
正式版預計會顯示 Google AdMob 提供的廣告;AdMob 也會向合作的廣告聯播網 Unity Ads 與 Liftoff Monetize(Vungle) 取得廣告。正式版啟用廣告後,是否顯示依你的興趣挑選的個人化廣告,依你在 Android 的廣告 ID 設定與廣告同意而定:你在 Android 設定的「隱私權 › 廣告」刪除或限制廣告 ID,或所在地區需要同意而你沒有同意時,一律只顯示非個人化廣告。不論哪一種,本 App 都不會把任何健康資料(血壓、心率、用藥、回診、照片、Health Connect 資料等)提供給廣告服務。為了顯示廣告、計算成效與防止詐欺,Google 及上述聯播網可能會收集裝置與網路資訊,例如 IP 位址(可推估大致位置)、Android 廣告 ID 與應用程式集 ID、裝置型號與系統版本、廣告互動紀錄及診斷資料。你可以在 Android 設定的「隱私權 › 廣告」重設或刪除廣告 ID;所在地區需要時,本 App 會詢問你的廣告同意,之後可在 App 的「設定 › 廣告 › 廣告隱私選項」修改。詳情請見 Google 隱私權政策與 Google 如何使用合作夥伴網站或應用程式的資訊,以及上述 Unity、Liftoff 的隱私權政策。購買「永久移除廣告」後,本 App 不再載入任何廣告。
6. 購買
「永久移除廣告」由 Google Play 處理付款,開發者不會取得你的付款資訊。本 App 只會向 Google Play 確認你是否已購買。
7. 你主動分享的內容
語音問題回報會開啟你手機的郵件 App,預填手機型號、Android 與 App 版本。由你確認並寄出,不會自動附上健康紀錄。
血壓紀錄 PDF 報告、CSV 匯出檔,以及「備份與還原」的備份檔,都只會在你按下分享或匯出時產生,並由你選擇存放位置或傳送對象(例如雲端硬碟、Email、醫師或家人)。備份檔含有你的健康資料,請妥善保管。
8. 資料保存與刪除
解除安裝本 App,或在 Android 設定中清除本 App 的儲存空間,就會刪除 App 內的所有資料。你自行匯出的備份檔,請在你存放的位置刪除。Google 為廣告收集的資料,依 Google 隱私權政策保存與刪除。
9. 兒童
本 App 以成年人為對象,並非為兒童設計。
10. 醫療聲明
本 App 僅供個人健康紀錄與提醒使用,不是醫療器材。分級參考 2022 台灣高血壓治療指引,不能取代專業醫療診斷。個人的控制目標請以醫師建議為準。
11. 政策變更與聯絡方式
本政策如有更新,會公布在本頁並更新日期。若有任何隱私問題,請來信 mkjohnny@gmail.com。
Privacy Policy (Android)
This policy applies to the 我的血壓 (My Blood Pressure) Android app, package name com.mkjohnny.bpcare (the "App"). For the iPhone and Apple Watch app, see this page. The App's interface is in Traditional Chinese; English names of settings are given in parentheses.
1. Health data stays on your phone
The blood pressure, heart rate, medications, dose records, appointments, chronic prescription refills, checklists and medication photos you enter are stored only in the App's private storage on your phone (if you turn on Health Connect, blood pressure and heart rate are also stored in Health Connect on your phone; see section 2). The developer does not operate any server and the App has no accounts, so the developer cannot see, obtain or sell your health data. The App turns off Android Auto Backup, so this data is not uploaded to Google cloud backup.
2. Health Connect and data the App does not access
Starting with version 1.1, you can turn on Health Connect yourself in 設定 › 健康資料 (Settings › Health data) or in the first-run setup. It is off by default, and Android's Health Connect permission screen asks you to allow each item:
- Write blood pressure and heart rate: saves the blood pressure and heart rate you record in the App to Health Connect on your phone, so you can see them with other health apps.
- Read blood pressure and heart rate: imports blood pressure that other apps (for example a Bluetooth blood pressure monitor's app) saved to Health Connect, together with heart rate recorded within 3 minutes of each measurement, so you don't have to type it in. Imported records are kept only in the App and are never written back to Health Connect.
Health Connect data is exchanged only between Health Connect and the App on your phone. It is never uploaded to any server and never shared with advertising services or other third parties, and it is used only for the record-keeping features described above. You can revoke these permissions at any time in Health Connect or Android settings; deleting an imported record in the App does not delete the original data in other apps. The App's use of Health Connect data complies with the Health Connect Permissions policy, including the Limited Use requirements.
The App does not access your contacts, text messages, call log or GPS location, and does not request these permissions.
3. Camera and photos
Photos you take of your pills or medication bags are stored only inside the App. 拍血壓計 (Scan BP monitor) uses Gemini Nano on phones that support on-device AI and, starting with version 1.1, Google ML Kit on-device text recognition on other phones (the text recognition model is bundled with the App). Either way the numbers are read on your phone, and the photo is never uploaded to any server or saved to your photo library. In the new test build, photos are temporarily cached and deleted after recognition; interrupted scans can be cleared through Android settings. Manual entry remains available when recognition is unsupported or fails. To maintain and improve the service, Google ML Kit may send device/app information, installation identifiers, performance metrics and feature diagnostics to Google; this never includes your photos or health data. See Google ML Kit data disclosure.
4. Notifications, reminders, home screen widgets and read-aloud
Reminders to measure blood pressure, take medication, attend appointments and pick up refills are local notifications on your phone. The Alarms & reminders permission is used only so that reminders ring on time. This version has no feature that sends messages to family members automatically.
Home screen widgets you add yourself (今天吃藥了嗎? / Did I take my medicine today? and 最近血壓 / Latest blood pressure) show medication names, today's progress and your latest reading on the home screen. They read the App's own records and nothing leaves your phone; remove the widgets if you don't want others to see this information.
念給我聽 (Read aloud, from version 1.1) uses your phone's built-in text-to-speech. The App only uses Chinese voices that are installed on the phone and do not need a network connection, so the text being read never leaves your phone. If no Chinese voice is installed, the App guides you to download one in Google's text-to-speech settings; that download is handled by Google. From version 1.2 you can choose Taiwanese: the Taiwanese voice consists of pre-generated AI speech clips bundled in the App and played on the phone, with no network connection and nothing sent off the device.
5. Advertising (Google AdMob)
The 1.1 test build (version code 4 and later) disables ad loading and display, and does not offer ad-removal purchases. The advertising services below are planned for production. Older test builds retain their original behavior. Availability depends on the version actually offered by Google Play.
The production version is planned to show ads provided by Google AdMob; AdMob may also obtain ads from its mediation partners Unity Ads and Liftoff Monetize (Vungle). When advertising is enabled in production, whether you see personalized ads based on your interests depends on your Android advertising ID setting and your ad consent: if you delete or limit your advertising ID in Android Settings › Privacy › Ads, or if consent is required in your region and you have not given it, only non-personalized ads are shown. In every case the App never provides any health data (blood pressure, heart rate, medications, appointments, photos, Health Connect data, etc.) to advertising services. To serve ads, measure performance and prevent fraud, Google and these mediation partners may collect device and network information such as IP address (which can indicate approximate location), the Android advertising ID and app set ID, device model and OS version, ad interactions and diagnostic data. You can reset or delete your advertising ID in Android Settings › Privacy › Ads. Where required in your region, the App asks for your ad consent, and you can change it later in the App under 設定 › 廣告 › 廣告隱私選項 (Settings › Ads › Ad privacy options). See the Google Privacy Policy and how Google uses information from sites or apps that use its services, as well as the Unity and Liftoff privacy policies linked above. After you purchase 永久移除廣告 (Remove Ads Permanently), the App no longer loads any ads.
6. Purchases
Payment for Remove Ads Permanently is handled by Google Play. The developer does not receive your payment information. The App only checks with Google Play whether you have made the purchase.
7. Content you choose to share
Speech issue reports open your email app with the device model, Android and app versions. You review and send the email yourself. Health records are not attached automatically.
Blood-pressure record PDFs, CSV exports and backup files from 備份與還原 (Backup & Restore) are created only when you tap share or export, and you choose where they are saved or who receives them (for example Google Drive, email, your doctor or family). Backup files contain your health data; please keep them safe.
8. Data retention and deletion
Uninstalling the App, or clearing the App's storage in Android settings, deletes all data in the App. Backup files you exported yourself should be deleted from wherever you stored them. Data Google collects for advertising is kept and deleted under the Google Privacy Policy.
9. Children
The App is intended for adults and is not designed for children.
10. Medical disclaimer
The App is for personal health records and reminders only and is not a medical device. Its blood pressure categories follow the 2022 Taiwan Hypertension Guidelines. It does not replace professional medical diagnosis; please follow your doctor's advice for your personal targets.
11. Changes and contact
Any updates to this policy will be posted on this page with a new date. For privacy questions, email mkjohnny@gmail.com.