日本語 / 한국어 / English

Privacy Policy

OverUnder

Last updated: September 15, 2026

App name: OverUnder (OverUnder: Home BP Journal)

1. Introduction

OverUnder ("the app") is a personal app for recording the blood pressure you take at home and showing your morning and evening averages. It has no feature for sharing records with family or anyone else, and only you can see your records.

The app handles health information, such as your blood pressure and medicine records, so we handle that information with special care.

This app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It helps you record and review your own readings. Always consult a healthcare professional for medical advice.

2. Information We Collect

The app collects and stores only the following information.

2.1 Information you enter (health information)

• Blood pressure: your top number (systolic) and bottom number (diastolic). If you enter two readings, both readings and their average
• Pulse: only if you enter it
• The time of each reading, and whether it counts as morning, evening, or other
• Medicine records: whether you took your morning or evening medicine
• Life tags: any you add from alcohol, poor sleep, salty food, exercise, stress, and feeling unwell
• Memos: anything you choose to write (optional)

2.2 Settings

• Whether you see a doctor for your blood pressure
• A blood pressure target your doctor gave you (if you enter one)
• When you take medicine (morning, evening)
• Reminder times, and whether reminders are on
• The date of your last doctor's visit (if you enter it)

2.3 Information collected automatically

• Anonymous user ID: an internal ID (uid) that Firebase Authentication creates automatically so the app can tell users apart. It cannot be used to find out your name or contact details
• Crash and error information: if the app closes unexpectedly, we record where the error happened, along with your device type, OS version, and app version (Firebase Crashlytics). It does not include your blood pressure or other records
• Usage information: statistics about how the app is used, such as how often it is opened and which pages are viewed (Firebase Analytics). We use it to improve the app. It does not include your blood pressure or other records

If your reference guideline is Korean or American, the app asks for your separate consent on a consent screen before you start recording this health information (see "4.1 Legal basis" and "Consumer Health Data").

The app does not collect your name, email address, phone number, or mailing address. It does not access your location, photos, contacts, or health app data (Apple Health, Health Connect). It does not communicate with blood pressure devices. It does not use advertising IDs.

3. How We Handle Health Information

Blood pressure, pulse, and medicine records are health information, so we handle them as follows.

• No one but you can see your records. The app has no feature for sharing or publishing them with other users
• We never use your records for advertising. The app shows no ads
• We never provide or sell your records to third parties
• We never send the contents of your records to usage statistics (Firebase Analytics)

4. How We Use Information, and Our Legal Basis

We use the information we collect only for the following purposes.

• To save your records and show them in the calendar, the graph, and the Show Your Doctor page
• To calculate your morning and evening averages and show how they compare with the reference values in a medical society guideline, such as the 2025 AHA/ACC high blood pressure guideline
• To send reminders on days you haven't measured yet (reminders are scheduled on your device and are not sent from an outside server)
• To fix problems and make the app easier to use (crash and usage information)

4.1 Legal basis

We treat information differently depending on what it is.

• Processed without consent: your anonymous user ID, your settings (2.2), and crash and usage information (2.3). We process these only as needed to provide the app features you asked for (for users in Korea, Article 15(1)(4) of the Personal Information Protection Act)
• Processed with your consent: health information such as blood pressure, pulse, reading times, medicine records, life tags, and memos (2.1). This is sensitive information, so we ask for separate consent, apart from anything else (for users in Korea, Article 23(1)(1) of the same Act; for users in Washington State, the My Health My Data Act)

The consent screen tells you what we collect, why, how long we keep it, where it is stored, and that you have the right to refuse and what happens if you do. The checkboxes start unchecked, and we record the date and time you agreed and the version of the wording you agreed to. You have the right to refuse; if you don't agree, you can't use the recording features.

5. How We Store Information

5.1 Where it is stored

• Your records and settings are stored in Cloud Firestore from Google Firebase, in the Google Cloud Tokyo region (asia-northeast1) in Japan
• So you can keep recording where there is no signal, the app also keeps a temporary copy on your device (offline cache). It syncs automatically when you are back online, and it is not kept anywhere that can be accessed from outside the app
• Crash and usage information is processed on Google's servers and may be processed outside your country

5.2 How long it is kept

• As long as you keep using the app, your records are not deleted automatically
• Deleting (uninstalling) the app does not, by itself, delete your records on the server

6. Deleting Your Records and Account

6.1 Deleting one record at a time

You can delete a record by opening that day from the calendar in the app and choosing the record.

6.2 Deleting all your records and your account

The current version does not have a feature to delete all your records and your account at once from inside the app. If you would like them deleted, please email us as described in "6.3 How to request deletion" below.

6.3 How to request deletion

1. Email info.mobileappsengine@gmail.com with the subject line "OverUnder Deletion Request"
2. In the message, please include the version shown at the bottom of the app's Settings page, about when you started using the app, and the date, time, and values of your most recent reading (for example: September 13, morning, 128/78). Because the app is used anonymously, we use this information to find your records
3. After confirming, we will delete your data within 7 days of receiving your request and reply to let you know it is done

What is deleted:

• Your anonymous user ID (Firebase Authentication)
• All of your blood pressure, pulse, reading times, medicine records, life tags, memos, and settings

What is not deleted:

• Crash information and usage statistics. These do not include the contents of your records, cannot identify you, and are deleted automatically after each service's retention period

Deletion cannot be undone.

7. Sharing Information

The app never provides or sells your records or settings to third parties. We do not give the information we collect to anyone outside, except when disclosure is required by law.

8. Services We Use

The app uses the following Google Firebase services to store data and improve quality.

• Firebase Authentication (anonymous sign-in; we do not ask for your name or email address)
• Cloud Firestore (storing records and settings)
• Firebase Crashlytics (finding the cause when the app closes unexpectedly)
• Google Analytics for Firebase (statistics on how the app is used)

We do not use any advertising services.

• Firebase privacy and security: https://firebase.google.com/support/privacy
• Google Privacy Policy: https://policies.google.com/privacy

9. Keeping Data Secure

• Firebase security rules make sure that only the person who made the records (the same uid) can access their records and settings
• All communication is encrypted (HTTPS)

10. About Anonymous Sign-In

The app does not ask you to sign in with a name or email address. Instead, it signs you in anonymously and automatically, so you can start recording as soon as you open it.

Because of how this works, please keep the following in mind.

• The ID that identifies you is tied to this app on this device. If you delete the app, switch phones, or reset your device, the ID is lost
• The current version cannot move your records to another device. So in those cases, there is currently no way to get your past records back
• We plan to improve this. When we do, we will update this policy to let you know

11. Children's Privacy

The app is not intended for use by children. On the consent screen, we confirm that users are 14 or older (Korea), or 18 or older (United States), and you can't use the recording features without confirming. We do not knowingly collect personal information from children under 13, or, in Korea, under 14.

12. Consumer Health Data

This section is our consumer health data privacy policy under the Washington My Health My Data Act. It applies to everyone who uses the app, wherever you live.

12.1 The consumer health data we collect

• Blood pressure (top and bottom numbers) and pulse that you enter
• The time of each reading
• Whether you took your morning or evening medicine
• Life tags you add (alcohol, poor sleep, salty food, exercise, stress, feeling unwell)
• Memos you write, which may include information about your health

We collect this only from what you type into the app. We do not collect it from other sources, and we do not infer health information from your device, location, or usage.

12.2 Why we collect it and how we use it

Only to save your records, calculate your morning and evening averages, and show them to you in the app (the calendar, the graph, and the Show your doctor page). We collect it only after you give consent on the consent screen. We do not use it for advertising, and we do not send it to usage statistics.

12.3 Sharing

We do not share or sell your consumer health data with any third party or affiliate. It is stored for us by Google LLC (Firebase) as our processor, which stores it only to provide the app to you (see "8. Services We Use" and "14. Where Your Information Is Processed").

12.4 Your rights

You have the right to confirm whether we collect your consumer health data, to access it, to have it deleted, and to withdraw your consent. To exercise any of these rights, email info.mobileappsengine@gmail.com with the subject line "OverUnder Health Data Request", and include the information described in "6.3 How to request deletion" so we can find your records. We will respond within 45 days. Deleting your records counts as withdrawing your consent. If we decline your request, you may appeal by replying to our response, and we will answer your appeal within 45 days.

13. Changes to This Policy

We may change this policy when needed. If we do, we will update the "Last updated" date on this page to let you know.

14. Where Your Information Is Processed

To store and process it for us, your information is stored and processed outside your country as follows.

• Recipient: Google LLC (Firebase)
• Recipient contact: Firebase support https://support.google.com/firebase/contact, and Firebase privacy and security https://firebase.google.com/support/privacy
• Countries: records and settings in Japan (Google Cloud Tokyo region); crash and usage information in countries where Google has servers, such as the United States
• What is transferred: the information listed in "2. Information We Collect"
• When and how: whenever you use the app, over encrypted connections (HTTPS)
• Recipient's purpose: storing your records and settings (Cloud Firestore), providing anonymous sign-in (Firebase Authentication), and processing crash and usage statistics (Firebase Crashlytics, Google Analytics for Firebase) on our behalf
• How long the recipient keeps it: records and settings until you ask us to delete them (see "6. Deleting Your Records and Account"); crash and usage information until each service's retention period ends
• How to refuse, and what happens: if you don't want your information transferred, don't agree on the consent screen, or stop using the app and ask us to delete your data as described in "6.3". Because the app stores records only on these servers, you can't use the recording features if you refuse

15. Withdrawing Consent

You can withdraw your consent to the processing of your health information at any time. Email info.mobileappsengine@gmail.com with the subject line "OverUnder Withdraw Consent", and include the information described in step 2 of "6.3 How to request deletion". Asking us to delete your records and account also counts as withdrawing your consent. Once confirmed, we delete your health information within 7 days and reply to let you know. After you withdraw, you can't use the recording features. You can see the date you agreed on the app's Settings page.

16. Contact Us

If you have any questions, please contact us at the email address below.

Email: info.mobileappsengine@gmail.com

Operator: Seiu

Effective date: September 13, 2026
Revised: September 15, 2026 (added separate consent for health information, legal basis, Consumer Health Data, recipient contact and purpose for transfers, withdrawing consent, and age confirmation)