HealthHistory

Privacy Policy — Health History

Last updated: 2026-04-19

Health History (“the app”) is an offline Android application for logging blood pressure, blood sugar, weight, waist size, symptoms, and administered medications, with reminders and on-device report generation for chronic-disease self-management.

This policy describes exactly what happens to your data. The short version: everything you enter stays on your phone, encrypted, and nothing is sent to us or anyone else.

---

1. Who we are

The app is developed and distributed by Serghei Cojocaru as an independent publisher.

• Contact: cojocaru.serghei.nicolae@gmail.com
• The developer does not operate any backend server, user account system, or cloud service in connection with the app.

2. What data the app collects

The app only stores data that you enter yourself:

• Blood-pressure readings (systolic, diastolic, pulse, arm, body position, notes).
• Blood-sugar readings (value, context tag, notes).
• Body measurements (weight, waist).
• Symptoms (predefined list + free text, severity 1–10).
• Medication catalog entries (name, dose, unit, route, notes).
• Administered medication log (snapshots of medication + dose + time).
• Scheduled reminders (type, time, repeat rule).
• App preferences (language, units, dark-mode choice, snooze minutes, blood-pressure classification standard).

The app does not collect, infer, or capture:

• Contacts, calendar, photos, call log, SMS, location, microphone, camera, health-platform data, wearable data, advertising ID, device identifiers, network address, or any telemetry whatsoever.

3. Where data is stored

All data stays on your device inside the app’s private storage directory. The SQLite database file is encrypted at rest with SQLCipher using a per-install key held in the Android Keystore (hardware-backed on devices that support it). Other apps and other users on the device cannot read it.

The app does not use Android Auto Backup; the database is excluded from Google’s automatic cloud backup (android:allowBackup="false").

4. Data we transmit

None. The app does not declare the INTERNET permission and contains no networking code, no analytics SDK, no crash-reporting SDK, no advertising SDK, and no third-party tracking libraries.

You can verify this by inspecting the app’s AndroidManifest.xml, source code, or network traffic.

5. Exports and sharing

The app can generate PDF and CSV reports from the data you’ve entered. Report generation runs entirely on the device. The resulting file is saved to the app’s cache folder and offered to you through Android’s standard share sheet. Whether the file leaves your device, and where it goes, is entirely your choice (email it to your doctor, save to Drive, print, etc.).

The developer receives no copy.

6. Permissions the app requests and why

Permission	Why it is needed
POST_NOTIFICATIONS (Android 13+)	To display medication / measurement / appointment reminders.
SCHEDULE_EXACT_ALARM	To fire reminders at precise times, critical for dose-timing (e.g. insulin).
RECEIVE_BOOT_COMPLETED	To re-arm pending reminders after the phone reboots, so you don’t miss a scheduled dose.
CAMERA	to attach a picture to a meal entry; the image is saved in the app’s private storage and never uploaded. Uninstalling the app removes all stored data.

The app does not request Internet, location, contacts, storage, camera, microphone, health-platform (Health Connect), or any other permission.

7. Children

The app is not directed to children and does not knowingly collect any data from anyone.

8. Your control over your data

Because all data lives on your device:

• You can delete any individual entry from its list screen.
• You can uninstall the app to remove the entire encrypted database along with the keystore-held encryption key. After uninstall, the data is unrecoverable.
• You can export your data at any time from the Reports screen.

The app does not currently include an in-app “wipe all data” button. If you need one before the next release, uninstalling the app accomplishes the same thing.

9. Security

• Database encrypted with SQLCipher (AES-256).
• Encryption key managed by the Android Keystore (hardware-backed where available).
• Report files written to the app’s private cacheDir, exposed to other apps only through the Android FileProvider when you explicitly share them.
• No background network activity (the app cannot reach the network — no INTERNET permission is declared).

No security system is perfect. If your phone itself is compromised (root exploit, physical device seizure with active session, etc.), the protections above cannot guarantee confidentiality.

10. Changes to this policy

If the privacy practices change (e.g. the app ever adds an optional cloud-sync feature), this document will be updated and the updated version will ship with the corresponding app update. The “Last updated” date at the top reflects the most recent change.

11. Contact

Questions, concerns, or data-rights requests: cojocaru.serghei@gmail.com