Privacy Policy

1. Overview

Tansira ("we", "us", "our") is committed to protecting your privacy. This policy explains how the Tansira mobile application and the Tansira website (tansira.app) handle information.

The data controller responsible for the processing described in this policy is Fuat Shakjiri, based in North Macedonia. You can contact the controller at [email protected].

Summary: The Tansira app stores all health data locally on your device using encrypted storage. Your readings are never transmitted off your device unless you turn on an optional feature that is off by default: Cloud Backup, Family Sharing, or Weather Correlation (see section 4). The free version of the app also shows non-personalized ads, which never receive your health data (see section 6). The website uses Google Analytics 4 only after you consent. Cloudflare provides website delivery, security, and cookie free performance measurement (see sections 5 and 6).

2. Information the Mobile App Does Not Send by Default

The Tansira app does not send to our servers for core tracking:

• Blood pressure readings or health measurements
• Profile names or any personally identifiable information
• Crash reports or diagnostic data
• Usage analytics, screen views, or event telemetry
• Location data

The optional Cloud Backup, Family Sharing, and Weather Correlation features, which transmit data only when you enable them, are described in section 4. The free version of the app includes an advertising SDK that handles standard ad-request data; it is described in section 6.

3. Local Data Storage

All health data you enter is stored exclusively on your device in a SQLite database encrypted with SQLCipher (AES-256-CBC). The encryption key is derived from a device-local secret and never transmitted in readable form; if you enable Cloud Backup, the backup file includes a copy of the key protected by your backup passphrase. Data is retained until you delete it or uninstall the app.

4. Optional Cloud Backup, Family Sharing & Weather

The features below are off by default and only move data off your device after you explicitly turn them on.

Cloud Backup. If you enable backup (Settings -> Cloud Backup), the encrypted database file is uploaded to your personal Google Drive, in a hidden app-data folder. Backup requires signing in with your Google account and is additionally protected by a passphrase only you know. We do not have access to these backups. They are subject to Google's privacy policy.

Family Sharing. If you enable Family Sharing, your readings are synced through Google Firebase so a person you invite can view them on their own device. Your blood pressure values (along with pulse, weight, notes, and tags) are encrypted on your device before they are uploaded; we cannot read them. Some fields needed for syncing (timestamp, posture, and measurement location) and your chosen display name are stored without encryption. Family Sharing requires signing in with a Google, Apple, or email account. You can revoke any link, or delete your account, at any time, which removes the shared data and disconnects all relationships.

Weather Correlation. If you enable the weather feature, the app requests current conditions from Open-Meteo (a weather service that requires no account or API key) at the moment you save a reading. The request contains your approximate location (GPS coordinates or a city you choose) and nothing else; your readings and identity are never sent. Returned weather data is stored locally and deleted together with its reading.

Apple Health / Health Connect. If you turn on health platform sync, readings are exchanged with the health store on your own device. Tansira sends nothing over the network for this feature; data you export into Apple Health or Health Connect is then governed by those platforms' own policies.

5. This Website

Google Analytics 4 is optional and based on consent. We do not load the Google Analytics tag or set Google Analytics cookies unless you select Accept analytics. Declining does not limit access to the website. Our legal basis for this processing in the European Economic Area and the United Kingdom is your consent.

If you accept, Google Analytics measures page views, the page path without query parameters or fragments, session statistics, referral source, browser and device information, approximate location, and successful waitlist or contact form submissions. We do not send health readings, form contents, email addresses, invite codes, or other sensitive information to Google Analytics. Google uses an IP address at collection time for routing, security, and approximate location, then says it discards the raw address before the data is logged. Google Signals and advertising personalization signals are disabled in our tag.

After acceptance, Google Analytics sets the first party cookie _ga to distinguish visitors and a cookie whose name starts with _ga_ to maintain session state. Google documents a default lifetime of up to two years for both cookies. We also store your choice, accepted or declined, in local storage so the site can respect it on later visits. This choice is not used to identify you.

We retain user level and event level Google Analytics data for no longer than two months. Google may retain aggregated reporting data for longer. Google and its affiliates may process Analytics data in countries outside your country, including the United States. Google describes using the EU US Data Privacy Framework for eligible transfers and Standard Contractual Clauses where appropriate. Read Google's Privacy Policy and international data transfer information.

You can reopen Analytics settings at any time from the persistent link in the site footer or from this page. If Google Analytics is active, Withdraw analytics consent revokes consent in one click, disables future Google Analytics collection, and removes the Google Analytics cookies available to this site. Withdrawal does not affect processing that was lawful before you withdrew consent. You can also clear site data in your browser.

Cloudflare. Cloudflare provides content delivery, network security, and Web Analytics performance measurement. Cloudflare Web Analytics is separate from optional Google Analytics and may run without an analytics consent choice. It measures page views, referrers, browser and page performance, and timing metrics. Cloudflare states that this service does not use cookies or local storage and does not fingerprint individual visitors. Cloudflare retains unsampled beacon data for seven days and makes Web Analytics reports available for up to six months. Cloudflare also processes network request information needed to deliver and protect the site. We rely on our legitimate interests in providing a secure, reliable website for this limited processing.

If you subscribe to our newsletter, your email address is stored in a self-hosted Listmonk instance on our server. We use it solely to send the newsletter you requested. You may unsubscribe at any time via the link in each email.

6. Third-Party Services

The app contains no third-party analytics SDKs. The services that receive any data are limited to the following:

• Google AdMob - serves non-personalized ads in the free version; receives standard ad-request data (such as IP address and device type) but never your health data, and is asked for consent (UMP) on first launch where required. Removed entirely by Tansira Pro.
• RevenueCat, with the App Store or Google Play - processes Tansira Pro purchases and verifies your subscription status (only if you subscribe)
• Google Drive - stores your encrypted Cloud Backup (only if enabled in section 4)
• Google Firebase - syncs your encrypted readings for Family Sharing (only if enabled in section 4)
• Open-Meteo - provides local weather for the optional weather correlation feature (receives approximate location only, only if enabled in section 4)

The website uses:

• Google Analytics 4, optional website analytics, only with your consent
• Cloudflare, content delivery, DDoS protection, security, and cookie free Web Analytics

7. Children's Privacy

Tansira is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided information through the app, please contact us.

8. Your Rights

Because we do not collect your health data by default, there is normally nothing for us to provide, delete, or correct on our end. To delete your app data, uninstall the app. If you use Family Sharing, you can also delete your account from Settings -> Family Sharing, which removes all shared data and disconnects all relationships.

For newsletter subscribers: you may request deletion of your email address by unsubscribing or emailing us at the address below.

Where data protection law applies, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to receive data you provided in a portable format. You may withdraw Google Analytics consent at any time using Analytics settings in the footer or on this page. You also have the right to complain to the data protection authority in the country where you live or work.

9. Changes to This Policy

We may update this policy. Material changes will be posted on this page with an updated date. If a change requires consent, we will ask for it. Continued use does not replace consent where the law requires a freely given choice.