Privacy by design

We believe health data is among the most sensitive information a person generates. So we built Tansira with one rule: we never see your readings.

What data Tansira stores

  • Blood pressure readings (systolic, diastolic, pulse, timestamp, notes, lifestyle tags)
  • Medication names, doses, and schedules you add
  • Body weight entries you log
  • Profile names you choose locally (for example, Mom)
  • App settings (preferred guideline, reminder time, theme)

That's it. No device identifiers, no IP address, no usage analytics, no crash reporting SDK that phones home.

How it's protected

The database is encrypted at rest using SQLCipher with AES-256-CBC. The encryption key is derived from a device-local secret; it never leaves your phone. Even if someone took your device's storage chip, they could not read your readings without your passcode.

Optional cloud backup

You may opt in to back up your encrypted database to iCloud Drive (iOS) or Google Drive App Data (Android). The backup is an encrypted binary blob, not human-readable, and not accessible to us. Apple and Google can see the file exists but cannot decrypt its contents.

Backup is off by default. You enable it in Settings -> Backup.

No third-party analytics

The app contains no third-party analytics SDKs (no Firebase Analytics, Mixpanel, Amplitude, Sentry, or similar). We do not collect crash reports, screen views, button taps, or any behavioral telemetry.

Family Sharing and cloud sync

Family Sharing is an optional, opt-in feature. When enabled, your readings are encrypted on your device before they ever leave it. The server holds an encrypted binary blob it cannot read. You control what data to share and can revoke a family member's access at any time — this immediately removes your data from their device. Deleting your account removes all shared data and disconnects all relationships.

This website

This marketing site uses Plausible Community Edition, a privacy-respecting, cookie-free analytics tool that does not fingerprint visitors or share data with ad networks. No consent banner is needed because no personal data is collected.

Legal documents