Consumer Health Data Privacy Policy

AbleBP collects the following categories of consumer health data:

• Blood Pressure Readings — Systolic and diastolic values recorded by the consumer
• Pulse Rate — Heart rate measurements associated with blood pressure readings
• Mean Arterial Pressure (MAP) — Calculated from blood pressure values
• Measurement Timestamps — Date and time each reading was recorded
• Measurement Context — Which arm was used for measurement
• Health Classifications — BP status categories (Normal, Elevated, Stage 1, Stage 2, Crisis, Low)
• Health Notes — Optional free-text notes attached to readings
• Caregiver Sharing Data — Records of which users have been granted access to view health data

• Personal Health Tracking — Storing, displaying, and analyzing your blood pressure readings over time
• Health Trend Analysis — Calculating averages and identifying patterns in your readings
• Data Export — Enabling you to download your health data in standard formats (CSV, PDF, JSON)
• Caregiver Sharing — Sharing your health data with people you explicitly designate through the invitation system

AbleBP does not share, sell, or disclose your health data to any third parties. Specifically:

• We do not sell consumer health data
• We do not share health data with advertisers
• We do not share health data with data brokers
• We do not use health data for any purpose other than providing the service to you

The only sharing that occurs is when you explicitly invite another person to view your health data through our invitation system. You control who has access and can revoke access at any time.

Under the MHMDA, you have the following rights regarding your health data:

• Right to Access — You can view all your health data at any time through the app, and export it in JSON, CSV, or PDF format from your Profile
• Right to Deletion — You can delete individual readings, patients, or your entire account and all associated data from your Profile
• Right to Withdraw Consent — You can withdraw your consent to health data collection at any time from your Profile. Withdrawing consent will result in deletion of your account and all health data.

You may withdraw your consent to health data collection at any time. To do so:

1. Navigate to your Profile page
2. Scroll to the "Health Data Consent" section under "Privacy & Data"
3. Click "Withdraw Health Data Consent"
4. Confirm by entering your password

Because AbleBP exists solely to collect and display health data, withdrawing consent requires deletion of your account and all associated health data. This action is permanent and cannot be undone.

You may also withdraw consent by contacting us at privacy@ablebp.com.

For questions about this policy or to exercise your health data rights, contact us at:

privacy@ablebp.com