Privacy Policy
Last updated : 22 August 2026
In short. Your symptoms never leave your phone. There is no account, no server of ours, no advertising and no tracking. The only thing that leaves the device is a location rounded to roughly 11 km, sent to a weather service to retrieve the atmospheric pressure around you — never together with your symptoms.
Who processes your data
The publisher identified at the bottom of this page is the data controller under the General Data Protection Regulation (GDPR). For any question or request, write to the contact address shown at the bottom of this page.
What Barolog records, and where
On your device, and nowhere else
| Data | Source | Storage |
|---|---|---|
| Your episodes: symptom type, severity, date, free-text note | You | Local SQLite database |
| Atmospheric pressure readings | The device barometer | Local SQLite database |
| Pressure history and forecast | Weather service | Local SQLite database |
| Settings, onboarding state, configured alerts | The app | Local preferences |
That database lives in the app’s private container. It is not synchronised, not backed up to us, and not readable by us. It is included in your iCloud or iTunes backups if you make any — in which case Apple’s privacy policy applies to those backups, not this one.
Your symptoms are health data. That is precisely why they are never transmitted: the correlation analysis that makes the app useful runs entirely on the device.
What leaves the device
Your location, rounded. The phone’s barometer measures pressure where you
are, but it knows neither the history before you installed the app nor the
forecast. To obtain those, the app queries the public weather service
Open-Meteo (api.open-meteo.com), which requires no
key and no account.
Before any network call, latitude and longitude are rounded to a tenth of a degree — a grid of about 11 km. Atmospheric pressure barely varies at that scale, so the app loses no accuracy, and the request does not point at a home address. The location request itself is made at reduced accuracy.
That request contains only rounded coordinates and a date range. It contains no symptom, no identifier and no data about you. We do not retain these requests: they pass through no server of ours. Open-Meteo’s handling of its own technical logs is governed by its privacy policy.
If you decline location access, the app keeps working from the barometer alone; it loses the forecast and any history predating the installation.
Purchases. If you subscribe to Barolog Pro, the purchase is processed by Apple and its state is verified by RevenueCat, a subscription management provider. RevenueCat receives an anonymous app identifier, the platform, the app version and the subscription state. It receives neither your name, nor your email address, nor any symptom. Apple never discloses your payment method to us.
What Barolog does not do
- No account, no sign-up, no password.
- No analytics, no usage measurement, no crash reporting in released builds.
- No advertising, no ad trackers, no data brokers.
- No cross-app tracking: the app does not ask for Apple’s tracking permission, because it has no use for it.
- No sale, rental or sharing of your data. There is nothing to sell — we do not hold it.
Sensors and permissions
| Permission | Why | If you decline |
|---|---|---|
| Motion & Fitness | Read the device barometer | No local reading; the app falls back on weather data |
| Location, while using the app | Retrieve pressure and forecast around you | Only the barometer feeds the app |
| Notifications | Warn you before a pressure drop | No alerts; everything else works |
These permissions can be revoked at any time in iOS settings. Notifications are scheduled and fired locally: none is sent from a server, and no remote push token exists.
The export for your doctor
The document intended for your doctor is built on the device, from the local database. It passes through no server. It leaves the phone only if you share it yourself, to a destination you choose — and that sharing then falls outside the scope of this policy.
Legal bases (GDPR)
- Performance of a contract (Art. 6(1)(b)): keeping the journal, computing correlations, managing your subscription.
- Consent (Art. 6(1)(a)): access to the barometer, location and notifications, collected through system permissions and revocable.
- Explicit consent (Art. 9(2)(a)): health-related data is entered by you, for you, and stays on your device.
Retention
Local data is kept until you delete it, from the app’s settings or by uninstalling the app: uninstalling destroys the database. We hold no copy. Subscription data is retained by RevenueCat and Apple under their own schedules.
Your rights
You have rights of access, rectification, erasure, restriction and portability. Because the data sits on your device, you exercise them directly: viewing, editing and deletion happen in the app, and the doctor export is your portable copy.
For the only data held by our providers — your subscription state — write to the contact address at the bottom of this page. You may also lodge a complaint with your national data protection authority.
Transfers outside the European Union
Open-Meteo is hosted in Europe. RevenueCat is established in the United States and frames its transfers with the European Commission’s standard contractual clauses.
Children
Barolog is not directed at children and does not knowingly collect data concerning them.
Changes
Any change to this policy is published on this page with a new update date. A change that would broaden the data processed is announced inside the app before it takes effect.