Consumer Health Data Privacy Policy

This policy is for residents of Washington State under the My Health My Data Act, of Nevada under its consumer health data law (SB 370), of Connecticut under the consumer health data provisions of its Data Privacy Act, and of other places with similar laws. It adds to our Privacy Policy.

Who we are

Corino is published by Can Cermikli, an individual developer in Türkiye, who decides how this data is used. Contact (including requests for the full postal address): support@corino.app.

Consumer health data we collect

Because Corino is a blood pressure app, we consider everything we receive about how you use it to be consumer health data:

• Usage events: which setup screens you reached; that a reading was added and how (typed, scanned or from a file); scan results as high, medium or low confidence and how many numbers you corrected; that the Corino Pro offer was shown, and that a trial or purchase started (which plan); that a report was shared or printed (which length of time); whether you allowed Apple Health access; that a reading or home-check reminder was turned on (which kind); that a 7-day home check started or finished; that the App Store rating request was shown.
• Crash reports: the technical trace of a crash and the device’s state at the time.
• Identifiers: the random analytics ID, random Firebase installation identifiers, and the app account token added to purchases.
• Technical details: device model, iOS and app version, language, region and time zone setting.

We do not collect blood pressure or pulse values, medication names or doses, notes, names, birth years, whether you take medication, precise or approximate location, or any data from Apple Health. Corino does not use location, so it never geofences health care facilities.

Why we collect it

To learn which features help and where people get stuck, to fix crashes, to compare two designs of the Corino Pro offer, and to count each purchase once. Never for advertising.

Where it comes from

From your iPhone, through Corino, and only after you agree.

Your consent

Sharing usage data is off unless you turn it on. Corino asks you once during setup; you can change your answer at any time in Settings › Privacy › “Share usage data”. While it is off, Corino makes no requests to our processors. Corino works exactly the same either way.

Who receives it

• Amplitude, Inc. (USA) processes usage events for us.
• Google LLC (USA) processes crash reports (Firebase Crashlytics) and the offer-design setting (Firebase Remote Config) for us.

Both act only on our instructions, as processors. We have no affiliates that receive this data, and we do not share it with any other third party. We never sell consumer health data.

Your rights

You may ask us, free of charge:

• to confirm whether we collect, share or sell your consumer health data;
• for access to it, including a list of all third parties and affiliates we shared it with or sold it to, and how to contact them;
• to delete it, including from our processors;
• and you may withdraw your consent at any time with “Share usage data”.

How to ask. Your analytics ID is a random ID that Corino creates on your iPhone when it sends the first event, and gives to Amplitude. Once Corino has sent usage data, Corino › Settings › Privacy shows it with a Copy ID button. Copy it and send it with your request to support@corino.app. The ID is how we find your data, because it is not linked to your name or email address. We answer within 45 days; if we need longer, up to 45 more days, we tell you why.

Appeals. If we decline your request, you can appeal by replying with “Appeal” in the subject. We answer the appeal within 45 days and explain our decision. If you are not satisfied, you can contact the Washington State Attorney General (atg.wa.gov/file-complaint), or your own state’s Attorney General.

Changes

We will update this page and its effective date before we change what we collect, and Corino will ask for your consent again if the law requires it.