Privacy Policy

Corino is a log for the blood pressure readings you take with your own monitor. It is built so that your health information stays with you: on your devices and in your own iCloud. This policy explains what that means, and the few things that leave your iPhone, and only if you agree.

• Your readings stay with youWhat you enter in Corino is kept on your iPhone and in your private iCloud. We cannot see it. Readings from Apple Health stay in Health.
• No account. No ads. Nothing sold.There is no sign-up, no advertising, no tracking across apps or websites, and we never sell or rent information.
• Apple Health only if you chooseData from Health stays on your iPhone. It is never sent to iCloud, never used for advertising, marketing or data mining, and never shared.
• Usage data only if you say yesIt is off unless you turn it on, and Corino works the same without it. It never includes a reading or any other health value.

1. Who we are

Corino is published by Can Cermikli, an individual developer in Türkiye (“we”, “us”). He is the controller for the small amount of information that reaches us or our service providers, described in sections 6 to 9 and 11. You can reach us at support@corino.app.

We provide our full postal address on request at support@corino.app. We have not appointed a representative in the EU or the UK (Art. 27 GDPR and UK GDPR): at Corino’s scale, we consider our processing to be occasional and low-risk. You can contact us directly about anything in this policy.

We never receive the readings and other entries you keep in Corino. They are processed on your own devices and, if you use iCloud, stored by Apple in your iCloud account.

Back to top

2. What stays on your devices

Everything you enter is stored in Corino’s private storage on your iPhone:

• Readings: systolic and diastolic pressure, pulse, date, time and time zone, arm, position, tags, the irregular heartbeat mark, your note, and where the reading came from (typed, scanned, Apple Health or a file, and the name of the app that saved it to Health).
• People: the name and optional birth year you give yourself and each family member, and the guideline chosen for each.
• Medications: name, dose and schedule, and the doses you mark as taken.
• The 7-day home check: when it started, its plan and whether it is complete.
• Settings: such as your guideline, reminder times, whether App Lock is on and your answer about usage data.

Corino’s widgets read this storage to show your latest reading and 7-day average; they cannot change it. Reminders are scheduled as notifications on your iPhone. A medication reminder shows the medication’s name and dose unless App Lock is on. Your device backups (iCloud Backup or a backup on your computer) include Corino’s data, as they do for other apps.

Corino uses your iPhone’s region setting to choose a default guideline and the emergency number shown with a very high reading. It does not use Location Services.

If you use Siri or the Shortcuts app to log a reading, Apple processes your request under Apple’s privacy policy, and Corino receives the numbers to save them in your log.

Back to top

3. iCloud sync

If you are signed in to iCloud, Corino keeps your devices in step through a private database in your own iCloud account (Apple CloudKit). It syncs what you enter in Corino: the readings you type, scan or import from a file, people, medications and the doses you mark as taken, and 7-day home checks.

• Readings from Apple Health are never sent to iCloud by Corino. Each of your devices reads them from Apple Health itself. (Apple Health has its own sync between your devices, which Apple provides.)
• The database belongs to your iCloud account. We cannot read it, and Corino has no server of its own.
• Apple encrypts it in transit and on its servers. Corino stores every field of each record in CloudKit’s encrypted fields, so if you turn on Advanced Data Protection for iCloud, the contents are end-to-end encrypted and only your trusted devices can read them.
• Apple’s handling of iCloud data is governed by Apple’s Privacy Policy and the iCloud terms you agreed with Apple.

To stop syncing, turn off iCloud for Corino in the Settings app (Settings › your name › iCloud). If you sign out of iCloud, the readings on your iPhone stay there.

Back to top

4. Apple Health

Connecting Apple Health is optional, and Corino works fully without it. If you connect it, Corino asks Apple’s permission to:

• read blood pressure (systolic and diastolic) and heart rate saved by other apps, such as your monitor’s app, so your history is in one place, and to receive new readings in the background;
• save the readings you log in Corino (blood pressure and pulse), and update or remove them when you edit or delete them in Corino;
• read Apple Watch hypertension notifications (on iOS 26.2 and later), so Corino can offer the 7-day home check.

Only the main person in Corino is connected to Apple Health. Corino never changes or deletes readings that other apps saved to Health.

Readings you log in Corino are your own entries: they sync through your iCloud (section 3) and, if you choose, are also saved to Health. You can change Corino’s access at any time in the Health app (tap your picture, then Apps › Corino). Choosing “Stop syncing” in Corino keeps the readings already in Corino.

Back to top

5. Camera and photos

Scanning reads the numbers on your monitor’s screen. The camera image, or the photo you choose, is processed on your iPhone only. It is not saved and not sent anywhere, and you check the numbers before the reading is saved. When you choose a photo, iOS gives Corino only the photo you picked.

Back to top

6. Usage data

If you agree, Corino sends usage events to Amplitude, Inc. (USA), which processes them on our behalf, so we can learn which features help and where people get stuck. Amplitude stores the events in its EU data center.

Your choice

Sharing usage data is off unless you turn it on. Corino asks you once during setup, and you can change your answer at any time in Settings › Privacy › “Share usage data”.

You don’t have to share usage data: Corino works exactly the same without it. While it is off, Corino makes no requests to Amplitude, Firebase Crashlytics or Firebase Remote Config (sections 7 and 8).

What an event says

That something happened, with a few fixed labels:

• which setup screens you reached;
• that a reading was added, and how (typed, scanned or from a file);
• that a scan was tried, how confident it was (high, medium or low) and how many of the three numbers you corrected;
• that the Corino Pro offer was shown (where, and which design), and that a free trial or purchase started (which plan);
• that a report was shared or printed (which length of time it covered);
• whether you allowed Apple Health access; that a reading or home-check reminder was turned on (which kind); that a 7-day home check started or finished (which plan); that the App Store rating request was shown.

What comes with it

A random analytics ID that Corino creates on your iPhone when it sends the first event, and gives to Amplitude; the time; and basic technical details: device model, iOS version, app version and language.

What it never contains

Blood pressure or pulse values, medication names or doses, notes, names, birth years or any data from Apple Health. Nor does it say whether you take medication: medication reminders are never counted, and the medication screen is never named (a Corino Pro offer shown there counts as Settings). Corino’s code only allows the fixed labels above, so a value cannot be sent by mistake.

How it is set up

No advertising identifier, no vendor identifier, no automatic screen tracking. Like any internet request, the connection carries your IP address; Corino tells Amplitude not to record it and not to work out a location from it.

Your analytics ID

Once Corino has sent usage data, Settings › Privacy shows your analytics ID, with a Copy ID button. Send it to us to have the events linked to it deleted (section 14).

This data is pseudonymous: it is not connected to your name, email address or Apple Account, but it is tied to the random analytics ID, which stays the same on your iPhone until you delete Corino.

Back to top

7. Crash reports and performance

Firebase Crashlytics (Google LLC, USA) receives a report when Corino crashes, so we can fix it, but only while “Share usage data” is on. A report contains the technical trace of what the app was doing, the device model, iOS and app version, technical details of the device’s state at the time (such as free memory and storage), and random installation identifiers created by Firebase. It contains no health data and nothing you entered.

MetricKit is part of iOS. It gives Corino daily summaries of performance and any crashes on your iPhone. Corino only notes in your iPhone’s own log that a summary arrived; it does not send them anywhere.

Apple. If you turned on “Share With App Developers” in the Settings app (Privacy & Security › Analytics & Improvements), Apple shares crash logs and usage statistics for Corino with us. That is Apple’s setting, described in Apple’s privacy policy.

Back to top

8. Remote Config

Corino uses Firebase Remote Config (Google LLC) to decide which of two designs of the Corino Pro offer to show at the end of setup, so we can compare them, but only while “Share usage data” is on. Then, when Corino starts, it asks Remote Config for the current setting. The request includes a random Firebase installation identifier, the app and iOS version, your language, region and time zone setting and, like any internet request, your IP address. It includes no usage events, no health data and nothing you entered.

While “Share usage data” is off, Corino makes no request and shows the standard design.

Back to top

9. Purchases

Corino Pro is sold through the App Store. Apple handles payment, Family Sharing and refunds; we never see your card or your Apple Account details. The App Store gives Corino a signed record of your purchase, which Corino checks on your device to unlock Pro. Apple provides us with sales reports that do not identify you.

Only while “Share usage data” is on, Corino adds a random identifier for this installation (an “app account token”) to each purchase. It is kept in your iPhone’s keychain for this device only, so it is not restored onto a different iPhone, and it may remain in the keychain after you delete Corino. Apple stores it with the purchase record. Corino uses it only to tell whether a purchase was made on this iPhone, so that it is counted once in the usage statistics. It contains nothing about you. While the switch is off, purchases carry no such identifier.

Back to top

10. When you share or export

A doctor report (PDF), a readings export (CSV) or a backup file is created on your iPhone, and you choose where it goes, for example Mail, Messages, AirDrop, Files or a printer. We do not receive a copy. Once you send a file, the privacy practices of the service you use and of the person who receives it apply. A report includes your name and birth year if they are in your profile; you can turn each off before sharing.

Back to top

11. Emails to support

If you write to support@corino.app, we receive your email address, your message and anything you attach, and use them only to help you. Please don’t send readings unless you want us to see them. Mail to this address passes through Cloudflare Email Routing (Cloudflare, Inc.) and is delivered to a Gmail mailbox (Google LLC); both act as our processors.

This website. corino.app is served by Cloudflare Pages (Cloudflare, Inc.), which processes visitors’ IP addresses and request data to deliver and protect the site. The site uses no analytics and no cookies. Cloudflare keeps its logs under its own retention rules.

Back to top

12. What we never do

• Sell, rent or trade information about you.
• Show ads or include advertising software.
• Track you across other companies’ apps or websites. Corino never asks for the advertising identifier.
• Ask you to create an account.
• Use your health information for marketing, or make automated decisions about you.

Back to top

13. Legal bases (EEA, UK and Switzerland)

Where the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies, we rely on:

• Usage data, crash reports, Remote Config and the app account token (sections 6 to 9): your consent (Art. 6(1)(a) GDPR; where an event could relate to your health, explicit consent under Art. 9(2)(a)). Storing and reading the identifiers on your iPhone is based on the same consent (Art. 5(3) of the ePrivacy Directive; in Germany § 25(1) TDDDG). You can withdraw it at any time with the switch in Settings › Privacy; this does not affect what was processed before.
• Purchases (section 9): providing the Corino Pro you bought (Art. 6(1)(b)).
• Support emails (section 11): answering your request (Art. 6(1)(b) and (f)).

You don’t have to give this consent, and nothing in Corino depends on it. We do not receive your readings or other health entries.

Back to top

14. Your rights

Most of your information never reaches us, so you control it directly in Corino, in iCloud and in the Health app (section 19). For information we or our providers do hold, you can ask to access it, correct it, delete it, restrict or object to its use, or receive a copy of it. Write to support@corino.app; we answer within one month.

To have your usage events deleted, copy your analytics ID in Settings › Privacy and send it to us. We delete the events linked to it at Amplitude. Without the ID we cannot find your events, because they are not linked to your name or email address (Art. 11 GDPR). Crash reports are not linked to that ID; they are deleted automatically after 90 days. Turning off “Share usage data” stops new events at once.

You can also complain to a data protection authority, for example where you live. In the UK this is the Information Commissioner’s Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

Japan

Under the Act on the Protection of Personal Information (APPI), you can ask us to disclose, correct, add to, stop using or delete the personal information we hold, and to disclose records of its provision to third parties. You can also contact the Personal Information Protection Commission (ppc.go.jp).

• Security measures: we keep as little as possible, because readings never reach us; access to our Amplitude and Firebase accounts is limited to the developer and protected by two-factor authentication; information travels over encrypted connections; and we review our providers’ data protection terms before using them.
• Foreign countries: if you agree to share usage data, Amplitude stores usage events in the EU, and Google processes crash reports and Remote Config requests in the United States. Emails you send to support are delivered through Cloudflare and stored by Google, which may also process them in the United States. The United States has no comprehensive federal data protection law equivalent to the APPI; protection there depends on sector-specific federal laws and state laws such as the CCPA. All three providers are bound by data processing terms with confidentiality, security and deletion obligations.

Türkiye (KVKK)

Because the publisher resides in Türkiye, the Personal Data Protection Law No. 6698 (KVKK) also applies. The data controller is Can Cermikli. The data, purposes and legal grounds are those in sections 6 to 11; usage data and crash reports are processed only with your explicit consent (KVKK Articles 5 and 6). Their transfer to Amplitude and Google abroad relies on your explicit consent (Article 9), which you give with “Share usage data”. Under Article 11 you can learn whether your data is processed and why, request information about it and about whom it is transferred to in Türkiye or abroad, ask for it to be corrected or deleted and for those recipients to be told, object to a result that is to your detriment and comes only from automated analysis, and claim compensation for unlawful processing. Send your request to support@corino.app; we answer within 30 days. You can complain to the Personal Data Protection Authority (kvkk.gov.tr).

Back to top

15. California and other US states

This section is for residents of California (CCPA as amended by the CPRA) and of other US states with consumer privacy laws. In the last 12 months, and only from people who turned on “Share usage data”, we collected:

• Identifiers: the random identifiers described in sections 6 to 9.
• Commercial information: that a free trial or purchase started, and which plan (not the price or any payment details).
• Internet or other electronic network activity: in-app usage events and crash reports.

If you email us, we also receive your email address and message, which Cloudflare and Google deliver and store for us as service providers.

They come from your device, through Corino. We use them to understand and improve Corino and fix crashes, and we disclose them only to our service providers Amplitude and Google for those purposes. We do not sell or share personal information for cross-context behavioral advertising, do not use it for targeted advertising or for profiling, and have no actual knowledge of selling or sharing information of anyone under 16. We do not collect sensitive personal information to infer characteristics about you. Retention is described in section 18.

You may ask to know, access, correct or delete your personal information, and you will not be treated differently for using these rights. An authorized agent may ask on your behalf. If we decline a request, you can appeal by replying with “Appeal” in the subject; if you remain unsatisfied, you can contact your state’s Attorney General. We do not disclose personal information to third parties for their direct marketing.

Back to top

16. Consumer health data

Washington’s My Health My Data Act, Nevada’s consumer health data law (SB 370), the consumer health data provisions of the Connecticut Data Privacy Act and similar laws define consumer health data broadly. Because Corino is a blood pressure app, we consider the usage data in sections 6 to 9 to be consumer health data. We collect it only with your consent, which you give and withdraw with “Share usage data”, we never sell it, and we share it only with our processors Amplitude and Google.

Our full Consumer Health Data Privacy Policy describes the categories, purposes, recipients and your rights, including how to delete your data and how to appeal.

Back to top

17. International transfers

If you agree to share usage data, Amplitude stores usage events in its EU data center, and Google may process crash reports and Remote Config requests (sections 7 and 8) in the United States. Support emails pass through Cloudflare and are stored by Google, which may process them in the United States. The website is delivered through Cloudflare’s network, which may also process request data outside your country. Where the GDPR or UK GDPR applies, these transfers rely on the EU–U.S. Data Privacy Framework (with its UK Extension and the Swiss–U.S. framework) where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses in the providers’ data processing terms. Apple’s handling of iCloud data is described in Apple’s Privacy Policy.

Back to top

18. How long information is kept

• Your log on your devices and in iCloud: until you delete it (section 19).
• Usage events at Amplitude: 12 months, then deleted; earlier if you send us your analytics ID.
• Crash reports at Firebase Crashlytics: 90 days.
• Firebase installation identifier (Remote Config): kept by Google until it is deleted, then removed within 180 days. Corino does not delete it automatically; it is not linked to your name or account.
• Support emails: 24 months after the last message, unless the law requires longer.
• The app account token, if a purchase carried one, is kept by Apple with your purchase record, under Apple’s policies.

Back to top

19. Deleting your data

• One reading: in History, swipe the reading or open it and choose “Delete reading”. It is removed from your iPhone and from iCloud. If Corino saved it to Apple Health and Apple Health is still connected, it is removed there too. A reading that came from Apple Health is removed from Corino only; it stays in Health, as do readings saved by other apps.
• A family member: in Settings › Family, open the person and choose Delete. Their readings, medications and home checks are deleted from your iPhone and from iCloud.
• Everything:
  1. Delete Corino’s iCloud data first: Settings › your name › iCloud › Manage Storage (or Manage Account Storage) › Corino › Delete Data from iCloud. This removes it from all your devices.
  2. Then delete the Corino app on each device. This removes what is stored on that device.
  3. Readings Corino saved to Apple Health stay there until you delete them in the Health app: Browse › Heart › Blood Pressure › Data Sources & Access, choose Corino and delete its data.
• Usage data: copy your analytics ID in Settings › Privacy and send it to us before you delete the app (section 14), then turn off “Share usage data”.

Back to top

20. Security

Because Corino has no server and no accounts, there is no database of users for anyone to break into. On an iPhone with a passcode, iOS encrypts Corino’s storage with keys protected by that passcode. iCloud data is encrypted by Apple as described in section 3. Usage events and crash reports travel over encrypted connections. With Corino Pro you can also turn on App Lock (Face ID, Touch ID, Optic ID or your passcode), which hides your readings in the app switcher. Widgets on your Home Screen and Lock Screen still show your latest reading.

Back to top

21. Children

Corino is not directed to children under the age of digital consent where they live (between 13 and 16, depending on the country), and we do not knowingly collect their personal information. An adult can keep a log for a child as a family member; that log stays on the adult’s devices and iCloud, and we never receive it. If you believe a child has sent us information, contact us and we will delete what we can identify.

Back to top

22. Changes to this policy

We will update this page and its effective date when Corino changes what it does with information. We will describe important changes in the App Store release notes, and where the law requires your consent, Corino will ask for it before the change applies to you.

Back to top

23. Contact

Can Cermikli
Türkiye (full postal address on request)
support@corino.app

Back to top