YOUR DATA AND YOUR CHOICES

AnyBP privacy policy

This policy describes the current AnyBP tracker and its marketing website. AnyBP is provided by Advanced Work Management Ltd., as confirmed by its owner. For support, privacy questions or data-deletion requests, contact support@anybp.com. Its registered business address must be confirmed before public release.

1. Your record on your device

The tracker stores readings, dates, notes, medications, targets, weight and body measurements, local profile names and optional emails, and photos waiting for review in your device’s browser/app storage. Your saved history is not automatically uploaded to an AnyBP cloud account. A local profile is not a server account; its email is used on reports and backups, not for signing you into a cloud service.

Manual entry and the on-device reader can process readings without uploading a photo. On-device availability depends on the reader being downloaded and supported. Backups and exported reports are files you choose where to save or share; anyone with access to those files may be able to read them.

2. Optional online photo reading

With your explicit permission in the app, a selected monitor photo is sent over HTTPS through Cloudflare to Anthropic to extract the displayed numbers. The request includes the resized image, image dimensions and tester access code, not your saved history, profile email, notes or medications. Any personal details visible in the picture are still part of the picture.

The current application’s Cloudflare handler passes the photo to the reader without intentionally storing or logging its image or result. Hosting/security systems may process technical request details, including IP addresses. Anthropic processes the photo and response under its API service terms. The app’s current policy identifies processing in the United States. The final notice must identify the applicable international-transfer safeguards after the provider agreements are confirmed.

Reading a photo does not itself authorise AnyBP to keep it for training. You must check the extracted numbers against the monitor before saving them.

3. Optional contributions to improve the reader

Save Reading saves your record locally. Save and Send additionally shares that selected sample with AnyBP through Cloudflare for review and training of AnyBP’s own reader. This is your choice each time. Declining sample sharing does not restrict ordinary use or eligibility for early-feature invitations.

The sample contains a re-encoded monitor photo, extracted and corrected systolic/diastolic/pulse numbers, confidence values, app/reader versions and a date. The sample payload excludes profile names, emails, notes, medications and the rest of your history. Photo metadata is stripped, but visible personal details are not automatically removed. Crop those out before sharing. We do not describe samples as guaranteed anonymous.

Samples are stored in Cloudflare R2 and may be copied into AnyBP’s review and training datasets. They are not sent to Anthropic by the training endpoint. Samples submitted offline can wait in a separate local queue and upload when the connection returns. Changing photo-reading consent does not by itself cancel this separate queue. Read the deletion and withdrawal details.

4. Website early-access requests, support and technical data

When you request early access on anybp.com we collect your name, email address, your consent and when you gave it, and whether you ticked the optional contributor-interest box. To check that requests come from real people we also use Cloudflare Turnstile (a bot check that runs in your browser), look up whether your email domain can receive mail, and record the country your connection appears to come from. We do not collect health readings through the website.

We use this to email you a confirmation link, to let the AnyBP team review your request by hand, and, if it is approved, to email you an access code and a link that sets up your name, email and code in the app on your phone. The link keeps those details after the # in the address, so they are not sent to our servers when you open it. The access code itself is stored only as a one-way hash, with no name or email beside it.

Requests are stored in a Cloudflare D1 database and emails are sent with Cloudflare Email Service; Cloudflare acts as our processor. Unconfirmed requests are deleted automatically after 7 days and declined requests 30 days after the decision. Approved requests are kept while your early access continues; ask us to delete yours at any time. The legal basis is your consent, which you can withdraw by emailing us. Beta invitations and training participation are independent choices.

The website includes no advertising trackers or analytics cookies. Hosting may process security and delivery logs. A support request will contain whatever contact details and message you choose to provide; avoid sending access codes, complete medical histories or identifiable photos. Support and privacy requests can be addressed to support@anybp.com.

5. Retention and deletion

Local records

Remain in the device’s app storage until you delete them or storage is cleared. They can be lost with the device. Deleting an exported file is separate from deleting an in-app record.

Online-reader inputs and outputs

Anthropic’s standard API policy says deletion occurs within 30 days, subject to contractual, safety, legal and service-specific exceptions. This is not a zero-retention promise. See Anthropic’s retention policy.

Training samples

The current app policy states up to 12 months for review samples, with possible longer retention in training datasets. A finite training-dataset schedule and deletion process covering downloaded copies must be confirmed before this draft can become the final policy. Removing a source sample does not automatically undo training already performed.

Signup, support and technical logs

Retention schedules and any necessary legal/security exceptions are awaiting confirmation. Website registration remains off.

6. Consent, access and deletion

You can decline online reading and use manual entry. In Settings → Privacy, choose Stop Reading Photos to withdraw permission for future online reading. Choose Save Reading instead of Save and Send to decline a new training contribution. Local records, shared samples, exported backups and website registrations are separate stores; deleting one does not delete all the others.

Delete your data explains the currently available steps and outstanding remote-request route. Contact support@anybp.com to request access, correction, deletion, withdrawal or other applicable rights. The full handling and retention procedures must be finalised before public release. You can also raise concerns with the UK Information Commissioner’s Office.

7. Security and intended audience

The hosted app uses HTTPS for transmission. Local storage is protected by your device/browser access controls; no additional app-level encryption has been verified. Use a screen lock, protect backup files and avoid shared or public devices. No system can promise absolute security. The site is written for adults tracking their own monitor readings.

8. Before this policy is final

Complete the controller’s registered address, lawful bases for each purpose (including explicit consent for health-data uploads where applicable), provider contracts and protections, international transfers, all retention schedules and working withdrawal/deletion procedures. The final policy must match the shipped app and its store privacy declarations. Material changes must be reflected here and in the app’s consent wording before new processing starts.