Privacy policy

Information you provide or choose to import

This can include your account email and name; symptoms, vitals, standing tests, hydration, sodium, electrolytes, exercise, flares, journal notes, medications, supplements, diagnoses, care-team details, appointments, goals, reminders, and emergency-card information. Premium users may optionally authorize POTS IQ to read selected Apple Health categories: heart rate, resting heart rate, heart-rate variability (HRV), blood pressure, oxygen saturation, respiratory rate, and exercise minutes.

How information is used

We use your information to operate POTS IQ, save your entries, calculate the personal summaries and associations you request, reduce repetitive manual logging, generate reports you control, send account recovery messages, and deliver reminders you enable. Apple Health data is used only to provide health-tracking features to you and is not used for advertising, marketing, data-broker services, or unrelated profiling. POTS IQ does not diagnose conditions or establish cause and effect.

Sharing and selling

We do not sell your personal health information. POTS IQ does not automatically send your records to a doctor, clinic, employer, insurer, or advertiser. Information is shared only when you choose to export, print, copy, or share it, or when required to comply with law and protect the service.

Storage and account separation

Account authentication is handled by Amazon Cognito. Consumer health records are sent directly from the POTS IQ app to BP Labs LLC's AWS infrastructure and stored in Amazon DynamoDB, separated by the authenticated user's Cognito identity. For Apple Health sync, raw HealthKit samples remain in Apple Health on the device; POTS IQ reads them locally and sends compact daily summaries, including hourly heart-rate summaries when available, to the same private AWS health-data storage. Floot hosts the application interface. When you enable notifications, Floot also stores the minimum delivery metadata needed to send them, such as the device push subscription and a generic reminder schedule. Network traffic is protected in transit.

Processing in the United States

BP Labs LLC currently operates POTS IQ's AWS infrastructure in the United States. If you use POTS IQ from Canada or another country, your account information and the health information you choose to enter may therefore be processed or stored in the United States. Information processed there may be subject to U.S. law and lawful access by courts, law-enforcement agencies, or national-security authorities. BP Labs LLC remains responsible for personal information under its control and uses contractual, administrative, and technical safeguards with service providers.

Advertising, profiling, and AI training

POTS IQ does not sell personal data, use consumer health data for targeted advertising, make automated decisions that produce legal or similarly significant effects, or use personal data or consumer health data to train large language models.

Your choices

• Export a full JSON backup or CSV history from Settings.
• Connect or pause POTS IQ Apple Health importing from Settings → Integrations; Apple Health permissions themselves are managed in the Apple Health app or iOS Settings.
• Enable or disable device notifications and create or remove reminder plans at any time.
• Withdraw health-data consent or delete your account from Settings.
• Choose exactly what appears in a clinician report or quick health card.

Retention

Account-linked information is retained while your account is active so the app can provide history and reports. Deleting your account removes the account and its linked data from the active service, subject to limited operational backups and legal obligations.

Privacy requests and complaints

You may submit an access, correction, deletion, consent-withdrawal, or other privacy request from Settings → Data or by emailing accounts@bplabsllc.com. BP Labs LLC's privacy lead can be reached at the same address. We respond within the deadlines required by applicable law; for access requests governed by Canada's PIPEDA, the ordinary response deadline is 30 days, subject to permitted extensions. If BP Labs LLC declines to act on a request, you may use the appeal or complaint process available in your jurisdiction. Canadian users may also raise an unresolved privacy concern with the Office of the Privacy Commissioner of Canada.

Children and changes

POTS IQ is not directed to children under 13. We may update this policy as the product changes and will post the updated effective date here.

Contact

Questions or privacy requests can be sent to accounts@bplabsllc.com.