Privacy Policy

Last updated: August 31, 2026

This policy explains what data BSICoS App ("the Application") processes, why it is used, and how users can manage it.

1. Data Processed by the Application

• Physiological signals obtained through the camera: the Application uses the camera to obtain photoplethysmographic signals. It does not record or store video from the camera.
• Signals from external sensors: the Application may obtain and store physiological and motion signals from compatible external sensors, such as Polar devices.
• Voice recordings: certain features and tests allow audio recordings to be made using the microphone.
• Test results: the Application stores the results of tests performed within it.
• Account data: optional sign-in is managed through Firebase Authentication. An account is required to use cloud storage.
• Diagnostic data: Firebase Crashlytics may collect technical crash information, such as device data, Application version, and error details, to help us diagnose and fix problems.

2. Use and Storage of Data

Signals, recordings, and results are used to provide the features requested by the user. They are stored locally on the device. If the user has an account and voluntarily enables cloud storage, the corresponding files may also be stored in Firebase Storage.

Firebase Authentication, Firebase Storage, and Firebase Crashlytics are services provided by Google and process the data needed to provide their respective functions. Data is not used for advertising or commercial purposes.

3. Data Retention

• Local data is retained on the device until the user deletes it, clears the Application's data, or uninstalls the Application.
• Data voluntarily stored in the cloud is retained until the user deletes it or requests its deletion.
• Diagnostic data managed through Firebase Crashlytics is subject to the retention periods established by that service.

4. Data Deletion

• Files for which the Application provides a deletion option can be deleted from within the Application.
• Users may request deletion of data associated with their account by emailing dcajal95@gmail.com. The request must identify the relevant account.
• Data stored only on the device can be deleted from within the Application where that option is available, by clearing the Application's data in the device settings, or by uninstalling it.
• After a deletion request, only data whose retention is legally required may be retained.

5. Security and User Rights

We apply reasonable measures to protect information, although no system can guarantee absolute security. Users may revoke camera, microphone, or Bluetooth permissions in their device settings and lodge a complaint with the relevant data protection authority.

6. Changes to this Policy

We may update this policy to reflect changes to the Application or applicable law. The date of the latest update is shown at the beginning of this document.

7. Contact

For privacy questions or data deletion requests, email dcajal95@gmail.com.