HR Pill Privacy Policy
Last updated: September 29, 2026
HR Pill displays live heart-rate readings from a compatible Bluetooth sensor. It does not require an account, contain advertising, store a heart-rate history, or send heart-rate readings outside the device.
Data processed on the device
HR Pill processes live heart-rate readings solely to render the floating pill, heart-rate zones, animations and the in-app screen. The two-minute chart is held only in memory and is cleared when the connection session ends. Individual BPM readings are not written to persistent storage.
The app stores the following locally so that its settings and connection can be restored:
- the name and Bluetooth address of the last selected sensor;
- whether automatic reconnection and the floating pill are enabled;
- HRmax, pill style, size and screen position;
- the user's separate optional analytics and crash-reporting choices;
- whether the one-time activation event has already been recorded.
Optional analytics and crash reporting
Firebase Analytics and Firebase Crashlytics are disabled by default. During onboarding, the user may explicitly enable each service separately. Declining either does not restrict any app feature, and each choice can be changed at any time under Privacy & diagnostics.
When enabled, Firebase Analytics receives coarse product and reliability events such as feature use, connection state, sensor brand, signal-strength range, and bucketed durations and event counts. This includes a one-time activation event after the first valid reading is shown in the overlay or Focus Mode. Its custom parameters are limited to the device form factor and whether the session started manually or automatically. Analytics does not receive BPM, HRmax values, sensor names or Bluetooth addresses.
When enabled, Firebase Crashlytics receives crash stack traces and relevant app, Android and device information required to diagnose crashes. When either optional Firebase service is enabled, Google Firebase may also process installation identifiers, session and device metadata, and an IP address from which an approximate location may be derived. Advertising ID collection and ad personalisation are disabled.
Google processes this optional data as the Firebase service provider. For details, see Firebase privacy and security.
Data sharing
HR Pill does not sell user data and does not share it with advertisers or data brokers. Data leaves the device only in these cases:
- Service provider (Google Firebase): only when the user has enabled analytics or crash reporting, the data described above is sent to Google, which processes it on the developer's behalf.
- Legal obligations: data held by the developer or its service provider may be disclosed if required by law.
Permissions
- Nearby devices (Bluetooth): finds and connects to a compatible heart-rate sensor and receives live readings. HR Pill supports Android 12 and newer and does not request location permission for Bluetooth scanning.
- Display over other apps: displays the floating heart-rate pill above other applications.
- Notifications: displays the foreground-service notification that keeps the active Bluetooth connection visible and controllable.
- Battery settings: optionally lets the user open Android's battery-optimization settings. HR Pill cannot change this setting itself.
Retention and deletion
The app has no user account. Clearing the app's data or uninstalling it removes its locally stored settings. The in-memory heart-rate chart is not retained after the app process ends. Data already sent after optional Firebase consent is retained according to the Firebase retention configuration. A deletion enquiry may be submitted through the contact below.
Health disclaimer
HR Pill is not a medical device and does not diagnose, treat, cure or prevent any medical condition. Consult a healthcare professional for medical advice, diagnosis or treatment.
Contact
Privacy questions and deletion enquiries can be sent by email to hrpill.uniformly236@passmail.net.