CPAP Lens
Privacy Policy
This English version corresponds to the Chinese version 1.5 and adds sections for users in the United States and Australia (Sections 12 and 13). This revision: Section 5 lists the ways data leaves your device (Android system backup, device-to-device transfer, files you create) and notes that uninstalling does not delete an existing backup; Section 8 adds what remains after deletion; Section 9 notes breach-notice deadlines set by law. Concise version; blood pressure and pulse added to the data types (entered by you, or read from Health Connect with your permission); iPhone and iPad covered (Apple Health, iCloud backup, App Store transaction details and crash statistics), and payment now covers subscriptions. 中文版
Summary
- We run no servers. The App does not connect to the internet (the Android version does not request network access) and does not collect, transmit or keep any of the data you have in the App.
- All analysis happens on your phone, and your data is stored in the App's private storage.
- Data leaves the App only when you choose to export or share it.
- We receive a small amount of information in only three cases: purchase details from the app store (Google Play or the Apple App Store) when you buy or subscribe to Pro, whatever you send us when you contact us, and crash and performance statistics from Google Play or Apple (which do not include the data you have in the App).
- We do not sell or share your personal information, and we do not use it for advertising.
1. Scope
This policy explains how CPAP Lens (the "App") handles your data. The App is developed and maintained by MUSEN Limited Company, a company based in Taiwan ("we", "us" or the "Developer"). Please read this policy together with the Terms of Use and Disclaimer.
2. We do not collect the data you have in the App
- The App does not connect to our servers or any third-party server; the Android version does not request network access.
- The App needs no account, shows no ads and has no built-in analytics, tracking or crash reporting tools.
- We cannot access any data you have in the App.
- The exceptions are described in Section 7: purchase details when you buy or subscribe to Pro, information you choose to send us, and crash and performance statistics from Google Play or Apple.
3. Data the App processes on your device
| Data | Source | Purpose |
|---|---|---|
| Machine records (usage time, events, pressure, leak, flow waveforms, settings and similar) | The SD card or folder you choose (including a Google Drive folder; on iPhone and iPad, picked in the Files app) | Nightly data, daily summaries and long-term trends |
| Device model and serial number | Same as above | Telling apart which machine belongs to which user; exported files do not include serial numbers |
| Height | Entered by you, or Health Connect or Apple Health (with your permission) | Calculating body mass index (BMI) with your weight, shown in records, trends and files you choose to export |
| User name or nickname | Entered by you | Telling apart users on the same phone; exported files do not include names |
| Daily log (energy score, alcohol, nasal congestion, sleep location, medication, aids, weight, blood pressure and pulse, notes), mask type, settings-change tracking and supplies | Entered by you | Shown alongside machine data, describing when the two occur together |
| Mask model and start date | Entered by you | Comparing leak against nights with the same mask; shown in trends and included in files you choose to export |
| Travel CPAP nightly values (hours, AHI, pressure, mask seal, leak, model) | Entered by you (copied from that machine's app; this feature can be turned off in Settings) | Shown and counted separately from SD card data; included in files you choose to export when turned on |
| Oximetry records | Files you share or pick from your oximeter's app | Comparing with machine events |
| Weight, height, blood pressure, sleep (including stages), heart rate, oxygen saturation | Health Connect (Android) or Apple Health (HealthKit, iPhone and iPad), with your permission | Weight and blood pressure fill in the daily log and height is used for BMI; sleep, heart rate and oxygen saturation are matched to the night by time and compared with machine events |
The App only reads the SD card or folder you choose and never modifies or deletes any file in it.
4. Health Connect and Apple Health (HealthKit)
- The App reads the data types listed above only after you allow them on the Health Connect permission screen. It never writes, changes or deletes data in Health Connect.
- By default Health Connect only provides data from the 30 days before you first granted access. The App reads older data of these types (for example, a height you set earlier or past weights) only if you also allow "access past data", and uses it for the same purposes listed above.
- Data from Health Connect is used only for features the App shows you. It is not used for advertising, is not sold or transferred to any third party, and is not used to decide credit, insurance or employment eligibility. The App's use of Health Connect data follows the Health Connect Permissions Policy, including its Limited Use requirements.
- You can withdraw access in Health Connect settings at any time. Data already read stays in the App until you delete it there.
- On iPhone and iPad, the App reads the data types listed above through HealthKit only after you allow them on the Apple Health permission screen, and never writes to Apple Health. Data from HealthKit is used only for features the App shows you. It is not used for advertising or data mining, is not sold or provided to any third party, and is handled under Apple's HealthKit rules; the App's data is not included in iCloud backup (see Section 5). You can withdraw access at any time under Health in your iPhone's Settings. Data already read stays in the App until you delete it there.
5. Storage, retention and backup
- Data is stored in the App's private storage on your device, which other apps cannot read.
- Nightly data, daily summaries and daily logs are kept until you delete them. Full-night timelines, event waveforms and raw oximetry data are kept for the latest 90 days by default; you can change this in the App's storage settings.
- Data leaves your device in the following cases. None of them passes through us, and we cannot read any of it:
- Android system backup (to your Google account). If you turn on Android system backup, nightly data, daily summaries, daily logs, user names, device serial numbers and App settings may be backed up by Android to your Google account, under Google's privacy policy and retention rules. Full-night timelines, event waveforms and raw oximetry data are not included. Uninstalling the App does not delete a backup already in your Google account; you can turn off backup, or delete the whole device backup, in Android settings.
- Android device-to-device transfer (no cloud). When you use Android's transfer feature to set up a new phone, the same data is copied directly to the new device, where you can delete it in the App as on the old one.
- iCloud backup and device transfer on iPhone and iPad. The App's data is set to be left out of iCloud backup and is not moved to a new device by iPhone's transfer. To move to a new device, use the App's "Back up data".
- Backup files and exports you create yourself. See the next item and Section 6.
- When you use "Back up data", the backup file is saved where you choose (for example Google Drive or your phone's Downloads folder) and is handled under that service's terms. You can encrypt the backup with a password; an unencrypted backup contains health-related data, so keep it safe.
6. Sharing
- We do not sell, rent or share your personal information.
- When you use Export or Share, the file is handed through the system share menu (the Android share menu or the iOS share sheet) to the app or service you choose (including artificial intelligence services) and is handled under the recipient's terms once it leaves the App. Exported files (Markdown, CSV and the PDF usage record) do not include user names or device serial numbers, but they do contain health-related data. Markdown and CSV files also include the text you typed in the Notes field of your daily log; if your notes contain your name or anything else that identifies you, keep that in mind before you share them.
- When you choose a Google Drive folder, files are downloaded to your device by the Google Drive app under Google's privacy policy. On iPhone and iPad, a location you pick in the Files app, such as iCloud Drive or another cloud service, is handled under that service's privacy policy.
- When you buy or subscribe to Pro, payment is processed by the app store you got the App from (Google Play or the Apple App Store) under Google's or Apple's privacy policy. The App only checks your purchase and subscription status (including renewal, cancellation and expiry) through the store service on your device and does not send any health-related data.
7. Information we may receive
| When | Information | Purpose and retention |
|---|---|---|
| You buy or subscribe to Pro | Transaction details the app store (Google Play or the Apple App Store) provides to developers under its rules, such as order number, item, time of purchase, price, country or region, and the renewal, cancellation and refund status of a subscription. We never receive your card or payment details. | Confirming purchases, handling refunds and support, and keeping accounts and tax records; kept for the period required by tax and accounting law |
| You contact us | Your email address, your message, and any files or screenshots you choose to attach (which may contain health-related data) | Answering your question and fixing problems; attachments are deleted within 14 days after the issue is resolved, and messages are kept for up to 2 years. You can ask us to delete them sooner at any time. By choosing to send attachments that contain health-related data, you consent to our processing them for these purposes. |
| Your Android device is set to share usage and diagnostics with Google | Crash and app-not-responding (ANR) statistics Google Play provides to developers, including the program state at the time of the error, device model, Android version and App version. They do not include the data you have in the App. Google collects and provides this information; the App has no built-in reporting tool. | Finding and fixing bugs; kept for the period set by Google Play Console. You can turn off sharing usage and diagnostics with Google in Android settings. |
| Your iPhone or iPad is set to "Share with App Developers" | Crash reports and performance statistics Apple provides to developers, including the program state at the time of the error, device model, iOS version and App version. They do not include the data you have in the App. Apple collects and provides this information; the App has no built-in reporting tool. | Finding and fixing bugs; kept for the period Apple sets. You can turn off "Share with App Developers" in your iPhone's Settings → Privacy & Security → Analytics & Improvements. |
Please remove anything we do not need before you send it. We will never ask for your name, government ID, medical records or machine serial number.
8. Your choices and rights
- In the App's Settings, you can delete all data for a user.
- When you uninstall the App, the operating system (Android or iOS) deletes all of the App's data on your device.
- The following are outside the App's control and are not removed when you delete a user or uninstall the App, so you need to handle them yourself: (a) the copy Android system backup keeps in your Google account, managed in Android settings; (b) backup files you saved with "Back up data" to Google Drive, a phone folder or elsewhere, which you delete in that place; (c) files you have exported or shared with other apps, services or people, which are handled by the recipient.
- You can withdraw Health Connect or Apple Health, notification and folder access at any time, and turn off each reminder in the App under Settings → Notifications.
- You can remove the App's home-screen widget at any time.
- For information we receive under Section 7, you can ask to access, correct or delete it, or ask us to stop using it, by emailing us. Additional rights for some regions are in Sections 12 and 13.
9. Security
Data in the App stays on your device; we recommend setting a screen lock to reduce the risk if your device is lost. Some data appears on your screen where others may see it: (a) the App's notifications (log reminders, tracking reminders and supply reminders) may appear on your lock screen, and when several users share the phone, the log reminder shows the user's name; you can hide notification content on the lock screen in Android or iOS settings or turn the reminders off in the App; (b) if you add the App's widget to your home screen, it shows the latest night's AHI, usage hours, date and user name. We protect information we receive under Section 7 with reasonable safeguards, and if it is ever compromised, we will notify affected users and the authorities as required by law, and where the law sets a deadline (for example 72 hours under the GDPR), within that deadline.
10. Age
The App is for people aged 18 and over and is not directed at children or minors. We do not knowingly collect personal information from children under 13. A parent or legal guardian may manage data for a minor.
11. Where information is handled
Data in the App stays on your device. Information you send us under Section 7 is received and kept by us in Taiwan, through our email provider. Taiwan's data protection law may differ from the law where you live.
12. Users in the United States
Some states have laws about consumer health data. Our Consumer Health Data Privacy Policy explains what we do and how to make a request. We do not sell personal information or share it for advertising.
13. Users in Australia
You can ask to access or correct personal information we hold about you by emailing us. Information you send us is held in Taiwan (see Section 11). If you are not satisfied with our response to a complaint, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
14. Changes
When this policy changes, we will update this page with a new effective date and notify you in the App of significant changes.
15. Language
This policy is available in Chinese and English. For users in Taiwan or users of the Chinese version, the Chinese version prevails if the two differ; for users elsewhere who use the English version, the English version prevails. In each case, mandatory law where you live applies if it requires otherwise.
16. Contact
Controller: MUSEN Limited Company, Taiwan. For questions about this policy or to exercise your rights, email chyang@musen.tw.