Privacy Policy
Effective date: 7 October 2026
Introduction
Cardiac Alarm is developed and operated by Damir Skoko, based in Croatia ("I", "me"). I am the data controller under the EU General Data Protection Regulation (GDPR). You can reach me at cardiacalarm@gmail.com.
About Cardiac Alarm
Cardiac Alarm is an app for Apple Watch and iPhone. On the watch it reads your heart rate and sounds a siren when your heart rate crosses a low or high threshold that you set. If you add Guards, their iPhones sound an alarm at the same moment.
Cardiac Alarm is not a medical device and does not diagnose, treat or prevent any condition.
What data is processed
I do not collect any personally identifiable information directly within the app.
However, Apple and the App Store may collect data necessary for account management, payments, and app analytics, in accordance with their own privacy policies.
If you choose to contact me (for example, via email), I may store your email address and any information you provide for the purpose of responding to your inquiry.
How Your Data Is Used
The app works without an account. I never ask for your email address, password or phone number.
Kept only on your Apple Watch
• Heart rate readings [CONFIRM]: used to compare your heart rate with your thresholds and trigger the alarm.
• Your alarm thresholds [CONFIRM]: used to know when the alarm should sound.
Kept on my server
• Your first name, as you type it in: so your Guards see who needs help.
• The names you give your Guards: to show your list of Guards.
• Connection codes, until they are used or expire: to link a Guard to you.
• A notification token for each device: to deliver the alarm to the right iPhone.
• Alarm and test events (when one was sent, delivered and dismissed, and by which Guard): to alert your Guards and show you the result of a test.
• The time a Guard agreed to be your Guard: to record that the Guard accepted the role.
• The last time the app was opened: to show whether a Guard can still be reached.
Kept in my email inbox
• Messages you send me by email: to answer you.
The app does not collect your location, your contacts or advertising identifiers, and it shows no ads.
Health data
The app reads your heart rate through Apple's health and sensor features, and only after you give permission. You can withdraw that permission at any time in your Apple Watch or iPhone settings.
When an alarm goes off, a message saying that a critical heart rate was detected is sent through my server to your Guards. This tells the people you chose something about your health. It is sent only to Guards you added yourself.
Your health data is never sold, never used for advertising or marketing, and never shared with anyone other than your Guards and the service providers listed below.
If you are a Guard
A Guard uses the app for free and without an account. For each Guard my server keeps the name the other person gave you, a notification token for your iPhone, the time you agreed to be a Guard, your responses to alarms and tests, and the last time you opened the app.
You can stop being a Guard at any time in the app. The person you were guarding is told when that happens.
Service providers
Two companies process data on my behalf:
• Apple handles downloads, payments and the delivery of notifications. If you agreed to share analytics with app developers, Apple also gives me anonymous statistics such as the number of downloads, country and device type.
• Google (Firebase) hosts my server and its database and helps deliver the alarm to your Guards.
No other third parties receive your data.
Why I am allowed to process this data
Under the GDPR I rely on:
• Your explicit consent for anything that concerns your health: reading your heart rate and telling your Guards that an alarm went off. You can withdraw consent at any time by removing your Guards, switching off the health permission or deleting the app.
• Our agreement when you use the app: the data needed to make the alarm and the Guards feature work.
• My legitimate interest in keeping the service secure and working, and in answering your messages.
Transfers outside the European Economic Area
Google and Apple may process data on servers outside the EEA, including in the United States. Where that happens, the transfer is covered by safeguards recognised under EU law, such as the European Commission's Standard Contractual Clauses.
How long data is kept
• Connection codes: until they are used or expire.
• Guard connections (names, notification tokens, consent time): until the Guard is removed or leaves, and then deleted within [NUMBER] days.
• Alarm and test events: [NUMBER] days.
• Emails: up to 12 months after your question is resolved.
To delete all data connected to you, [DESCRIBE HOW: for example, a "Delete my data" option in the app], or write to me at the address below.
Security
Data is encrypted when it travels between your devices and my server, and only I can access the server. No system is perfectly secure, but I keep the amount of stored data as small as the app allows.
Your rights
If you are in the European Economic Area, you have the right to:
• see the data I hold about you and receive a copy of it
• have incorrect data corrected
• have your data deleted
• restrict or object to its processing
• withdraw your consent at any time
• complain to a data protection authority. In Croatia this is the Croatian Personal Data Protection Agency (AZOP, azop.hr); you can also contact the authority in your own country.
To use any of these rights, write to me at the address below. I will answer within one month.
Payments and subscriptions
All payments are handled by Apple. I never see or store your card details. Apple tells me only whether a subscription is active. You can manage or cancel your subscription at any time in your Apple account settings.
Changes to this policy
If this policy changes, I will update this page and the effective date at the top. If a change affects how your health data is handled, I will also tell you in the app.
Contact
If you have any questions about this Privacy Policy or your data, please contact:
Email: cardiacalarm@gmail.com