Privacy Policy

Last updated: July 5, 2026

This Privacy Policy explains how ChanoknadM ("we", "us", or "our") handles information in connection with the CPR Recorder Android application (the "App" or "Service").

CPR Recorder is a CPR logging and reference tool. It is designed to help users document CPR-related events and review exported summaries. It is not intended to replace professional judgment, emergency systems, medical advice, or formal training.

You control what information is entered into the App, whether patient-identifying or health-related information is used, and whether any record is exported or shared. We do not provide clinical supervision, legal authorization, or compliance approval for your use.

1. Scope

This Policy applies to information handled through the App, including information stored on your device, information you choose to export or share, and limited information processed by third-party providers used to operate analytics and crash reporting features. It does not override any workplace, institutional, contractual, or legal obligations that apply to your handling of patient or health-related information.

If mandatory law in your jurisdiction grants you specific privacy or consumer rights that conflict with a statement in this Policy, the mandatory law of that jurisdiction will control to the extent of the conflict.

2. Information You Enter and Store on Your Device

The App may store the following information locally on your device:

Record names or identifiers that you enter, including patient names or IDs if you choose to use them.
Session timestamps, duration, age, gender, and similar fields that you enter.
CPR event logs and timeline entries, such as rhythm checks, shocks, medications, airway events, IV/IO events, CPR cycles, and outcomes.
Custom rhythm names, custom medication names, and app settings.

We do not operate our own server to store your full CPR session records. Full record content is primarily stored in the App's local database on your device.

Except as described in this Policy for optional analytics and crash diagnostics, we do not intentionally transmit your full CPR record content to our own servers.

3. Exported and Shared Content

The App can generate image and DOCX exports of a CPR record summary. Those exports may contain information you entered, including names, IDs, age, gender, dates, times, and event summaries.

Exports are created on your device, including app-managed storage and, for some formats or Android versions, device-accessible downloads locations.
If you choose to open or share an export, the selected third-party app, service, device, or recipient will receive that content.
Your export and sharing decisions are user-directed. You are responsible for reviewing content before it leaves your device and for ensuring you have authority to disclose any information it contains.
Once content is shared outside the App, its security, retention, deletion, and further disclosure are controlled by the receiving app, service, device owner, or recipient, not by us.

4. Optional Analytics

The App offers an in-app analytics consent choice. If you opt in, CPR Recorder may send limited analytics events to Google Analytics for Firebase when you save a CPR record and when certain export/share actions occur.

Depending on your use of the App, those analytics events may include:

Derived session metrics such as initial rhythm, timing metrics, counts of CPR cycles, shocks, airway events, IV events, IO events, and outcome.
Optional demographic fields you entered, such as age and gender.
Custom medication names and custom rhythm names that you add during record entry.
Approximate country/region derived from device locale or telephony information, not precise GPS location.
Whether you opened the information view or viewed the event log during a recording session.

We designed analytics events so they do not include your record title, patient name or ID, or the full free-text timeline of the CPR record. You can withdraw analytics consent at any time in the App settings. Turning analytics off does not delete information already processed by Firebase before your change takes effect.

Analytics events for sharing reflect that you opened a share flow or used certain export actions; they do not confirm that a third party actually received, imported, or viewed the shared file.

5. Crash Diagnostics and Technical Logs

In release builds, the App uses Firebase Crashlytics to help us detect crashes, non-fatal errors, and stability issues. Crash reports may include technical and diagnostic information such as stack traces, app version, device metadata, timestamps, operating system details, and developer-defined log messages or error context associated with a failure.

Crash diagnostics are separate from the optional analytics toggle described above. We use this information to maintain, secure, debug, and improve the Service.

Although crash diagnostics are intended for technical support and troubleshooting, you should not assume any device, operating system, or third-party diagnostics pipeline is risk-free.

6. Advertising ID and Device Identifiers

The App declares the Android advertising ID permission because it includes Google/Firebase services or platform components that may require it. CPR Recorder is not an ad-supported app, and we do not use the advertising ID to serve our own ads.

7. How We Use Information

We use information handled through the App to:

Provide core record, summary, export, and sharing features.
Maintain app functionality and user settings.
Measure optional usage analytics if you have opted in.
Detect, investigate, and fix crashes, bugs, abuse, and security issues.
Respond to support requests and troubleshoot app problems.
Comply with legal obligations and enforce our Terms and Conditions.

Depending on where you are located, the legal basis for this handling may include your consent, our legitimate interests in operating and securing the App, performance of our agreement with you, and compliance with legal obligations.

8. When Information Is Shared

Information may be shared in the following situations:

With service providers that help operate the App, such as Firebase Analytics and Firebase Crashlytics.
When you intentionally export or share a record through another app, service, or recipient.
If required by law, regulation, legal process, or a valid governmental request.
In connection with a merger, acquisition, financing, or sale of assets, subject to applicable law.

We do not sell your personal information or health-related record content.

9. Data Retention

Local CPR records remain on your device until you delete them, clear app data, or uninstall the App.
Exported files remain until you delete them or remove the App's app-managed files from your device.
Third-party providers may retain analytics or crash data according to their own policies and retention practices.

10. Your Choices

You can choose whether to opt in to analytics.
You can delete CPR records from within the App.
You can choose what data to enter in the App and whether to use patient names or IDs.
You can choose whether to export or share record summaries.
You can choose to avoid entering direct identifiers and instead use non-identifying references if that better fits your setting.

If you use the App in a regulated environment, you are responsible for determining whether it is appropriate to enter patient-identifying information and whether your use complies with applicable privacy, confidentiality, employment, and recordkeeping rules.

11. International Processing

Third-party providers such as Firebase may process data on infrastructure located in multiple countries. As a result, information sent to those providers may be processed outside your country or region.

Cross-border processing may involve jurisdictions with data protection rules that differ from those where you are located. When required, users are responsible for determining whether additional notices, approvals, contractual measures, or safeguards are needed for their own use of the App and any information they choose to enter, export, or share.

12. Security

We use reasonable measures to reduce risk, but no app, device, network, or transmission method is completely secure. You are responsible for securing your device, controlling access to the App, and reviewing exported content before sharing it.

We cannot guarantee protection against unauthorized access caused by device compromise, malware, weak device security, third-party app behavior, user error, or disclosures you choose to make.

13. Children's Privacy

The App is not directed to children under 13, and we do not knowingly seek to collect personal information from children through the App. If you believe a child has provided us information through the Service, contact us and we will review the issue.

Where local law sets a different age threshold for children's data protection, that local threshold will apply to the extent required by applicable law.

14. Third-Party Policies

Third-party providers may have their own privacy notices and terms. You can review them here:

15. Region-Specific Requests and Rights

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, or information about certain data handled by us or by third-party providers acting on our behalf. Because full CPR record content is primarily stored locally on your device, some requests may be more effectively completed by deleting records, exports, or app data on your own device.

To make a privacy-related request about information we control directly, contact us using the email address below. We may need to request additional information to verify your request, and we may deny or limit a request where permitted by applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when posted with a new "Last updated" date.

17. Contact

If you have questions about this Privacy Policy, contact: cpr.recorder@gmail.com