Privacy Policy
Last updated: October 19, 2026
This policy explains how fab products handles personal information and health data in the iOS app Sanso (酸素足りてる?, “the app”).
1. Account
You sign in with Google or Apple. Sign-in creates an account in Firebase Authentication. The Firestore profile stores:
- User ID
- Updated time
- App version
- Email, only if the sign-in provider gives one. If you choose Apple’s private email, that relay address is what we store
- Display name, only if one is provided
- Sign-in provider (Google or Apple)
2. What we read from Apple Health
With your permission, the app reads:
- Blood oxygen
- Sleep
- Respiratory rate
Minute-by-minute blood oxygen readings, sleep times, and respiratory rate stay on the device. We do not upload them. Those records remain in Apple Health. The PDF you can show at a clinic is also created on the device. Blood oxygen readings are not sent to an outside service for processing.
3. The daily summary saved to your account
For each day that has readings, Firestore stores one summary. The fields are:
- Date
- Status. The app shows Normal, Check, or Alert. The stored values are normal, caution, and warning
- That day’s minimum value (0–100)
- Count of readings under 90%
- Count of readings from 90% through 94%
- Sleep hours (0–48)
- Updated time
Normal means 95% or above. Check means 90–94%. Alert means the day included time under 90%.
4. Feedback
Feedback is stored separately from your account. The document does not include your account’s user ID or the email from sign-in. You need to be signed in to send it. Deleting your account does not delete feedback documents.
The stored fields are:
- Text
- Kind (free text, a watch-model answer, or a reaction on a day’s record)
- Which screen it was sent from
- The strongest status the app has shown so far (normal, caution, or warning)
- An identifier the app keeps in the device keychain
- Days since install
- App version
- Build number
- OS version
- Device model identifier
- Language and region
- Time sent
5. Usage analytics
The app uses Firebase Analytics (Google) to measure how the app is used. It does not track you for advertising.
While you are signed in, the analytics user ID is your account’s user ID. Before sign-in, it is the identifier stored in the device keychain. Feedback stores that same identifier.
The only blood-oxygen information in analytics is the status category (normal, caution, or warning). We do not send the minimum value, minute-by-minute readings, your name, or your email.
Events include:
- App opens, screens, and onboarding steps
- Sign-in completed, cancelled, or failed (provider, and whether the account is new)
- Sign-out and account deletion
- Health and notification permission results
- Opening a notification, and sending one (status category, how many days had readings, and whether any day went under 90%)
- Viewing a report, and how many days ago that day was (not the calendar date)
- Opening or sending feedback (kind and screen, not the text)
- Showing the paid plan and completing a purchase (Sandbox or Production)
- Exporting a PDF (number of days, and whether the paid plan is active)
Firebase Analytics also receives the usual device details it collects with those events: operating system, app version, language, region, and app instance.
6. Purchases
Subscriptions are processed by Apple’s App Store. We do not receive card numbers or billing details. The app confirms a purchase on the device with StoreKit. We do not store receipts on our server.
Deleting your account does not cancel your subscription. You manage and cancel it in Apple’s subscription screen.
7. Deleting your account
When you delete your account in the app, we delete the Firebase account, the profile, and the daily summaries that were saved. Readings that remain in Apple Health are not deleted.
8. We do not sell data
We do not sell health data, account information, or feedback for advertising or marketing.
9. Health permission
You can change the app’s Health access in iOS Settings, under Privacy & Security, then Health. Deleting the app removes its on-device cache. Data in Apple Health stays.
10. Children
The app is not directed at children under 13. We do not knowingly collect personal information from children under 13.
11. Changes
We may update this policy. We will describe important changes in the app or in the App Store update notes.
12. Contact
fab products
Tomohito Fujita
Email: cs_sanso@fabproducts.io