GlucoAlarm (“GlucoAlarm,” “we,” “us,” or “our”) respects your privacy and recognizes that glucose and health information is highly sensitive.
This Privacy Policy explains how we collect, use, process, store, disclose, protect, and delete information when you use the GlucoAlarm mobile application, website, glucose monitoring features, reports, alerts, artificial intelligence features, caregiver or healthcare professional features, and related services (collectively, the “Services”).
By using GlucoAlarm, you acknowledge the practices described in this Privacy Policy.
The information we collect depends on which GlucoAlarm features you use.
When you create or use a GlucoAlarm account, we may collect information such as:
We use this information to create and maintain your account, authenticate you, provide customer support, communicate with you, and operate the Services.
GlucoAlarm may collect, receive, store, analyze, calculate, and display health-related information, including:
We process this information to provide the health-monitoring, reporting, alert, analysis, and educational features you request.
GlucoAlarm may allow you to connect supported continuous glucose monitoring systems, including Dexcom services.
When you choose to connect a supported glucose service, GlucoAlarm may receive information including:
If the GlucoAlarm implementation requires credentials to maintain a Dexcom Share connection, those credentials are used only for the purpose of establishing and maintaining the connection requested by you.
We use security safeguards designed to protect stored authentication information and restrict access to authorized systems.
GlucoAlarm does not control Dexcom or other third-party glucose services. Their services are subject to their own terms and privacy practices.
You may stop GlucoAlarm from receiving future information from a connected service by disconnecting the integration where that functionality is available or by contacting us.
GlucoAlarm does not accept manual medication, meal, carbohydrate, or insulin entries. It uses the glucose information available through the connected service and the alert contacts and settings you provide.
GlucoAlarm may allow you to identify or authorize another individual, such as:
If you use these features, we may collect information such as the person's:
When you expressly authorize another person to access your glucose or health information, GlucoAlarm may make the information covered by that authorization available to that person.
You are responsible for choosing whom you authorize.
Where available, you may revoke a person's access through your account settings.
When you use GlucoAlarm, we may automatically receive limited technical information necessary to operate, secure, and troubleshoot the Services, including:
We use this information for security, fraud prevention, troubleshooting, application reliability, and operation of the Services.
We may collect limited information about how GlucoAlarm features are used, such as:
We do not use consumer health information for targeted advertising.
We do not sell consumer health information.
GlucoAlarm may use artificial intelligence to help users better organize and understand their glucose information.
AI-powered features may include:
GlucoAlarm may use third-party artificial intelligence providers, including Anthropic's Claude, to process information required to provide these features.
Depending on the feature requested, information sent for AI processing may include:
We seek to limit information sent to AI providers to what is reasonably necessary to provide the requested feature.
We do not intentionally send information to AI providers for targeted advertising.
AI systems can produce inaccurate, incomplete, or inappropriate results.
AI-generated information provided through GlucoAlarm is intended for informational and educational purposes and should not be treated as a medical diagnosis or medical treatment plan.
You should discuss treatment decisions, medication changes, insulin dosing, or significant changes in diabetes management with an appropriately qualified healthcare professional.
If you purchase a GlucoAlarm subscription or other paid service, payment or subscription information may be processed by third-party providers such as:
These providers may process transaction information, purchase status, subscription status, billing identifiers, and related information.
When payment is processed directly by Apple or another payment processor, GlucoAlarm generally does not receive or store your complete payment-card number.
Payment providers operate under their own privacy policies and terms.
GlucoAlarm may use service providers to send:
Providers used for these purposes may include services such as:
These providers receive only the information reasonably necessary to deliver the applicable communication.
We use third-party service providers to operate GlucoAlarm.
Depending on the feature, current providers may include:
Dexcom
Used to obtain glucose information when you connect a supported Dexcom service.
Anthropic / Claude
Used to provide certain AI-assisted summaries, reports, and informational features.
Apple
May provide App Store distribution, subscriptions, in-app purchases, push notifications, authentication, or other iOS services.
Stripe
May be used for payment processing.
RevenueCat
May be used to manage subscription and purchase status.
Twilio
May be used to provide SMS or communication services.
Resend
May be used to provide transactional email.
Cloudflare
May be used for network, security, performance, and infrastructure services.
Google
Certain Google services may be used for functionality such as authentication, infrastructure, communications, or other application services where applicable.
We may change or add service providers as GlucoAlarm evolves.
We expect service providers that process information on our behalf to use it only for authorized purposes and to provide appropriate protection for sensitive information.
We may use personal and health information to:
We do not use consumer health information to determine eligibility for employment, housing, credit, insurance, or similar decisions.
GlucoAlarm does not sell consumer health data.
GlucoAlarm does not use consumer health data for targeted advertising.
We do not provide glucose information to advertising networks for personalized advertising.
If these practices ever materially change, we will update this Privacy Policy and obtain consent where required before implementing the new practice.
We may disclose information in the following circumstances.
At Your Direction
We may disclose information when you instruct us to do so, including when you authorize access by:
Service Providers
We may provide information to vendors that process information on our behalf and that are necessary to operate GlucoAlarm.
Legal Requirements
We may disclose information when reasonably necessary to:
We seek to limit disclosures to the information reasonably necessary for the applicable purpose.
Business Transactions
If GlucoAlarm is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.
We retain personal and health information only for as long as reasonably necessary to:
Health information associated with an active account may generally remain available while the account remains active.
When you request account deletion, we will delete, anonymize, or otherwise dispose of information associated with your account as required by applicable law, subject to limited exceptions.
Certain information may remain temporarily in encrypted backups or archives until those backups are overwritten or deleted through our normal backup rotation.
We may retain limited security, transaction, or legal records when retention is reasonably necessary or legally required.
You may request deletion of your GlucoAlarm account and associated personal information.
Where supported in the application, you may initiate account deletion through:
Settings → Account → Delete Account
You may also contact: privacy@glucoalarm.com
A deletion request generally includes deletion of:
Some limited information may be retained when necessary to satisfy legal, security, fraud-prevention, accounting, or dispute-resolution obligations.
Information stored in backup systems may remain temporarily until the applicable backup is deleted or overwritten.
Deleting your GlucoAlarm account does not necessarily delete information held independently by Dexcom, Apple, Stripe, RevenueCat, Anthropic, or another third-party provider under that provider's own policies.
Depending on where you live, you may have the right to:
To exercise a privacy right, contact: privacy@glucoalarm.com
We may need to verify your identity before processing certain requests.
We will not unlawfully discriminate against you because you exercise an applicable privacy right.
Because GlucoAlarm processes sensitive health information, we use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the system involved, safeguards may include:
No internet-connected system or electronic storage system can guarantee absolute security.
You are responsible for protecting your account password, device access, and other authentication credentials.
Please contact us immediately if you believe your GlucoAlarm account has been compromised.
If GlucoAlarm discovers a security incident involving personal or health information, we will investigate the incident and take appropriate action.
When notification is required by applicable law, we will notify affected individuals, government authorities, or other parties as required.
Depending on the circumstances, federal or state health-data breach notification requirements may apply.
Health information is sensitive regardless of whether a particular privacy law applies.
The Health Insurance Portability and Accountability Act (“HIPAA”) does not apply to every consumer health application or every piece of health information.
Whether HIPAA applies to particular information can depend on factors including GlucoAlarm's relationship with healthcare providers, health plans, or other organizations regulated by HIPAA.
If GlucoAlarm enters into an arrangement where it acts as a business associate of a HIPAA-covered entity, protected health information covered by that arrangement will be handled according to applicable legal and contractual requirements.
Nothing in this Privacy Policy should be interpreted as a representation that every piece of information processed by GlucoAlarm is protected health information under HIPAA.
GlucoAlarm is designed to help users organize, monitor, understand, and review glucose-related information.
Unless a particular feature is expressly identified as legally authorized for a different purpose, information provided through GlucoAlarm is intended for informational and educational purposes.
GlucoAlarm is not an emergency medical service.
Do not rely on GlucoAlarm as your sole method for identifying or responding to:
If you believe you are experiencing a medical emergency, call 911 in the United States or your local emergency number.
AI-generated information, calculated metrics, reports, and recommendations should not be used as the sole basis for:
Consult an appropriately qualified healthcare professional regarding medical decisions.
GlucoAlarm may calculate estimated A1C, GMI, averages, trends, or similar metrics using available glucose information.
These values are estimates.
They are not laboratory test results and may differ from measurements obtained through laboratory testing or interpreted by a healthcare professional.
GlucoAlarm may contain integrations with services operated by third parties.
Your use of a third-party service may be governed by that company's own:
GlucoAlarm does not control the independent privacy practices of third-party services.
You should review the privacy information provided by services you choose to connect to GlucoAlarm.
GlucoAlarm may be used by adults, including parents or legal guardians who use the Services to help monitor a minor's glucose information.
Children under 13 should not independently create or manage a GlucoAlarm account.
Where GlucoAlarm is used for a child, the parent or legal guardian should create or manage the relevant account and authorize the processing and sharing of the child's information.
If we learn that a child under 13 provided personal information directly to GlucoAlarm without appropriate parental or guardian authorization, we will take reasonable steps to delete the information.
Additional protections, consent requirements, and rights may apply when information concerns a minor.
We may update this Privacy Policy as GlucoAlarm changes.
We will update the “Last Updated” date when changes are made.
If we make a material change affecting how sensitive health information is collected, used, or disclosed, we will provide additional notice or obtain consent when required by applicable law.
You should periodically review this Privacy Policy.
Questions, privacy requests, account deletion requests, or concerns regarding this Privacy Policy may be submitted to:
GlucoAlarm
Privacy Email: privacy@glucoalarm.com
Website: www.glucoalarm.com
Washington My Health My Data Act
This section supplements the rest of this Privacy Policy for consumer health data that is subject to the Washington My Health My Data Act.
Consumer Health Data We Collect
Depending on the GlucoAlarm features you use, consumer health data may include:
Why We Collect Consumer Health Data
We collect and use consumer health data to provide features requested by users, including:
We do not collect additional categories of consumer health data or use consumer health data for materially different purposes without providing notice and obtaining consent where required by law.
Sources of Consumer Health Data
Consumer health data may come from:
Consumer Health Data We Share
We may share consumer health data only as reasonably necessary to provide services requested by the consumer, when directed or authorized by the consumer, or as otherwise permitted by applicable law.
Depending on the feature, information may be shared with:
Third Parties and Affiliates
Third-party providers that may process consumer health information for GlucoAlarm include, depending on the features you use:
Payment providers such as Stripe and RevenueCat may process transaction and subscription information. Health information is not intentionally provided to payment processors unless necessary for a specific requested service.
GlucoAlarm does not sell consumer health data.
GlucoAlarm does not use consumer health data for targeted advertising.
Washington Consumer Rights
Subject to applicable law, Washington consumers may have the right to:
Exercising Washington Privacy Rights
Submit a request through the GlucoAlarm application where an appropriate privacy control is available or email: privacy@glucoalarm.com
We may use commercially reasonable methods to authenticate your identity before acting on a request.
You are not required to create a new account solely to exercise applicable consumer health data rights.
Withdrawal of Consent
Where processing depends on your consent, you may withdraw consent to future collection or sharing of consumer health information.
You may do this by:
Withdrawal of consent may cause features requiring that information to stop working.
Deletion of Washington Consumer Health Data
When GlucoAlarm receives and authenticates an applicable Washington consumer health data deletion request, GlucoAlarm will take steps required by applicable law to delete the applicable consumer health data and notify relevant processors, contractors, affiliates, and third parties of the deletion request where required.
Where consumer health data remains in archived or backup systems, deletion may occur through the applicable backup-management process in accordance with applicable law.
Appeals
If GlucoAlarm declines to take action on an applicable Washington consumer health data request, you may appeal the decision by emailing: privacy@glucoalarm.com
Use the subject: Washington Privacy Appeal
We will review the appeal and respond as required by applicable law.
If an appeal is denied, we will provide information about available methods for submitting a complaint to the Washington Attorney General where required.
Sale of Consumer Health Data
GlucoAlarm does not sell consumer health data.
If GlucoAlarm's practices regarding the sale of consumer health data ever change, we will update this policy and obtain legally required authorization before such a practice begins.
Residents of California and certain other U.S. states may have additional privacy rights when applicable privacy laws apply to GlucoAlarm.
Depending on applicable law, these rights may include:
GlucoAlarm does not sell consumer health information and does not use consumer health information for targeted advertising.
Requests may be submitted to: privacy@glucoalarm.com
We believe users should maintain meaningful control over their health information.
Depending on available GlucoAlarm functionality, you may be able to:
Contact privacy@glucoalarm.com if you need assistance exercising a privacy choice.