Your health data deserves exceptional care.

1. Information we collect

Account information

We collect an email address and authentication information when you create or access an account. If you use Sign in with Apple or Google, we receive an account identifier and, when available, your email address. Passwords are stored only as securely hashed values.

Information you enter

This can include glucose readings, meals, workouts, weight, medications, medication logs, notes, timestamps, and questions or notes associated with generated summaries. It can also include optional profile details you provide, such as a preferred name, birth year, and diabetes status.

Technical information

Our service may process basic connection and diagnostic information needed to operate and secure it, such as request timestamps, network address, app version, and error details.

Usage analytics and approximate location

Our iPhone, Mac, and web apps send product usage events to Mixpanel, such as screens viewed, buttons tapped, counts, and error codes. These events are keyed by a random identifier created for each app install or browser, not by your account or email address, and never include health values or text you enter.

For events from the iPhone and Mac apps, Mixpanel derives an approximate location (city, region, and country) from your network address, which helps us understand where our users are. The apps do not request access to your device location. Events from the web app and from our servers carry no location derived from your network address.

Our servers also send subscription events (purchased, renewed, cancelled, and expired) to Mixpanel, keyed by your account identifier. These events do not include health data.

Crash reports

The iPhone and Mac apps send crash reports to Sentry, keyed by the same random per-install identifier. Crash reports do not include your name, email address, account identifier, or health values.

We do not use third-party advertising trackers.

2. Apple Health and HealthKit

If enabled, DiabetesLife requests permission to read only these categories, each of which you can allow or deny separately:

• Blood glucose: value and timestamp.
• Insulin delivery: units and timestamp, stored as a medication log.
• Dietary energy: timestamp and available meal label; calorie values are not retained by the current app.
• Workouts: activity type, start and end time, and available effort score.
• Body mass: weight value and timestamp.

The first import requests at most the previous 90 days. Later imports retrieve new samples. Imported entries are deduplicated, marked as originating from Apple Health, and uploaded to your DiabetesLife account for device sync, trends, and summaries. Apple Health sample identifiers are stored with imported entries to prevent duplicates but are not used as DiabetesLife record identifiers; import checkpoints remain on your device.

3. How we use information

We use information to authenticate your account; store, sync, display, and deduplicate records; show trends; create summaries you request; understand how the apps are used and roughly where our users are; respond to support; maintain security; diagnose faults; and comply with law. We do not make automated medical, insurance, employment, or credit decisions.

4. When information is shared

We do not sell personal or health information. We share it only as needed with service providers acting for us, when you direct us, or when legally required.

• Hosting and database providers process account and app data to operate the service.
• Apple and Google process sign-in information when you choose them.
• Anthropic processes entries from the selected period, your questions, and, if you have provided them, your approximate age (derived from your birth year) and diabetes status when you request an AI summary or follow-up. Before the first one, we ask for your permission, which applies to your account on every device. Nothing is sent to Anthropic without it.
• Sentry processes crash reports from the iPhone and Mac apps, as described in Section 1.
• Mixpanel processes product usage events, approximate location, and subscription events, as described in Section 1.
• Support and email providers process messages you send us.

We require providers with access to user data to protect it consistently with this policy. We do not disclose HealthKit-derived information unless necessary to provide a health or fitness service you requested or with your express permission.

5. Storage, security, and retention

Account records are stored in our service database and cached on your devices for offline use. We use reasonable safeguards, but no system can guarantee absolute security. We do not store personal health information in iCloud.

We retain account and health information while your account is active. Operational logs are kept only as reasonably needed for security, troubleshooting, and legal obligations. Backup copies may persist for a limited period after deletion before being overwritten, unless law requires longer retention.

6. Your choices and controls

• Apple Health: change or revoke permissions in the Health app or iOS Settings. Revocation stops future access but does not erase already imported data.
• Optional access: use manual features without enabling Apple Health.
• Entries: edit or delete individual glucose readings, meals, workouts, and medication doses you entered in the app. Entries imported from Apple Health can be deleted but not edited. Deleting an imported entry does not change Apple Health, which keeps its copy, and the entry is not imported again. Weight entries cannot currently be deleted individually in the app; email support@mylcky.com to request deletion of a specific weight entry.
• AI summaries: withdraw your permission to share data with Anthropic at any time in the app, under Profile → Data & Privacy (“Share data with Anthropic”). Withdrawing stops AI summaries and follow-up questions from sending data to Anthropic. Summaries you already have are kept until you delete your account.
• Medications: delete Medications you have added in Profile.
• Account deletion: in Profile, choose Delete Account to delete your account and associated records from the active database.
• Privacy requests: email support@mylcky.com; we may verify your identity.

7. Children, international use, and changes

DiabetesLife is not directed to children under 13, and we do not knowingly collect their information. Data may be processed in the United States or where our providers operate, subject to safeguards required by law.

We may update this policy as the product or law changes. We will post revisions here, update the effective date, and provide added notice when appropriate.

8. Contact

Email support@mylcky.com for support, privacy, access, or deletion requests.