Privacy Policy

1. Introduction

Glu Butler ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Health Data

The App may access the following health-related data with your explicit permission:

• Blood glucose readings from Apple Health
• Meal and food diary entries you create
• Notes and personal health observations
• Photos attached to diary entries

Important: This data is stored locally on your device and synced through your personal iCloud account. We do not have access to this data.

2.2 Device Information

When you generate reports, we may process:

• Device identifier (for authentication purposes only)
• App version and operating system version
• Language preferences

2.3 Report Generation Data

When you request an AI-generated report, your glucose data and diary entries for the selected period are temporarily processed on our servers to generate the report. This data is:

• Encrypted during transmission
• Not stored after report generation
• Not used for any purpose other than generating your requested report

3. How We Use Your Information

We use the information we collect to:

• Generate personalized health reports
• Provide and maintain the App's functionality
• Send reports to your specified email address
• Improve and optimize the App
• Comply with legal obligations

4. Data Storage and Security

4.1 Local Storage

Your health data, diary entries, and personal information are stored locally on your device using secure storage mechanisms provided by iOS.

4.2 iCloud Sync

If you enable iCloud sync, your data is synchronized through Apple's iCloud service, subject to Apple's privacy policy and security measures.

4.3 Server Processing

When generating reports, data is transmitted to our servers using industry-standard TLS encryption. We do not retain your health data after processing is complete.

5. Third-Party Services

The App integrates with the following third-party services:

• Apple Health: To read glucose data from connected CGM devices
• Apple iCloud: For data synchronization across your devices
• Google Gemini AI: To generate personalized health insights (data is processed but not stored)

Each third-party service has its own privacy policy governing the use of your information.

6. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal requirements
• To protect our rights or the safety of users

7. Your Rights

You have the right to:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Data Portability: Export your data in a standard format
• Withdraw Consent: Revoke permissions at any time through your device settings

8. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place to protect your information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Data Retention

We retain your data only for as long as necessary to provide our services:

• Local data: Stored until you delete the App or clear data
• Report generation data: Deleted immediately after processing
• Email records: Retained for 30 days for delivery verification

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@glubutler.com

13. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). Please contact us for more information about exercising these rights.

14. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). You have additional rights including the right to lodge a complaint with a supervisory authority.