Privacy,
made clear.

1. Who we are

GlycoPath is a diabetes self-management companion that helps people understand food, activity and diabetes-day patterns. In this policy, “GlycoPath”, “we”, “us” and “our” refer to the organisation operating the GlycoPath app and website.

For privacy questions or requests, email hello@glycopath.app.

2. What this policy covers

This policy explains how we collect, use, store and share personal information when you use the GlycoPath website, mobile applications and related support services. It does not cover third-party services that have their own privacy notices, including Apple, Google, your device manufacturer and your chosen diabetes-device provider.

3. Information we may collect

Depending on the features you choose to use, we may collect:

• Account information, such as your name, email address, sign-in method and account identifiers.
• Health-profile information, such as diabetes type, age, height, weight, treatment and preferences you choose to provide.
• Food and diary information, such as food or drink images, descriptions, portions, scan results, saved meals and food-impact markers.
• Activity information, such as step counts when you choose to connect Apple Health or Android Health Connect.
• Coaching information, including questions and messages you send to the diabetes coach.
• Technical information, such as device, operating-system, app version, IP address, crash reports and security logs.

4. Health information

Health-profile, food, activity and glucose-related information can be sensitive health data. We use it only to provide and personalise the GlycoPath features you request, such as presenting food markers, showing trends, producing reports and providing diabetes-focused educational support. We do not use it to make decisions with legal or similarly significant effects about you, and GlycoPath is not a diagnostic, treatment or emergency-care service.

5. How we use information

• create and maintain your account;
• provide food scans, saved history, movement context, trends, reports and diabetes-focused coaching;
• keep the service secure, prevent misuse and resolve technical problems;
• respond to support requests and exercise your privacy choices;
• improve and develop GlycoPath using appropriately safeguarded information; and
• meet legal obligations and enforce our terms.

6. Our legal bases

Where UK or EU data-protection law applies, we process ordinary personal data to perform our contract with you, pursue legitimate interests such as service security and improvement, comply with legal obligations, or with your consent where required. Where we process health data, we use an appropriate additional condition, which may include your explicit consent. You can withdraw optional permissions, such as Apple Health or Health Connect access, in your device settings at any time.

7. When we share information

We do not sell personal information. We may share limited information with carefully selected providers that help us operate GlycoPath, such as cloud hosting, data storage, authentication, communications, customer support and AI-processing providers. They may only process information on our instructions and under appropriate contractual safeguards. We may also disclose information where required by law, to protect rights and safety, or as part of a corporate transaction.

8. International transfers

Our providers may process information in countries outside the UK or European Economic Area. Where that happens, we use appropriate safeguards required by applicable data-protection law, such as adequacy regulations or approved contractual protections.

9. Retention

We keep personal information for as long as your account is active and as needed to provide GlycoPath. We then delete or anonymise it within a reasonable period unless a longer period is required for legal, security, fraud-prevention or dispute-resolution purposes. To request deletion of your account and associated personal data, email delete@glycopath.me.

10. Your choices and rights

Subject to applicable law, you can ask to access, correct, delete, restrict or receive a copy of your personal information, object to certain processing, or withdraw consent. You may also complain to the UK Information Commissioner’s Office. For account and data-deletion requests, email delete@glycopath.me. For other privacy requests, email hello@glycopath.app.

You can disconnect Apple Health or Health Connect in your device settings. Disconnecting prevents new activity data from being read; it does not automatically delete information already saved in GlycoPath.

11. Security

We use technical and organisational measures designed to protect information from unauthorised access, loss, misuse and disclosure. No online service can guarantee absolute security, so please use a strong, unique password and protect access to your device.

12. Children

GlycoPath is not intended for children under 18. If you believe a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, delete it.

13. Changes to this policy

We may update this policy as GlycoPath evolves or where the law changes. We will post the current version here and change the “last updated” date. If changes are material, we will provide additional notice where appropriate.