Privacy policy

1. Data controller

The data controller is the publisher of GlucoTracked, identified on the legal notice page. As its registration is under way, full contact details will be published there as soon as they are available. Any request concerning your data can already be sent through the help form in your profile.

No data protection officer (DPO) has been appointed at this stage, as appointment is not mandatory given the size and nature of the activity. Requests are handled directly by the publisher.

2. Data collected

Account data: email address, password (stored as an encrypted hash, never in clear text), account creation date.

Identity and contact data: first name, surname, date of birth, town, phone number if you provide it.

Health data (special category, art. 9 GDPR): type of diabetes, insulin-to-carb ratio, basal insulin dose, sex, height, weight, activity level, the insulin doses you entered, personal notes attached to a meal.

Meal photos and derived data: foods detected, estimated quantities, carbs, estimated glycaemic index, meal timestamp.

Your doctor's details: name and email address, only if you enter them in order to send a report.

Technical data: connection logs and IP address kept by the host for security purposes, monthly analysis counter (quota), reminder notification subscription and time zone if you enable reminders.

3. Purposes and legal bases

• •Providing the service (account, photo analysis, history, report) — performance of the contract, and explicit consent (art. 9.2.a GDPR) for everything touching your health data. That consent is given when the account is created and can be withdrawn at any time by deleting your account.
• •Sending a report to your doctor — on your explicit action, only to the recipient you entered.
• •Meal reminders — consent, switched on and off from your profile.
• •Security, abuse prevention and quota enforcement — legitimate interest.
• •Answering your support requests — performance of the contract.

No processing for advertising, commercial profiling or resale is carried out. No data is passed to an insurer, an employer or a data broker.

4. Photo analysis by artificial intelligence

When you start an analysis, the photo is sent to OpenAI, which runs the vision model and returns an estimate. This transmission is essential to the service. Under the business use of its API, OpenAI undertakes not to use transmitted content to train its models.

To limit calls and keep results stable, the digital fingerprint (hash) of each image and the corresponding analysis result are kept in a technical cache. That cache contains neither the photo nor your identifier: the fingerprint cannot reconstruct the image or re-identify you.

The photo itself is stored in a private space, accessible only to you. It is displayed through temporary links that expire after one hour.

5. Recipients and sub-processors

Your data is accessible only to you, to the publisher for support purposes, and to the technical providers strictly necessary to run the service:

The report sent to your doctor goes to the address you entered, with a copy to your own address. Check that address before sending: a typing error would transmit your health data to a third party.

Transfers outside the European Union (OpenAI, Resend) rely on the European Commission's standard contractual clauses.

6. Retention periods

• •Account, profile, meals and photos: kept for as long as your account exists.
• •Account deletion: immediate erasure of profile, meals, photos and reminder subscriptions.
• •Host's technical logs: a few weeks, for security purposes.
• •Analysis cache (image fingerprint + result, no identifier): kept for service stability.
• •Support emails: kept for as long as needed to handle the request.

7. Security

• •End-to-end HTTPS encryption of all exchanges.
• •Per-user separation at database level: a row is readable only by its owner.
• •Photos stored in a private space, served only through time-limited signed links.
• •Passwords stored as salted hashes, never in clear text.

No system is infallible. In the event of a data breach likely to result in a high risk to your rights, you will be informed under the conditions set out in article 34 GDPR.

8. Cookies and trackers

GlucoTracked uses no advertising cookies, no social network trackers, and sells no browsing data. The following are stored on your device: cookies strictly necessary to keep you signed in, local storage holding your progress through sign-up, and an audience measurement cookie set by PostHog (servers located in the European Union), lasting no more than thirteen months. This measurement is strictly anonymous: no individual profile is built, your IP address is not recorded, no health data, no photograph and no meal content is transmitted, and the data is neither combined with any other processing nor passed to a third party. It therefore falls within the consent exemption for audience measurement strictly necessary to the service. You can switch it off by enabling your browser's “Do Not Track” signal, which the application honours, or by blocking cookies for this site.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.

• •Rectification: your profile data can be edited directly from your profile; each meal can be corrected or deleted from the history.
• •Erasure and withdrawal of consent: the “Delete my account” button in your profile immediately and permanently erases profile, meals and photos.
• •Access and portability: the PDF report gives you back your tracking data; for a full copy, send us a request through the help form.

You may lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr), or with the supervisory authority in your country of residence — in the United Kingdom, the Information Commissioner's Office (ico.org.uk).

10. Minors

The service is not intended for people under 15 without the agreement and supervision of a holder of parental authority, who remains responsible for any decision concerning the child's treatment.

11. Changes

This policy may change along with the service. Any substantial change will be flagged in the app. The date it was last updated appears at the top of this page.