Privacy Policy — GlucoSnap

Health and sensitive data notice GlucoSnap processes health data (diabetes type, target glucose, weight, height, insulin ratio) and photos of your meals. To analyze each dish, the image is sent to a third-party artificial intelligence provider (Google Gemini). Please read Sections 2 and 4 carefully. GlucoSnap provides educational estimates only, is not a medical device, and does not replace your healthcare professional.

1. Who we are

This app, GlucoSnap, is developed and operated by [TODO: legal company name] ("we", "us", "our"), which is responsible for the processing of the personal data described in this policy.

If you have any questions about this policy or about how we handle your data, you can reach us at the address provided in Section 10 (Contact).

2. What data we collect and why

GlucoSnap does collect data. We collect only what is necessary for the app to work: estimating carbohydrates, glycemic load, and advice tailored to your profile. Each type of data is detailed below.

Data	What it includes	Purpose
Health data (profile)	Diabetes type, age, weight, height, target glucose, insulin-to-carbohydrate ratio, and dietary preferences (e.g., low-sodium, renal, gluten-free, lactose-free, vegetarian, vegan, halal, kosher).	Personalize the analysis thresholds and results according to your physiology.
Meal photos	The photo of the dish you take with the camera or choose from your gallery, and the analysis results (carbohydrates, glycemic load, verdict).	Analyze the meal and generate the verdict. The image is sent to Google Gemini (see Section 4) and may be stored in Supabase Storage.
User identifier	A Supabase user ID or, by default, an anonymous ID generated locally on your device.	Associate your profile, scans, and history with your account or session.
Email address (optional)	Your email, only if you choose to create an account with email. By default the app runs with an anonymous user and does not ask for an email.	Create and manage your account and allow access to your data from other devices.
Subscription status	The status of your subscription (active/inactive) managed by RevenueCat. Payment is processed by Apple; we do not receive your card details.	Enable paid access to the app's features.

We do not collect your location, your contacts, or our own financial data (cards or bank accounts). We do not perform advertising tracking: the app does not use the IDFA or any third-party advertising SDK, and we do not sell your health data or any other personal data.

3. Legal basis and purpose of processing

We process your data on the following legal bases and for the following purposes:

Performance of the service you request. Your health profile and photos are processed because they are essential to deliver the analysis and advice you ask for when using the app.
Explicit consent for health data. Health data is a special category of personal data. By entering your profile and scanning meals, you give your explicit consent for us to process that data for the purpose described. You may withdraw it at any time by deleting your data or your account (see Section 6).
Account and subscription management. The user identifier, the email (if you provide one), and the subscription status are processed to maintain your account and provide access to paid features.

4. Third parties and subprocessors

To provide the service, we rely on providers that act as subprocessors. We share with them only the data necessary for their functions. We encourage you to review their privacy policies:

Google Gemini (Google LLC) — AI-based analysis of the photos. The photo of your dish leaves your device and is sent to the Google API to generate the estimate of carbohydrates and glycemic load.
Policy: https://policies.google.com/privacy
Supabase — backend, authentication, and storage. It hosts your profile, your user identifier, your scan history, and, where applicable, your photos in Supabase Storage.
Policy: https://supabase.com/privacy
RevenueCat, Inc. — subscription management (purchase status, restoration).
Policy: https://www.revenuecat.com/privacy
Apple — processes your subscription payments through the App Store. We do not receive your payment method details.
Policy: https://www.apple.com/legal/privacy/

Some of these providers may process data on servers located outside your country. In those cases, the safeguards set out in their respective policies for international transfers apply.

5. Data retention

We retain your health profile, your scan history, and, where applicable, your photos for as long as you maintain your account or use the app. If you delete a specific data item, a photo, or your entire account from within the app, we remove that information from our active systems.

Photos sent to Google Gemini for analysis are handled in accordance with the Google policies referenced in Section 4. Subscription status is retained for as long as necessary to manage your purchase.

6. Your rights (access and deletion) and how to exercise them

You may exercise your rights of access, rectification, erasure, objection, restriction, and portability of your data at any time:

From within the app: you can view and edit your health profile, review your history, and delete your data and your account directly in the app settings.
By email: write to us at [TODO: support email] and we will handle your request. If you created an account with an email, we may verify your identity before acting.

Deleting your account removes your health profile, your scan history, and the associated photos from our active systems. If you believe we have not handled your request properly, you may lodge a complaint with the data protection authority in your country.

7. Minors

GlucoSnap is rated for users aged 17 and over and is not directed at minors. We do not knowingly collect data from minors without the verifiable consent of a parent or legal guardian. If you believe a minor has provided us with data without such consent, please contact us at the address in Section 10 so we can delete it.

8. Security

Your health profile data and communications with our servers and providers are transmitted encrypted using standard HTTPS/TLS. Our providers (Supabase, Google, RevenueCat) apply their own technical and organizational security measures.

No system is completely foolproof, but we work to protect your data against unauthorized access, alteration, or disclosure.

9. Changes to this policy

We may update this policy to reflect changes in the app or in applicable regulations. When we do, we will change the "Last updated" date at the top. If we make significant changes to how we process your health data, we will notify you by reasonable means within the app or by email.

10. Contact

If you have questions about this policy or wish to exercise your rights, write to us at:

Support email: [TODO: support email]
Data controller: [TODO: legal company name]

Important medical notice GlucoSnap provides educational estimates and is not a medical device. It does not diagnose, treat, or replace your healthcare professional, nor does it replace blood glucose measurement or continuous glucose monitoring. Carbohydrate amounts and any suggested insulin dose are for guidance only: always confirm them with your doctor or healthcare team before acting.