Privacy Policy

DiabetesLife (“we”, “us”, “our”) provides a mobile app and a doctor portal that help people manage diabetes. This policy explains what data we collect, why we collect it, and the choices you have. Your health information is sensitive, and we treat it that way.

Who we are

DiabetesLife operates the DiabetesLife mobile app and the doctor portal at doctor.diabeteslifeapp.com. For any privacy question, contact us at support@diabeteslifeapp.com.

Information we collect

• Account information — your email address, and for doctors, professional profile details you enter during onboarding.
• Health data you log — glucose readings, meals, weight and vitals, medications and insulin, activity and steps, and low blood sugar episodes.
• Lab reports — images or PDFs you upload for scanning, and the values extracted from them (for example HbA1c, lipids, kidney and thyroid results).
• Device and usage data — basic technical information needed to run the app reliably, diagnose crashes and prevent abuse.

How we use your information

• To provide the core features: logging, trends, analytics and reminders.
• To scan lab reports and generate meal plans and insights. Lab-report text and relevant health values may be processed by our AI provider (Google Gemini) solely to return results to you; this data is not used to train third-party models.
• To share your data with a doctor only when you link your account to that doctor. You control this link and can remove it.
• To process payments for Pro and Clinic plans through our payment providers — Google Play Billing for in-app purchases on Android, and Razorpay on the web. We never receive or store your card details.
• To keep the service secure and comply with legal obligations.

Data sharing

We do not sell your personal data. We share it only with service providers who help us run DiabetesLife, and only as needed:

• Supabase — secure database and authentication hosting.
• Google Gemini — AI processing of lab reports and diet plans.
• Google Play Billing & Razorpay — payment processing for paid plans (Google Play for Android in-app purchases, Razorpay on the web).
• Resend — sending transactional email such as sign-in codes.
• Your linked doctor, when you choose to connect your account.

Cookies

Our website uses only strictly necessary cookies — for example, to keep you signed in and to keep the service secure. We do not use advertising, analytics or tracking cookies, and we do not track you across other websites. Because these cookies are essential to provide the service you request, we do not display a cookie consent banner. If we introduce any non-essential cookies in future, we will ask for your consent first and update this policy.

Data storage and security

Your data is stored on secured cloud infrastructure with access controls, row-level security and encryption in transit. Access to your health records is restricted to your own account and any doctor you explicitly link.

Your rights and choices

• You can view and edit the data you log at any time in the app.
• You can unlink a doctor to stop sharing future data with them.
• You can permanently delete your account and associated data from within the app (Settings) or the doctor portal, or by emailing support@diabeteslifeapp.com. See how to delete your account for details.
• You can export your data from the app.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your personal and health data from our systems, except where we are required to retain limited records (for example payment records) to meet legal obligations.

Children

DiabetesLife is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you in the app.

Contact

Questions about your privacy? Email support@diabeteslifeapp.com.