Privacy Policy
1. Introduction
This Privacy Policy describes how GlucoWorks LLC ("GlucoWorks," "we," "us," "our"), a North Carolina limited liability company, collects, uses, stores, and protects information when you use the Superglu mobile application ("Superglu," "the App").
Superglu handles sensitive health information, including data related to diabetes management. We are committed to protecting this information and being transparent about how it is used.
2. Information We Collect
Information you provide directly:
- Name and email address
- Date of birth
- Weight (optional)
- Insulin-to-carb ratio, correction factor, and target glucose range (optional, for injection users)
- Meal photos
- Notes you add to meal, alcohol, medication, or other logs
- Grocery store preferences and zip code
- Medications you take, dosages, and schedules
- Insulin dosing records, including units injected and how you characterize the split between meal and correction insulin
- Alcohol consumption records
- Ketone meter readings
- GPS location captured at the time you log a meal or drink
Information collected automatically or via connected services:
- Continuous glucose monitor (CGM) data, via direct connection to Dexcom, Libre, or via Apple Health
- Exercise and workout data, via Apple Health
- Heart rate, sleep, and other Apple Health metrics used to characterize daily activity patterns
- Weather data associated with your logged location
- Device information and app usage data
3. How We Use Your Information
We use your information to:
- Provide the core functionality of the App, including AI-generated carbohydrate estimates, historical pattern analysis, and CGM outcome scoring
- Generate personalized insights based on your own historical data
- Improve the accuracy of AI-generated estimates through anonymous, aggregated food data (see Section 5)
- Communicate with you about your account or the App
- Maintain the security and integrity of the App
We do not use your health information for advertising, and we do not sell your personal information.
4. AI Processing of Your Data
Superglu uses third-party AI models (including models provided by Anthropic) to analyze meal photographs and generate estimates and pattern analysis. Photographs and associated data you submit for analysis may be processed by these third-party AI providers in accordance with their own data handling terms.
5. Anonymous Aggregate Data
To improve the accuracy of food carbohydrate estimates for all users, Superglu may contribute anonymized, aggregated information about confirmed meal outcomes (such as a restaurant menu item and its confirmed carbohydrate content) to a shared reference dataset. This data is stripped of any information that identifies you individually — no user ID, name, or account information is included. This aggregate data cannot be traced back to any individual user.
6. Third-Party Services
Superglu integrates with third-party services to provide its functionality, including:
- Apple Health — for glucose, workout, and other health metrics, governed by Apple's Health data privacy framework and your permissions granted through iOS
We do not control these third parties' data practices. We encourage you to review their privacy policies directly.
7. How We Store and Protect Your Information
Your information is stored using Supabase, with data encrypted in transit and at rest. Meal photographs are stored in a private storage bucket accessible only through authenticated requests. We do not store your CGM credentials — authentication with Dexcom and other services uses OAuth, meaning your login credentials for those services are never transmitted to or stored by Superglu.
8. Data Retention
We retain your information for as long as your account is active. If you delete your account, we will delete your personal information within [X days], except where retention is required by law or for legitimate business purposes such as fraud prevention.
9. Your Rights and Choices
Depending on your state of residence, you may have rights to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Opt out of certain data uses
- Withdraw consent for connected services (e.g. disconnecting Dexcom or Apple Health at any time)
To exercise these rights, contact us at info@glucoworks.com.
10. Children's Privacy
Superglu is not intended for use by individuals under 18. We do not knowingly collect information from children.
11. State-Specific Privacy Rights
California residents: You have rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA, including the right to know, delete, and correct your personal information, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information.
Washington residents: Under the Washington My Health My Data Act, you have specific rights regarding consumer health data, including the right to withdraw consent for its collection and to request deletion.
Other states: Residents of other states with comprehensive privacy laws (including but not limited to Virginia, Colorado, Connecticut, and others) may have additional rights.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App, and continued use after such changes constitutes acceptance of the updated policy.
13. Contact Us
Questions about this Privacy Policy or your personal information can be directed to:
GlucoWorks LLC
info@glucoworks.com