Privacy policy

Version 3 · October 21, 2026. The French version prevails in case of discrepancy.

Data controller

Kairo Labs, registered office address. Contact about your data: privacy@kairolabs.fr.

Data processed

• Health data: glucose readings, fingerstick readings, insulin doses, meals (with optional photos), events, sensors, reminders.
• App settings (thresholds, units, language…).
• Glucose source credentials (LibreLinkUp or Nightscout): kept in the iPhone secure keychain, they never leave the device.
• If you create an account: your email address, an account identifier and your settings (units, thresholds, display, backup reminders).
• If you subscribe: the purchase history sent by Apple, linked to your account identifier.

Health data (readings, doses, meals and their photos, events, sensors, insulin reminders) stays on the phone: it is not sent to our servers.

Why, and on what legal basis

• Running the app (display, record, alert, produce your reports): your explicit consent, given when accepting these terms in the app, as this is health data (GDPR article 9.2.a). You can withdraw it at any time by deleting your data.
• Bringing your settings and subscription back on a new phone: your consent, by creating an account.
• Managing a subscription: performance of the contract.

Where it is stored

Health data: on the phone only, in the app database. To keep it if the phone is lost, make backups (a file you store wherever you like, for example in iCloud Drive).

With an account: your email address and settings are kept by Supabase on a server located in the European Union exact region to confirm. Each account can only access its own data, and connections are encrypted (HTTPS).

Who it is shared with

No one buys or receives your data for commercial purposes. Only the providers needed to run the service access it, on our behalf:

• Supabase: hosting of the account and settings (European Union).
• RevenueCat: subscription tracking. It receives the account identifier and purchase history, no health data. Company based in the United States; transfers covered by the European Commission’s standard contractual clauses.
• Apple: subscription payment and, if you choose it, Sign in with Apple.
• Google: only if you choose to sign in with Google.

The app also contacts the glucose source you chose (Abbott’s LibreLinkUp or your Nightscout site) with your own credentials, to fetch your readings. These services apply their own privacy policies.

Retention

On the phone: until the app is uninstalled or the data deleted. On the server (email address and settings): as long as your account exists. Deleting the account erases them immediately; technical backup copies are erased within period to confirm.

Your rights

You have the rights of access, rectification, erasure, portability, restriction, objection and withdrawal of consent.

• Export: full backup and PDF / CSV export in Settings > Data.
• Deletion: Settings > Account > Delete my account erases the account and settings from the server; uninstalling the app erases the data on the phone.
• Without access to the app: write to privacy@kairolabs.fr from your account’s email address. Reply within one month at most.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr) or your local data protection authority.

Minors

If you are under 15, the consent of a parent or guardian is required to use Glucami and create an account.

This website

This site sets no cookies, uses no analytics and loads no third-party scripts. Its host keeps technical logs (IP address, date, page requested) for security.

Changes

In case of a significant change, the new version is shown to you in the app and must be accepted.