Privacy Policy

Last updated: October 2, 2026  ·  Effective date: October 2, 2026
See also: Terms of Service  ·  Consumer Health Data Privacy Policy

This Privacy Policy explains how GlucoWorks LLC ("GlucoWorks," "we," "us," or "our"), a North Carolina limited liability company, collects, uses, discloses, retains, and protects information when you use the SuperGlu mobile application (the "App") and our websites at glucoworks.com and superglu.app (together, the "Services").

SuperGlu handles health information, including glucose readings, insulin records, medications, meal photos, and location. Please read this policy carefully.

If you live in Washington, Nevada, or Connecticut, our Consumer Health Data Privacy Policy also applies to you and describes additional rights. It forms part of this Privacy Policy.

1. Summary

  • We do not sell your personal information or your health data. We do not use it for advertising, and we do not track you across other companies’ apps or websites.
  • We use your data to run SuperGlu for you: estimating the nutrition content of meals you photograph, scoring how your glucose responded afterward, and showing you patterns in your own history.
  • Some of your data is processed by third-party AI providers (OpenAI and Anthropic) to estimate nutrition and power certain features. We ask for your explicit permission before this happens, and you can withdraw it at any time.
  • We do not use your data to train AI models, and our agreements with our AI providers do not permit them to train on it.
  • You can delete your account and data at any time from inside the App, and you can disconnect any connected data source at any time.
  • SuperGlu is not a medical device and is not covered by HIPAA. See Section 14.

2. Information We Collect

2.1 Information you provide

  • Account information — email address, password (stored only in hashed form by our authentication provider), name. Email and password required.
  • Profile and settings — date of birth (used to confirm you are 18 or older), weight, ZIP code, grocery store preferences, typical meal times, your selected mode (Type 1, Type 2, or metabolic health), glucose target ranges, insulin delivery method, and whether you take medications that can cause low blood sugar. Date of birth and mode required; others optional.
  • Meal records — meal photos, meal titles, restaurant names, notes, and any corrections you make to estimates. Photo required to log a meal.
  • Health logs — medications (name, dose, drug class, schedule), carb ratio settings you enter, insulin doses you log, alcohol entries, ketone readings (including photos of meter displays). Optional.
  • Medication label photos — photos of medication labels you choose to scan. Optional.
  • Support and feedback — messages you send us, feedback on estimates, and the questions you type into the App’s search/query box. Optional.

2.2 Information from sources you connect

You choose which sources to connect. Each connection is optional and can be disconnected at any time.

  • Apple Health (HealthKit) — connects via Apple’s permission system on your device. Depending on the permissions you grant, we receive: workouts and workout routes, heart rate, heart rate variability, resting and walking heart rate, steps, active energy, exercise time, blood oxygen, stand hours, sleep analysis, and (if you choose Apple Health as your glucose source) blood glucose. We never write data to Apple Health.
  • Dexcom (where available) — connects via Dexcom’s official authorization (OAuth). We never see your Dexcom password. We receive glucose readings.
  • FreeStyle Libre — you invite a GlucoWorks-operated LibreLinkUp follower account from your LibreLink app. We never receive your LibreLink password. This method is not provided or endorsed by Abbott. We receive glucose readings you share with followers, for as long as the follower connection remains active.
  • Tandem insulin pumps (t:slim X2, Mobi) — you provide your Tandem Source (t:connect) username and password, which we encrypt and use to retrieve your pump data with an open-source synchronization tool. This method is not provided or endorsed by Tandem. We receive bolus and basal insulin records.

2.3 Information collected automatically

  • Location — when you log a meal while the camera is open, and only if you allow location access, we record the precise location of the meal. We use it to help identify restaurants and to recognize meals prepared at places you regularly cook. We do not collect location in the background.
  • Time zone — your device’s time zone, used to place meals and readings on the correct day and to note when you travel across time zones.
  • App and device information — app version and build number, push notification tokens (if you enable notifications), and technical error information when something goes wrong.
  • Feature usage — records of when certain features are used (for example, when a free-tier user attempts a Premium feature), used to operate and improve the App.
  • Server logs — our hosting providers automatically log technical information such as IP addresses for security and reliability.

We do not collect advertising identifiers, and we do not use cookies, analytics tools, or tracking pixels on our websites or in the App.

2.4 Information we derive

We compute information from your data to provide the App’s features, including:

  • Nutrition estimates for your meals (carbohydrates, fat, protein, fiber)
  • Glucose outcome scores and status labels for meals, and time-in-range statistics
  • Difficulty indicators based on how similar meals affected your glucose in the past
  • Summaries of your own historical insulin and carbohydrate records
  • Recognition of places where you regularly prepare meals (calculated as needed and not stored)
  • Time zone change markers

Derived information is about your own past data. It is descriptive only. It is not a diagnosis, prediction, or recommendation.

3. How We Use Your Information

We use your information to:

  • Provide the App’s features — estimating meal nutrition, scoring glucose outcomes, displaying your history and patterns, syncing connected sources, answering your search queries about your own data, and sending notifications you’ve enabled.
  • Maintain your account and subscription — verifying your eligibility, managing your free trial and Premium access, and responding to support requests.
  • Improve accuracy for you — we use your past meals and confirmed outcomes to make future estimates more consistent with your own history.
  • Improve estimates for all users through de-identified data (see Section 6), unless you turn this off.
  • Keep the Services secure and working — detecting errors, preventing abuse, and enforcing our Terms.
  • Comply with law and respond to lawful requests.

We do not use your information for advertising, profiling for marketing, or any automated decision that produces legal or similarly significant effects about you.

4. AI Processing

SuperGlu uses third-party artificial intelligence models. We ask for your explicit permission before any of your data is sent to a third-party AI provider. You can withdraw this permission at any time in Settings → Privacy. If you do, AI-powered features stop working, but you can still view your existing data.

  • OpenAI — used for meal nutrition estimates and difficulty indicators when you don’t yet have enough history. What’s sent: meal photo, your notes, the meal’s location, nearby restaurant names, ZIP code and grocery preferences, relevant past meals and their estimates, and de-identified reference data. For difficulty indicators: nutrition values only.
  • Anthropic — used for alcohol detection, medication label scanning, interpreting questions you type into the query box, and written summaries of your patterns. What’s sent: alcohol or medication label photos; your typed question plus the names of the types of data you have available (not the data values themselves); and aggregate statistics such as counts and percentages (not raw glucose readings or photos).

To identify restaurants, the AI model may perform web searches using information such as a restaurant name or general location. These searches do not include your name or account information.

We do not include your name, email, or account identifier in AI requests. Under our agreements with these providers, they may not use your data to train their models. They may retain request data briefly under their own terms, for example to detect abuse. We request the shortest retention available to us.

Medication label scan results are returned to you to review. Nothing is saved unless you confirm and save it.

AI output can be wrong. Always verify estimates before relying on them. See our Terms of Service.

5. How We Disclose Information

We do not sell your personal information or health data, and we do not share it for targeted advertising. We disclose information only as follows.

5.1 Service providers (processors)

These companies process information on our behalf, under contracts that limit their use of it to providing services to us:

  • Supabase — database, file storage, and account authentication. All App data, including photos.
  • Vercel — hosting our servers and websites. Data passing through our servers; server logs.
  • OpenAI — AI meal estimates. See Section 4.
  • Anthropic — AI features. See Section 4.
  • Google (Places API) — identifying nearby restaurants. Meal location coordinates only (no identity or photo).
  • GitHub — running scheduled synchronization jobs for Tandem pump data. Encrypted credentials (decrypted only while a sync job runs) and insulin records in transit.
  • RevenueCat — subscription and trial management. Your account ID and purchase status.
  • Resend — sending emails (support replies, internal notifications about feedback you submit). Email address, message content, and, for feedback you submit about a meal, that meal’s photo and details.
  • Expo — delivering push notifications to Apple. Push token and notification text.
  • Apple — App distribution, in-app purchases, and push notification delivery. Purchase and notification information.

5.2 Data sources you connect

When you connect Dexcom, Libre, Tandem, or Apple Health, information flows from those services to us. We do not send your SuperGlu data back to them. Those companies’ own privacy policies govern the data they hold.

5.3 Legal and safety

We may disclose information if we believe in good faith it is required by law, subpoena, or court order, or necessary to protect the rights, safety, or property of you, us, or others. Where legally permitted, we will notify you of requests for your data.

5.4 Business transfers

If GlucoWorks is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred to the successor or acquirer as part of that transaction. Any successor will be bound by this Privacy Policy for information collected under it. If the successor wants to use your information in ways that are materially different, it must give you notice and, where required by law, obtain your consent first.

5.5 With your consent

We may share information for other purposes if you ask us to or give us your consent.

6. De-identified Reference Data

To improve nutrition estimates for everyone, SuperGlu keeps a shared reference table of commonly logged dishes. Each entry contains a dish name, a restaurant name (if any), a count of how many people contributed, and average carbohydrate values.

Here is how we protect it:

  • Contributions come only from meals whose glucose outcome suggests the estimate was reliable.
  • The table contains no account ID, name, email, photo, location, or meal timestamp. It holds only a one-way scrambled code used to avoid double-counting.
  • A reference entry is used only after at least three different people have contributed to it.
  • The table is used only inside our estimation process and is never displayed to other users.

We publicly commit not to attempt to re-identify this data, and we require anyone we share it with to make the same commitment. You can stop contributing at any time in Settings → Privacy → Help improve estimates.

We may also create aggregated statistics that do not identify any person and use them for any lawful purpose.

We do not use your identifiable data to train AI models. If we ever want to use identifiable data for research or model development, we will ask for your separate, opt-in consent first.

7. Apple Health Data

Data we receive from Apple Health is used only to provide SuperGlu’s health-management features to you:

  • It is never used for advertising or marketing, never sold, and never shared with data brokers.
  • It is not stored in iCloud.
  • Individual Apple Health measurements (heart rate, HRV, sleep, steps, and so on) are not sent to AI providers. Only the names of the data types you have available may be sent, so the App can interpret your search questions.
  • Glucose readings may be used to calculate meal outcome scores.

8. Data Retention

  • Account, profile, meal records, photos, health logs, glucose and insulin data, derived information — until you delete them or delete your account.
  • Data from a source you disconnect — previously synced data stays in your account until you delete it or your account. You can ask us to delete it at any time.
  • Integration credentials and authorization tokens — until you disconnect the source or delete your account.
  • Technical logs (error logs, AI usage records, restaurant-lookup records, feature-usage records) — up to 90 days.
  • Support messages — up to 24 months after your request is resolved, or until you delete your account, whichever is sooner.
  • Backups — overwritten on a rolling basis, generally within 30 days and never longer than six months.
  • De-identified reference data — indefinitely (it does not identify you).

We may delete accounts that have been inactive for 24 months, after notifying you by email.

9. Deleting Your Data and Disconnecting Sources

Delete your account from Settings → Account → Delete Account, or email privacy@glucoworks.com. When you delete your account:

  • We delete your account, profile, logs, photos, glucose and insulin records, connected-source credentials, and derived information from our active systems promptly, and no later than 30 days after your request.
  • We remove our follower connection to your LibreLink account.
  • We tell our service providers to delete your data. Backup copies are overwritten as described in Section 8.
  • Purchase records held by Apple are governed by Apple’s policies.

Disconnect a data source at any time in the App. For FreeStyle Libre, also remove the GlucoWorks follower from your LibreLink app. For Apple Health, you can also revoke access in iOS Settings → Health → Data Access & Devices.

10. Security

We protect your information with:

  • Encryption in transit (HTTPS) and at rest
  • Additional encryption (AES-256) for connected-account credentials and authorization tokens
  • Private photo storage that can be reached only through short-lived links
  • Per-user access controls
  • Access to user data limited to authorized personnel, only for support, troubleshooting, and security

No system is perfectly secure, and we cannot guarantee absolute security.

Breach notification. If we discover a breach of security involving your information, we will notify you and the appropriate regulators as required by law, including the Federal Trade Commission’s Health Breach Notification Rule.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Confirm whether we collect, share, or sell your personal or health data
  • Access your data and receive a copy, along with a list of the third parties and service providers we have shared it with
  • Correct inaccurate data
  • Delete your data
  • Withdraw consent for collecting or processing your health data, or for AI processing
  • Opt out of certain processing — we do not sell data, use it for targeted advertising, or use it for significant automated decisions
  • Appeal a decision we make about your request

How to make a request. Email privacy@glucoworks.com from the email address associated with your account. Many choices are also available directly in the App (Settings → Privacy, and Settings → Account). We may need to verify your identity before acting on a request.

Timing. We respond within 45 days. If we need more time (up to 45 additional days), we will tell you why within the first 45 days. Requests are free of charge at least twice in any 12-month period.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing privacy@glucoworks.com with the subject line "Privacy Appeal." We will respond in writing within 45 days and explain our decision. If we deny your appeal, you may contact your state Attorney General. For Washington residents, that is atg.wa.gov/file-complaint.

Authorized agents. Where state law allows, you may use an authorized agent. We may require proof of authorization and verification of your identity.

No discrimination. We will not treat you differently for exercising your privacy rights. However, withdrawing consent for certain processing may prevent some features from working.

12. State-Specific Notices

Washington, Nevada, and Connecticut: See our Consumer Health Data Privacy Policy.

California: In the past 12 months we collected the categories of information described in Section 2, for the purposes in Section 3, from the sources in Section 2, and disclosed them to the service providers in Section 5. These categories include identifiers, health and medical information, precise geolocation, photos, and internet or device activity. Health information and precise geolocation are "sensitive personal information." We use them only to provide the services you request and as otherwise permitted by law. We do not sell or share personal information for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing data of anyone under 16.

Other states (including Virginia, Colorado, Oregon, Texas, and others): We process health data and precise location ("sensitive data") only with your consent. You may exercise the rights in Section 11.

13. Children

SuperGlu is not intended for anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has used SuperGlu, contact privacy@glucoworks.com.

14. HIPAA and Medical Status

GlucoWorks is not a "covered entity" or "business associate" under the Health Insurance Portability and Accountability Act (HIPAA), and information you provide to SuperGlu is not protected health information under HIPAA. This Privacy Policy and applicable state and federal consumer privacy laws govern how we handle your information.

SuperGlu is not a medical device and does not provide medical advice. See our Terms of Service.

15. United States Only

SuperGlu is offered only in the United States. Your information is stored and processed in the United States.

16. Changes to This Policy

We will post updates here and change the version number and effective date. If we make a material change, especially to how we collect, use, or share health data, we will notify you in the App and ask for your consent before the change applies to you. You will not be able to continue using the App without accepting the updated terms, but you may delete your account instead.

17. Contact Us

GlucoWorks LLC
Privacy requests: privacy@glucoworks.com
General support: support@glucoworks.com
Legal notices: info@glucoworks.com