Privacy Policy
1. Your data stays on your phone
Glucio is a logbook: it only stores what you type. Your glucose readings, insulin doses and insulin names, carbs, meal tags, notes, lab A1c values, targets and profiles stay on this phone only. There is no account, no server and no sync, and the app reads no camera, microphone, Bluetooth meter, Health Connect data, sensors or location. The database is excluded from Google's automatic cloud backup, so it is not copied to Google Drive in the background. Your health data only leaves the phone when you choose to: a logbook PDF or CSV you share or print, or a backup file you save yourself (optionally encrypted with a password you choose).
Analytics never contain your numbers: no glucose values, units, insulin doses, carbs, notes, medicine names or person names are logged, only coarse buckets such as “reading in range”.
Glucio is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It does not measure blood glucose and does not calculate insulin doses.
2. Permissions
- Notifications — the only permission Glucio asks for, and only when you turn on your first reminder (check-glucose or insulin reminders). You can turn reminders off at any time.
- Start at boot and biometric unlock — no prompt: used to restore your reminders after a restart and for the optional app lock.
- Internet — ads, analytics, purchases and consent only. Your health data is never sent.
- Glucio does not use the camera, microphone, Bluetooth, location, body sensors, Health Connect, contacts or your phone's files (exports go through the Android file picker you control).
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the History, Stats or Settings screen, an occasional full-screen ad when you leave Stats or Settings (never after you save a reading), and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never appear on the entry screen, the home screen, a low or high reading card, the logbook PDF preview, onboarding or the paywall, and never appear in the first two minutes of first use. Glucio Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads and Meta Audience Network competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's Unity's and Meta's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Glucio asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your readings and logbook remain on your device until you delete it or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Glucio is intended for adults (18+). It is not directed to children and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.