Privacy Policy

Effective Date: 22 August 2026

DiabetesFit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use the DiabetesFit mobile application (the "App").

1. Data Controller

The data controller responsible for your personal data is:

DiabetesFit
Email: support@diabetesfit.ch
Location: Switzerland

2. What Data We Collect

2.1 Health Data (Stored Locally Only)

The App allows you to track the following health information:

• Blood glucose readings
• Insulin doses (basal and bolus)
• Meal information and carbohydrate intake
• Exercise and activity data
• Notes and observations

Important: All health data is stored ONLY on your device, and in your own iCloud account (iPhone and iPad) or your own Google account through Android Auto Backup (Android). We do NOT have access to this data, and we operate no servers of our own.

2.2 Health Platform Data

On Android, with your explicit permission, the App reads blood glucose from Health Connect so readings from your CGM app do not have to be retyped. This access is read-only — the App never writes to Health Connect — and you can withdraw it at any time in Health Connect.

On iPhone and iPad, with your explicit permission, the App reads from Apple HealthKit:

• READ: Glucose data from your CGM device (Dexcom, Freestyle Libre, etc.)
• READ: Insulin doses from compatible smart pens

The App reads this data so you do not have to retype readings you have already taken. It does not write your entries back into the Health app. This exchange happens entirely on your device, and we never see your HealthKit data.

2.3 Technical Data (Anonymous Only)

The App contains no analytics, crash-reporting or tracking software of any kind. We see only the aggregate, anonymous statistics the stores themselves produce for any app — App Store Connect for iPhone and iPad, Google Play Console for Android:

• Crash and performance summaries (anonymised by the store)
• Device types and operating system versions
• Install and usage counts, with no personal identifiers

We never receive this data from the App itself, and none of it can identify you.

2.4 Purchase Data

Premium is a one-time purchase. If you buy it:

• Apple or Google processes the payment — we never see your payment details
• We receive only a receipt identifier confirming that Premium was bought
• That identifier cannot be linked to your health data

3. How We Use Your Data

3.1 Your Health Data

Your health data is used solely by YOU, on YOUR device, for:

• Tracking your diabetes management
• Generating insights and visualizations
• Creating PDF reports for your healthcare team (Premium feature)
• Learning insulin timing through interactive tools

All processing happens locally on your device. We do not access, analyze, or store your health data on our servers.

3.2 Sync and Backup

On iPhone and iPad, your data syncs between your Apple devices through your own iCloud account. It is encrypted in transit and at rest by Apple, we have no access to it, and you control syncing in iOS Settings.

On Android there is no live sync. Your data is included in Android Auto Backup, which copies it to your own Google account, encrypted by Google. You control this in your device's backup settings, and we have no access to it.

4. Data Sharing and Disclosure

We do NOT share your personal health data with anyone.

The only data sharing that occurs is:

• Apple and Google: purchase processing, and the anonymous store statistics described above
• You: When you export PDF reports to share with your healthcare team

We will only disclose your information if required by law or to protect our legal rights.

5. Data Security

We implement appropriate security measures:

• Local Storage: Your data is protected by iOS encryption and your device passcode
• iCloud Sync: Data is encrypted in transit (TLS/SSL) and at rest by Apple
• No Central Database: We don't maintain servers storing your health data
• App Security: Regular security updates and code reviews

6. Your Rights (GDPR & Swiss FADP)

Under GDPR and Swiss data protection law, you have the right to:

• Access: Request a copy of your data (stored on your device only)
• Rectification: Correct inaccurate data (edit in the App)
• Erasure: Delete your data (delete the App or disable iCloud sync)
• Data Portability: Export your data (PDF export feature)
• Withdraw Consent: Revoke HealthKit permissions in iOS Settings
• Object: Object to data processing (delete the App)

To exercise these rights, contact us at support@diabetesfit.ch

7. Children's Privacy

DiabetesFit is suitable for users of all ages, including minors with diabetes. However:

• We do not knowingly collect personal data from children without parental consent
• All data remains on the user's device (or parent's iCloud account for family sharing)
• Parents/guardians should supervise minors' use of health apps

8. International Data Transfers

Your data is stored on your device and, depending on your platform, in your own iCloud or Google account:

• Apple and Google may store data in data centres worldwide
• Both comply with GDPR and international data protection standards
• We transfer nothing internationally, because we never receive your data

9. Third-Party Services

The App integrates with:

• Apple HealthKit and Apple iCloud (iPhone and iPad): subject to Apple's Privacy Policy
• Health Connect and Android Auto Backup (Android): subject to Google's Privacy Policy
• Apple StoreKit and Google Play Billing: to process the one-time Premium purchase

We do not use third-party analytics, advertising, or tracking services.

10. Food Database Sources

The App includes food databases from:

• Swiss Federal Food Safety (BLV): Official public nutritional data
• Open Food Facts: Open-source food database
• USDA FoodData Central: Public nutritional information

Searches in these databases are performed locally or anonymously. No personal data is shared.

11. Data Retention

Your health data is retained:

• On your device: Until you delete the App or manually delete entries
• In iCloud: Until you disable sync or delete from iCloud settings
• We retain: Nothing - we don't store your health data

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted:

• On this webpage with a new effective date
• In the App (for significant changes)
• Via App Store update notes (for material changes)

13. Medical Disclaimer

Important: DiabetesFit is a tracking and educational tool, not a medical device. It:

• Does NOT provide medical advice, diagnosis, or treatment
• Does NOT replace professional medical supervision
• Should NOT be used for medical emergencies

Always consult your healthcare provider before making changes to your diabetes therapy.

14. Contact Us

If you have questions about this Privacy Policy or your data:

Email: support@diabetesfit.ch
Website: https://www.diabetesfit.ch

We aim to respond to all inquiries within 48 hours.

15. Supervisory Authority

If you believe your data protection rights have been infringed, you may lodge a complaint with a supervisory authority:

• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch
• European Union: the data protection authority of the country where you live or work

We would rather hear from you first, at support@diabetesfit.ch — but you are not obliged to contact us before approaching an authority.