Privacy Policy

1. Introduction

1.1. This Privacy Policy explains how OhMyGlu ("we", "us", "our", or the "Operator") processes personal data when you use the OhMyGlu service (the "Service").

1.2. This Policy is intended for users in the European Economic Area (EEA) and reflects requirements under Regulation (EU) 2016/679 (GDPR), the ePrivacy framework, and other applicable EEA data protection laws.

1.3. By using the Service, you acknowledge this Policy and, where required, provide consent to the processing described here.

Data Controller

• Email: support@ohmyglu.app
• Website: https://ohmyglu.app

2. Categories of Personal Data

We may process the following categories of personal data:

2.1 Account and Profile Data

• email address;
• authentication data;
• profile details you choose to provide.

2.2 Health Data (Special Category Data)

• glucose-related records;
• weight records;
• nutrition-related records and notes;
• daily health notes and optional photos where you choose to add them;
• health-related data where provided by you;
• other health-related information you choose to submit in the Service.

Examples may include measurements, meal notes, symptom notes, daily photos/messages, and related diary entries that you choose to store.

2.3 Integration Data

• data received from identity providers, communication platforms, app stores, and other integrations you use with the Service.

Examples may include account identifiers from sign-in providers and technical purchase/entitlement signals from app distribution platforms.

2.4 Technical Data

• session and authorization technical data;
• service operation and error data required for stability and security.

3. Purposes of Processing

We process personal data for the following purposes:

• account registration, authentication, and security;
• providing and operating Service functionality;
• storing and displaying your records;
• generating statistics, reminders, and informational insights;
• synchronizing your data across devices;
• handling support requests and service communications;
• enabling paid functionality and payment processing;
• compliance with legal obligations;
• improving service reliability and security.

4. Legal Bases (GDPR)

4.1 Standard Personal Data (Art. 6 GDPR)

Depending on the context, we process personal data based on:

• performance of a contract (Art. 6(1)(b));
• compliance with legal obligations (Art. 6(1)(c));
• legitimate interests in operating, securing, and improving the Service (Art. 6(1)(f));
• consent where required (Art. 6(1)(a)).

4.2 Health Data (Art. 9 GDPR)

Health data is processed based on your explicit consent (Art. 9(2)(a)) and only to provide the health-related functionality of the Service.

5. Data Location and Retention

5.1. For EEA users, primary Service databases are hosted on servers located within the European Economic Area.

5.2. We retain personal data only for as long as necessary for the purposes described in this Policy, to provide the Service, and to comply with legal obligations.

5.3. After account deletion or a valid erasure request, data is deleted or anonymized without undue delay and, as a general rule, within 30 days, unless continued retention is required by law.

6. Sharing with Third Parties

6.1. We do not sell personal data.

6.2. We may engage third-party service providers, including providers of:

• hosting and infrastructure;
• authentication services;
• communication and messaging services;
• payment services;
• app store distribution and billing services;
• email infrastructure;
• AI and other technical processing services.

6.3. Data is shared only as needed for the relevant function and under appropriate contractual and legal safeguards.

6.4. We may disclose personal data where required by law, court order, or binding request from competent authorities.

7. International Data Transfers

7.1. Some service providers may process personal data outside the EEA.

7.2. Where such transfers occur, we rely on lawful transfer mechanisms under Chapter V GDPR, such as adequacy decisions, Standard Contractual Clauses, and/or your explicit consent where required.

8. Your Rights (GDPR)

Subject to applicable law, you have the right to:

• access your personal data;
• rectify inaccurate or incomplete data;
• request erasure of data;
• request restriction of processing;
• object to processing based on legitimate interests;
• data portability;
• withdraw consent at any time (where processing is based on consent);
• lodge a complaint with a supervisory authority.

You may exercise your rights by contacting: support@ohmyglu.app.

We respond to privacy requests within the timelines required by GDPR (typically within one month, subject to lawful extensions where applicable).

9. Security Measures

9.1. We implement appropriate legal, organizational, and technical safeguards to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

9.2. Such safeguards may include access controls, secure data transmission, backup procedures, security monitoring, administrative controls, and regular updates of software and security practices.

9.3. In case of a personal data breach, we respond in accordance with applicable law, including notification duties where required.

10. Cookies and Similar Technologies

10.1. The Service uses necessary cookies and similar technologies for authentication, session continuity, security, and core functionality.

10.2. Advertising or non-essential tracking technologies are not used without a valid legal basis, including consent where required.

11. Age Requirements

11.1. The Service is intended for users aged 18 or older.

11.2. If local law permits use by minors, such use requires involvement or consent of a parent or legal guardian where legally required.

12. Changes to This Policy

12.1. We may update this Policy from time to time.

12.2. Updated versions become effective upon publication unless a different effective date is stated.

12.3. For material changes, we will make reasonable efforts to notify users in advance through the Service interface and/or by email.

13. Contact Information

• Email: support@ohmyglu.app
• Website: https://ohmyglu.app