Consumer Health Data Privacy Policy

This policy is for people who live in Washington, Nevada or Connecticut in the United States. It explains how KITA DIMENSIJA, MB, company code 308102704, registered at M. Zdziechovskio g. 21, Vilnius, LT-14201, Lithuania ("we"), handles consumer health data in the Insulin Pal iOS app, as required by Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's data privacy law. It adds to our Privacy Policy, which covers everything else.

What health data we collect

• each insulin dose you log: the units, the time it was taken (with your time zone), and the insulin used;
• your default insulin and your diabetes type;
• the date you gave consent to us processing this data.

We do not collect glucose readings, data from other apps or devices, precise location, or biometric data. The app does not use geofencing.

Where it comes from

Only from you: you enter it in the app. We do not buy or receive health data about you from anyone else.

Why we collect it and how we use it

We use it only to provide the app you asked for: to draw your insulin timeline, to show estimates and reminders based on your doses, to keep your history in sync across your devices, and to let you export it. We never use it for advertising, never use it to profile you, and never sell it.

Your consent

We collect health data only after you give your explicit consent on the consent screen in the app, separately from accepting the Terms. You can withdraw consent at any time by deleting your account in the app's Settings, which permanently removes your health data from our servers.

Who we share it with

We do not sell consumer health data, and we do not share it with third parties. It is stored on our behalf by our processor:

• Supabase (database hosting in Frankfurt, Germany) stores your account and dose history for us and does not use it for its own purposes.

Two other service providers help run the app and, by doing so, learn that you use Insulin Pal: Loops, which emails your sign-in codes, and RevenueCat, which tells the app whether your subscription is active. They act on our behalf only and never receive your doses, your insulin or your diabetes type.

If you use the Apple Watch app, your iPhone sends recent doses directly to your watch; this stays between your own devices. Our anonymous product analytics never include the contents of your doses. We may disclose data if the law requires it.

Your rights

You have the right to:

• confirm whether we collect, share or sell your health data, and access it;
• get a list of the third parties and affiliates we have shared it with;
• have your health data deleted;
• withdraw your consent;
• not be treated differently for using any of these rights.

The fastest way to see your data is to export it from the app's Settings as a CSV file, and the fastest way to delete it is to delete your account in Settings. For any other request, write to [email protected] from the email address of your account, so we can confirm it is you. We will reply within 45 days, and we will tell you if we need more time, as the law allows.

Appealing a decision

If we turn down your request, you can appeal by replying to our answer or writing to [email protected]with "Appeal" in the subject line. We will respond within 45 days and explain our decision. If you are not satisfied, you can contact the Attorney General of your state: Washington, Nevada or Connecticut.

Changes to this policy

If this policy changes in a way that matters to you, the app will ask you to review it again before you continue. The current version is always the one on this page, with the date at the top.