Privacy Policy

The Insulin Pal iOS app and this website, https://insulinpal.app, are operated by KITA DIMENSIJA, MB, company code 308102704, registered at M. Zdziechovskio g. 21, Vilnius, LT-14201, Lithuania ("we"). This page explains what we store, why, and how to get rid of it.

The short version: the app keeps your account and your dose history so they can follow you across your devices. We never sell your data, never show ads in the app, and never use your data for anyone else's advertising. If you ask for our product news, we send it; otherwise we don't. The app counts, anonymously, how many people get through each step of setting it up; that count is never linked to you or your doses.

Your account

To use the app you sign in with your email address (you receive a one-time code; there is no password), or with Apple or Google. If you choose Apple or Google, they see that you signed in to Insulin Pal, and their own privacy policies apply; Apple also lets you hide your real email address. We store the email address of your account, an account identifier we generate, and the date and version of the Terms you accepted in the app, together with the date of your health-data consent (see below).

After you sign in, a single consent screen asks you to confirm the medical notice and to consent to us processing your health data. It also offers an optional, unticked box to receive product news. If you tick it, we also store that choice and when you made it. You can change it at any time in the app's Settings, and every email we send has an unsubscribe link.

What you enter in the app

The app stores what you log and set up so that it can show you your insulin timeline on every iPhone you sign in on:

• each insulin dose: the units, the time it was taken (with your time zone), and the insulin used;
• your default insulin, your diabetes type, and your dose-entry preferences;
• a display name, if you choose to enter one.

The insulin doses you log and your diabetes type are health information about you. We process them only with your explicit consent, which you give on the consent screen, and you can withdraw it at any time by deleting your account. We treat them with the care that deserves: they are used only to draw your own timeline and reminders, are never shared, and are never used to profile you. If you live in Washington, Nevada or Connecticut, ourConsumer Health Data Privacy Policyalso applies.

The app does not ask for or store glucose readings, and it does not read data from any other app or device. A profile photo, if you add one, stays on your iPhone only and is never uploaded.

Where it lives

Your account and dose history are stored in a database hosted by Supabase in Frankfurt, Germany, in the European Union. Supabase acts as our processor: it stores the data on our behalf and does not use it for its own purposes. Data travels over encrypted connections and is stored encrypted at rest.

Your doses are also kept on your iPhone, so the app works without a connection. A home-screen widget and the optional "insulin peaking" reminders are computed on the phone itself and never leave it.

If you use the Apple Watch app, your iPhone sends it a copy of the doses from the last 24 hours, directly over the connection between your iPhone and your watch. The watch never contacts our servers. It keeps that copy only while you are signed in with an active subscription, and deletes it when you sign out or your subscription ends. The watch-face complications are drawn on the watch itself.

Who else touches your data

• Loops (email delivery) sends your sign-in codes. Each code is a one-off email: to send it, Loops receives your email address, but it does not add you to any list. Only if you opt in to product news are you added as a contact, and you are removed again when you opt out or delete your account.
• Apple handles your purchase through the App Store. We never see your payment details. Apple's own privacy policy applies to the purchase.
• RevenueCat (subscription management) receives your account identifier and the purchase information Apple provides, so the app knows whether your subscription is active on every device.
• PostHog (product analytics, hosted in the EU in Frankfurt, Germany) receives anonymous events from the app, such as reaching a step of setup or logging a dose, so we can see where people get stuck. The app does not save any identifier for PostHog on your phone, and the events are not linked to your account, your email address, or the contents of your doses (never the units, the time or the insulin). You can switch this off at any time in the app's Settings, under Privacy ("Share anonymous usage counts").
• Our website host serves a small settings file that the app reads when it opens, so we can tell an outdated version to update. Like any web request, this may log standard technical data such as the IP address.

That is the full list. We do not share your data with anyone else, except where the law requires it.

Data outside the European Union

Your doses and account live in the EU (Supabase, Frankfurt), and the app's anonymous counts too (PostHog, Frankfurt). Loops, RevenueCat and Apple are based in the United States, so the limited data they handle (your email address for codes and news, your account identifier and subscription status, your purchase) may be processed there. They never receive your doses or your diabetes type. For these transfers we rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

Why we are allowed to use it

Privacy law asks us to name a legal reason for each use of your data. Ours are:

• Your account, settings and subscription status:to provide the app you signed up for (performing our contract with you).
• Your doses and diabetes type: your explicit consent, given on the consent screen in the app. You can withdraw it at any time by deleting your account.
• Product news: your consent, given by ticking the box. You can withdraw it at any time in Settings or with the unsubscribe link.
• Anonymous usage counts in the app, website visit counts and the update check: our legitimate interest in keeping the app working and improving it. None of these identify you, and you can switch the app's counts off in Settings.
• Emails you send us: our legitimate interest in answering you.

How long we keep it

• Your account, doses and settings: for as long as you have an account. They are deleted when you delete your account, as described below. They are kept when a subscription ends, so you can come back, export them or delete them.
• Your consent records (the Terms version and the dates of your consents): for as long as your account exists.
• Your email address for product news (from the app or the website): until you unsubscribe, opt out in Settings or delete your account.
• Emails you send us: for as long as needed to help you, and no longer than two years after our last exchange.

Deleting your data

You can delete your account from the app's Settings at any time. This permanently removes your account, your dose history, and your settings from our servers immediately, deletes your subscription record at RevenueCat, and clears the app on that iPhone and its paired Apple Watch. Your Apple subscription itself is separate: cancel it in your Apple Account settings if you no longer want it. Any other iPhone signed in to the account clears itself the next time it opens the app. When you delete a single dose, its contents are removed from our servers straight away; a blank marker remains only so that your other devices remove it too.

You can also export your dose history as a CSV file from Settings at any time.

If you opted out of product news, or deleted your account, your email address is removed from our mailing list.

Age

Insulin Pal is intended for adults. You must be at least 18 years old to create an account. Before you sign in, the app asks whether you are 18 or older, so nothing is collected from anyone under 18. On recent versions of iOS it also uses Apple's built-in age check, if you choose to share it. We never ask for your date of birth; Apple only tells the app whether you are an adult.

The website

The website does not use cookies and does not collect personal data from visitors. To understand roughly how many people visit and which pages they read, we use Cloudflare Web Analytics, a privacy-first tool that does not set cookies, does not fingerprint your device, and does not track you across other websites.

If you leave your email address on the website and tick the consent box, we store it as a contact with Loops and send you news about Insulin Pal. We never share or sell the list. Every email includes an unsubscribe link, and you can also write to us to have your address removed.

When you contact us

If you email us, we keep your message and contact details only as long as needed to reply and to help you. We do not share them with third parties except where required by law.

Your rights

Wherever you live, you can ask what data we hold about you, have it corrected or deleted, or object to how we use it. Deleting your account in the app is the fastest way to remove everything. For anything else, write to [email protected]. If you are in the European Union, these rights come from the GDPR and you may also complain to your local data protection authority.

Changes to this policy

If this policy changes in a way that matters to you, the app will ask you to review it again before you continue. The current version is always the one on this page, with the date at the top.