Your metabolic health data belongs exclusively to you. Learn how GlucoLab protects, encrypts, and isolates your blood sugar, insulin, and clinical logs.
Effective Date: September 2026
Zero Data Selling
Your health data is never sold, brokered, or leased to advertisers, data brokers, or insurance carriers.
End-to-End Encryption
TLS 1.3 protocol protects every network request. Stored records are safeguarded by PostgreSQL Row-Level Security.
Full Patient Ownership
Export your full logs to PDF or Excel at any time, or request complete account and data deletion.
1. Overview & Commitment
GlucoLab Pro ("GlucoLab", "we", "us") is dedicated to empowering individuals managing diabetes, pre-diabetes, and metabolic health. Protecting your sensitive biometric and medical logs is our highest priority.
This Privacy Policy explains how our mobile application (Android & iOS) and web platform collect, handle, and store your data in compliance with international privacy best practices, including GDPR and HIPAA privacy guidelines.
2. Information We Collect
A. Clinical & Metabolic Logs
When you use GlucoLab, you may record:
Blood Glucose Readings: Values in mg/dL or mmol/L categorized by meal timing (fasting, pre-meal, post-meal, bedtime, etc.).
Insulin Administration: Bolus and basal dosages, injection timestamps, and schedule routines.
Body Metrics: Weight, HbA1c laboratory readings, and ketone results.
Meal & Activity Notes: Carbohydrate grams and exercise descriptions.
B. Account Identification
Your email address, account name, and encrypted credentials to synchronize data across your authorized devices.
C. Push Notification Tokens
Anonymous device tokens for Firebase Cloud Messaging (FCM) and OneSignal to send medication reminders and urgent glucose threshold alerts.
3. Device Hardware & Permissions
Camera & Photo Access (Smart Scanner): Used strictly for OCR text extraction from glucose meters and paper lab slips. Images are processed securely and never shared.
Biometric Sensor (Fingerprint & Face Unlock): Managed locally on your device hardware enclave via Capacitor Native Biometrics. Raw biometric templates are never transmitted to any server.
Push Notifications: Sent strictly for critical reminders (e.g. insulin timing, scheduled glucose checks). May be toggled anytime in Settings.
4. Data Storage & Security Protocols
We deploy defense-in-depth security mechanisms:
PostgreSQL Row-Level Security (RLS): Ensures strict cryptographic isolation so no user can query or access another patient's data.
Encryption: Encrypted in transit via TLS 1.3 and at rest with AES-256 standards.
Local SQLite Storage: On native mobile devices, data is cached in a local sandboxed SQLite database for seamless offline access.
5. Third-Party Infrastructure
GlucoLab partners with industry-leading, SOC2-certified infrastructure providers:
Supabase: Cloud database, authentication, and secure row-level access.
Cloudflare Workers: High-speed edge compute and DDoS defense.
Google Firebase & OneSignal: Encrypted notification delivery gateways.
6. Your Rights & Data Control
You have full autonomy over your records:
Data Portability: Export doctor-ready PDF or Excel spreadsheets at any time from the Reports tab.
Modification & Correction: Edit or delete individual entries directly from the History tab.
Account Deletion: Request immediate and permanent purging of your account and all associated health records.
7. Medical & Emergency Notice
GlucoLab Pro is a personal health tracking log, not a medical diagnosis device.
The application is not intended to replace professional medical advice, clinical diagnosis, or treatment. Never disregard medical advice from your physician based on information in this app. In a medical emergency, call your local emergency medical services immediately.
8. Children's Privacy
GlucoLab is not directed at children under the age of 13 without verified parental or legal guardian consent. If you believe a minor has registered without supervision, contact us to have the records removed.
9. Contact Information
For inquiries, privacy questions, or data deletion requests, contact our privacy compliance team:
Email: support@glucolab.app
Service: GlucoLab Pro Health Platform
Domain: https://glucolab.vioraa.workers.dev