Privacy Policy

1. Who We Are

GlucoBloom is a personal health tracking application designed to help individuals manage gestational diabetes. The app is operated by GlucoBloom (“we”, “us”, “our”). For privacy-related inquiries, contact us at privacy@glucobloom.com.

2. Data That Stays on Your Device

The following data is stored exclusively on your device using browser localStorage. It is never transmitted to our servers or any third party:

• Blood glucose readings
• Meal logs and food entries
• Insulin logs
• Personal settings and glucose targets
• Weekly diet plans

Clearing your browser data or uninstalling the app will permanently delete this information. We have no ability to recover it.

3. Analytics Data (With Your Consent)

With your explicit consent, we use PostHog to collect anonymous usage data. This helps us understand which features are most useful and how to improve the app.

What we collect (analytics only):

• Pages visited and features used (e.g., “glucose log opened”)
• Whether you use the app via browser or as an installed PWA
• Approximate session length and navigation patterns
• Device type (mobile, tablet, desktop) and browser

What we never collect:

• Your name, email, or any personally identifiable information
• Any health data (glucose values, meals, insulin doses)
• Your IP address (IP anonymization is enabled)
• Precise location

Analytics data is processed on PostHog's EU-hosted cloud infrastructure (Frankfurt, Germany), which operates under GDPR.

4. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Withdraw consent for analytics at any time (clear app data or contact us)
• Request deletion of any analytics data associated with your anonymous session
• Access information about what data has been collected
• Port your on-device data by using the Export feature in Settings

To exercise these rights, email privacy@glucobloom.com.

5. Cookies

GlucoBloom does not use advertising cookies or tracking cookies. The only browser storage we use is localStorage to save your app data and preferences on your device, and a PostHog session cookie (only if you accept analytics). We do not use cookies for marketing or cross-site tracking.

6. Children's Privacy

GlucoBloom is not directed at children under 13. We do not knowingly collect any information from children. If you believe a child has provided personal information through this app, please contact us immediately.

7. Third-Party Services

The only third-party service integrated into GlucoBloom is PostHog (analytics, EU cloud). We do not integrate with advertising networks, social media platforms, or data brokers.

The app loads fonts from Google Fonts. Google's font service may log your IP address per their own privacy policy. We plan to self-host fonts in a future update.

8. Data Security

All network communication uses HTTPS. Your health data never traverses our network — it remains in your browser. The app is served with strict security headers including Content Security Policy, HSTS, and X-Frame-Options to protect you from common web threats.

9. Changes to This Policy

We may update this policy as the app evolves. Material changes will be noted with an updated effective date. Continued use of the app after changes constitutes acceptance of the new policy.

10. Contact

For any privacy concerns or data requests: privacy@glucobloom.com