Privacy Policy

GlycoRange ("we", "us") is a wellness tracker for blood glucose logging and education. This policy explains what data we handle when you use our web app at www.glycorange.com.

What we collect

• Glucose readings, notes, reminders, medications, exercise logs, and profile settings you enter
• Optional account info if you sign in with Google (email, name, profile photo)
• Lab report files or pasted text you submit for optional AI analysis
• Basic technical logs (IP address, browser type) from our hosting providers for security and reliability

Guest vs signed-in

Guest users: data is stored on our servers tied to an anonymous session token in your browser. Clearing browser data may remove local access to that session.

Signed-in users: data syncs to your account via Google Sign-In so you can access it across devices. Guest data can be merged into your account when you sign in.

How we use data

• Provide tracking, charts, streaks, reminders, and educational content
• Generate optional AI summaries of lab reports you upload (only when you choose to analyze a report)
• Improve reliability and security of the service

We do not sell your health data. We do not use your data for advertising.

AI lab report analysis

When you upload or paste a lab report and request analysis, the extracted text is sent to our AI provider (Groq, using the Qwen model, or OpenAI as a fallback if configured) solely to generate an educational summary. We do not use your reports to train AI models. AI output is not medical advice — always confirm results with your doctor.

You can use GlycoRange without AI by logging readings manually. If no AI key is configured on our server, only basic pattern extraction is offered.

Third parties

• Google — optional Sign-In (OAuth). Subject to Google's Privacy Policy
• Groq / OpenAI — optional lab report text analysis when you upload a report
• Vercel — web hosting (frontend)
• Fly.io — API hosting and encrypted data storage (SQLite database and uploaded files)
• Cloudflare — domain DNS and email routing for contact addresses

Data retention & deletion

Your data is stored on our API server while your account or session is active. You may export glucose readings as CSV from the app. To request account deletion or removal of uploaded lab reports, email us at the address below. We will process deletion requests within a reasonable timeframe.

Security

We use HTTPS for all web and API traffic, encrypted storage on our hosting provider, and JWT-based authentication. No system is 100% secure — do not upload sensitive documents you are not comfortable storing digitally.

Your rights

Depending on your location, you may have rights to access, correct, or delete personal data we hold. Contact us to exercise these rights.

Medical disclaimer

GlycoRange is a wellness and education tool only. It does not diagnose, treat, or replace professional medical care. Always consult your doctor for treatment decisions.

Children

GlycoRange is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. The "Last updated" date at the top will change. Continued use after updates means you accept the revised policy.

Contact

Email: hello@glycorange.com
Website: https://www.glycorange.com