Privacy
Your data, and who can see it.
This is the plain version. The formal policy is a separate document and it is linked at the bottom. Everything on this page describes what the software actually does — not what we intend it to do.
Your records live on your phone.
Everything else is a copy of that, made for a reason you chose. Here is every place Glycoz sends one.
- Your phone, always
- A database on the device is the working copy — the one the app reads and writes, whether or not you have a connection. Nothing waits on a server to be saved.
- Your account, when you are online
- Records copy up as a backup and pull down anything you logged on another device. A record is copied when it syncs, not moved: the phone keeps the whole history whether or not you ever go online again.
- A doctor's panel, only if you connect one
- And only the areas you have left switched on. No connection, nothing to see.
Always
Your phone
A database on the phone holds the working copy of everything you log. It is written the moment you save, with or without a connection, and nothing is removed from it after it is backed up.
When you are online
Your Glycoz account
Records sync up as a backup and pull down anything you logged elsewhere. This is what puts your history back if you change phones — and it is why the app asks you to sign in.
Only if you connect a doctor
Your doctor’s panel
A doctor you have connected sees the categories you have not switched off. No connection, nothing to see. The panel is a window on your record, never a second copy of it.
What we will not claim: that your data never leaves your phone. It does, the moment you sign in — that is what makes the backup possible. Any app telling you otherwise while offering to restore your history onto a new phone is not being straight with you.
What leaves your phone
All of it, and when.
Including the lines most health apps leave off a page like this.
| What | Goes where | When |
|---|---|---|
| Readings, medicines, insulin, vitals, activity, meals | Your Glycoz account on the server | When you are signed in and online |
| The same records | A doctor you have connected | Only the areas you have not switched off — and never a meal photograph |
| A photograph of a meal, and your note | Your Glycoz account, so it comes back on a new phone — with location and camera details removed as it arrives | When you log a meal with a photo |
| That photograph and note, to make an estimate | An outside AI provider, through our server | Only when a meal estimate is made |
| A question you ask the assistant, and the readings needed to answer it | The same provider, through our server | Only when you use the assistant |
| Figures from the areas you share, and notes your doctor wrote about you, if they ask their own assistant about you | The same provider, through our server | Only when that doctor asks |
| Your assistant conversations | Your Glycoz account, so they return on a new phone | Never to any doctor |
| An emergency alert | By email and a notification, to the doctor you raised it with | Only when you raise one |
| Where you are, if you look for doctors near you | Our server, to sort the results — not saved with your account | Only when you search nearby |
| Reports you generate | Wherever you send them | Only when you press share |
| Your password | Nowhere. Stored in a form that cannot be turned back | — |
There is no advertising network, no analytics service and no tracking in the app or on this website. That is not a promise about how we use your data — none of it is collected in the first place.
What reaches an AI provider
The features that send something to somebody else.
Every other part of Glycoz stays between your phone, your account and a doctor you chose. Your assistant, meal estimates and a doctor's own assistant do not — so the app asks you before the first two, and this page says exactly how, because a tick you gave months ago is not an explanation.
What is sent
For the assistant, your question and the readings needed to answer it. For a meal estimate, the photograph and your note. Both go through our server to an outside AI provider — your phone never talks to it directly.
What is not
Your name, your email address, your phone number and your date of birth. Location and camera details are removed from a photograph when it reaches our server, before it goes any further. The provider is working out an answer about numbers or a plate of food, and it is not told whose they are.
- Your conversations are stored in your account so they come back on a new phone. They are never visible to any doctor.
- Your assistant and meal estimates are each a module. Switch one off and nothing is sent from it, and the rest of the app is unchanged.
- Where your record shows a severe high or a severe low, seek-care wording is added to an answer by the system itself rather than left to the model to remember.
- If a doctor you are connected to asks their own assistant about you, the figures it works from — drawn from the areas you share with them — go to the same provider to answer, with any of their notes it draws on. That conversation is kept for 90 days.
- The assistant and meal estimates are part of Glycoz Premium, a plan for patients, along with PDF reports longer than 15 days and Analytics over a longer period at a time. Every account gets a few free tries first. Holding Premium, or not, changes nothing about what is sent.
Being straight about the state of this: you are asked before your first question and before your first meal photograph, and you can turn it off again in Settings whenever you like. The one thing you are not asked about separately is a doctor’s own assistant: when a doctor you are connected to uses theirs, it reads the areas you have already shared with them, on their authority rather than on a fresh agreement from you.
Sharing
One switch per area, per doctor.
When you connect somebody, sharing starts on for every area — and the app says so, on a screen you agree to before the connection is made. Each area has its own switch, and the switches are per doctor: turning something off for one changes nothing for another.
Every one of these is separate
- Blood sugar readings
- Medicines, and whether you took them
- Insulin doses
- HbA1c results
- Blood pressure
- Heart rate
- Blood oxygen
- Weight
- Walking and running
- Cycling
- Readings from your watch or band
- Water intake
- Meals you log, and their nutrition estimates — never the photos
- Reports you have generated
- Your profile details — not your name and phone number, which a doctor you connect always sees
What the app stores is what you have held back, not what you have granted. If it stored the granted list instead, an area you had never thought about could go quietly missing from a doctor you believed you had shared everything with. You would think they could see your whole record; they would be reading an incomplete one, and neither of you would know.
And an area added later: starts off for doctors you were already connected to. You agreed to what the app recorded at the time; something invented afterwards is not covered by that, so it waits for you to switch it on. For a doctor you connect after it exists, it is on from the start — they are covered by what you agreed to that day.
Limits on a doctor
Seven things a doctor can never see.
Not seven settings we recommend you switch on. Seven things the software has no way of doing.
- What you ask the assistant
- Not withheld by a setting — there is no permission for it and no screen in the panel that could show one. You could not share it with a doctor even if you wanted to, which is deliberate: it means nobody can ask you for it.
- The photographs of your meals
- Share Meals and a doctor sees your note and the estimate, day by day. The picture itself has no route to their panel at all.
- Anything you have switched off
- Hold back your weight and their weight section says it is not shared, and holds none of it — because the server never sent it, not because their browser hid it.
- Your password
- Nobody holds it, including us. It is stored in a form that cannot be reversed, so it can be reset and never recovered.
- Anything new, once you disconnect
- Access ends the moment you end it. No notice period, and no warning to them first. What stays with them is what they had already been shown.
- Anyone who has not connected them
- Ask the panel for a record it is not linked to and it answers as though nobody is there. A “no permission” message would confirm the person exists, which is itself something to give away.
- What a message says, on your lock screen
- A notification says your doctor sent you a message, never what it says. The words come from the database on your phone after you unlock it, because a push notification crosses Google's servers to reach you. An appointment notification does say when, and with whom.
Taking a copy, and having it erased
Both are yours to do, without asking.
- Take a copy with you
- Generate a report — a PDF to read, or a CSV of the records themselves — and keep it or send it wherever you like. You do not have to ask for it, wait for it, or say why you want it.
- Or have the account erased
- Ask in Settings › Your data and nothing changes for 30 days, so a tap you regret can be withdrawn; then the account is erased by itself. Or ask by email without installing anything — Google Play requires a route that does not need the app, and so do we. What is kept, and why, is listed rather than glossed over.
- Nothing is held to ransom
- Your records are never deleted because of anything commercial, and a doctor's practice leaving Glycoz does not take your prescriptions, alerts or past appointments with it. An appointment that had not happened yet is cancelled.
This website
Nothing here is watching you.
No advertising trackers, no third-party analytics, and no cookie banner — because with nothing to consent to, a banner is theatre rather than a choice.
The fonts are served from this site rather than from a font network, so reading a page about privacy does not hand your IP address to a third party. If any of that ever changes, it will be described here before it ships, not after.
Ask us something specific
If there is something on this page you want demonstrated rather than asserted, write to [email protected]. A question about your own data gets answered by a person.