Privacy
Your data, and who can see it.
The plain version, written to be checked. Every line on this page describes what the software does today — where your records live, who can see them, which outside companies receive anything and why, and the rights you have over all of it. The formal policy is linked at the bottom.
- Area by area
- You choose what each doctor sees, and can end it in a tap
- Asked first
- Before anything of yours reaches an AI provider
- Never for billing
- Nothing commercial takes a record from you
- Nothing tracked
- No advertising, no analytics, in the app or here
Where it lives
Your records live on your phone.
Everything else is a copy of that, made for a reason you chose. Here is every place Glycoz sends one.
- Your phone, always
- A database on the device is the working copy — the one the app reads and writes, whether or not you have a connection. Nothing waits on a server to be saved.
- Your account, when you are online
- Records copy up as a backup and pull down anything you logged on another device. A record is copied when it syncs, not moved: the phone keeps the whole history whether or not you ever go online again.
- A doctor's panel, only if you connect one
- And only the areas you have left switched on. No connection, nothing to see.
Always
Your phone
A database on the phone holds the working copy of everything you log. It is written the moment you save, with or without a connection, and nothing is removed from it after it is backed up.
When you are online
Your Glycoz account
Records sync up as a backup and pull down anything you logged elsewhere. This is what puts your history back if you change phones — and it is why the app asks you to sign in.
Only if you connect a doctor
Your doctor’s panel
A doctor you have connected sees the categories you have not switched off. No connection, nothing to see. The panel is a window on your record, never a second copy of it.
What we will not claim: that your data never leaves your phone. It does, the moment you sign in — that is what makes the backup possible. Any app telling you otherwise while offering to restore your history onto a new phone is not being straight with you.
What leaves your phone
All of it, and when.
Including the lines most health apps leave off a page like this.
There is no advertising network, no analytics service and no tracking in the app or on this website. That is not a promise about how we use your data — none of it is collected in the first place.
Who can see what
Each person sees only their part.
None of this is a setting somebody has to remember. Each line is enforced where the records are kept, before anything is sent.
You
Everything you have recorded, on your phone and in your account, and a copy of all of it whenever you ask.
A doctor you connect
Only the areas you leave switched on for them, from the moment you connect until the moment you stop. Your name and phone number, so they can ring you.
Their staff
Never more than their doctor can see, and only what the practice has given each person. Someone who runs the front desk sees appointments, not your readings, unless the practice has granted that person more.
The people who run Glycoz
No route to your health records. The software refuses our own accounts at every patient record, so we cannot open a reading, a note or a diagnosis. We see your contact details and how many records your account holds, so we can help with the account itself — and we can erase an account, which asks for our own password and keeps a record of why.
Nobody but you
What you ask the assistant. There is no permission for it and no screen that could show it, so nobody can ask you to share it.
In an emergency
An alert you raise reaches the doctor you raised it with whatever the state of their practice's plan. It is an email and a notification to that doctor; nothing calls anyone else.
What reaches an AI provider
The features that send something to somebody else.
Every other part of Glycoz stays between your phone, your account and a doctor you chose. Your assistant, meal estimates and a doctor’s own assistant do not — so here is exactly how.
For the assistant, your question and the readings needed to answer it. For a meal estimate, the photograph and your note. Both go through our server to an outside AI provider — your phone never talks to it directly.
Your name, email address, phone number and date of birth. Location and camera details are removed from a photograph when it reaches our server, before it goes any further.
Before your first question or meal photograph, the app shows you a notice that names Google, says what is sent and what never is, and has a box that starts empty. Turn it off in Settings with one switch and no reason asked; what you already have stays.
- Your conversations are stored in your account so they come back on a new phone. They are never visible to any doctor.
- Where your record shows a severe high or a severe low, seek-care wording is added to an answer by the system itself rather than left to the model to remember.
- If a doctor you are connected to asks their own assistant about you, the figures it works from — drawn from the areas you share with them — go to an outside AI provider, with any of their notes it draws on. That conversation is kept for 90 days.
- The assistant and meal estimates are part of Glycoz Premium, a plan for patients, along with PDF reports longer than 15 days and Analytics over a longer period at a time. Every account gets a few free tries first. Holding Premium, or not, changes nothing about what is sent.
Being straight about the state of this: the one thing you are not asked about separately is a doctor’s own assistant. When a doctor you are connected to uses theirs, it reads the areas you have already shared with them, on their authority rather than on a fresh agreement from you. Switching an area off, or disconnecting, stops it as it stops everything else.
Sharing
One switch per area, per doctor.
When you connect somebody, sharing starts on for every area — and the app says so, on a screen you agree to before the connection is made. Turning something off for one doctor changes nothing for another.
Every one of these is separate
- Blood sugar readings
- Medicines, and whether you took them
- Insulin doses
- HbA1c results
- Blood pressure
- Heart rate
- Blood oxygen
- Weight
- Walking and running
- Cycling
- Water intake
- Meals you log, and their nutrition estimates — never the photos
- Reports you have generated
- Your profile details — not your name and phone number, which a doctor you connect always sees
There is one more switch, for readings imported from a fitness device. The app does not offer that module at the moment; anything imported before stays in your record, behind that switch.
What the app stores is what you have held back, not what you have granted. If it stored the granted list instead, an area you had never thought about could go quietly missing from a doctor you believed could see everything.
And an area added later: starts off for doctors you were already connected to, and waits for you to switch it on. For a doctor you connect after it exists, it is on from the start — they are covered by what you agreed to that day.
Limits on a doctor
What a doctor can never see.
Not settings we recommend you switch on. Things the software has no way of doing.
What you ask the assistant
Not withheld by a setting — there is no permission for it and no screen in the panel that could show one. You could not share it with a doctor even if you wanted to.
The photographs of your meals
Share Meals and a doctor sees your note and the estimate, day by day. The picture itself has no route to their panel at all.
Anything you have switched off
Hold back your weight and their weight section says it is not shared, and holds none of it — because the server never sent it, not because their browser hid it.
Your password
Nobody holds it, including us. It is stored in a form that cannot be reversed, so it can be reset and never recovered.
Anything new, once you disconnect
Access ends the moment you end it. No notice period, and no warning to them first. What stays with them is what they had already been shown.
Anyone who has not connected them
Ask the panel for a record it is not linked to and it answers as though nobody is there. A “no permission” message would confirm the person exists.
What a message says, on your lock screen
A notification says your doctor sent you a message, never what it says. An appointment notification does say when, and with whom.
Outside companies
Every company that receives anything.
Each one receives only what its job needs. Your records themselves are held in India, in a database on hardware we run ourselves — there is no managed database, no analytics service, no crash reporter and no advertising network anywhere in Glycoz.
Google — Gemini API
Your assistant, meal estimates, and a connected doctor's own assistant.
What is needed to answer: health figures, your age and the type of diabetes on your profile, and for a meal estimate the photograph and your note; for a doctor's question, notes that doctor wrote. Your own features never send your name, email, phone number or date of birth.
OpenAI — API
Off unless we turn it onThe software can also be set to send the same AI requests to OpenAI instead.
Whatever the provider it replaced would have received. The agreement the app asks you for names Google, and does not cover OpenAI.
Google — Firebase Cloud Messaging
Waking the app when something arrives for you.
A device token and a short notice; an appointment notice also carries its time and the doctor's name. Never anything clinical.
Google — Gmail
Every email Glycoz sends: sign-in codes, appointments, emergency alerts to your doctor, visit summaries, invoices.
The recipient's address, a name, and what the message is about — in an emergency alert, the note you typed with your phone number and email address.
Amazon Web Services — S3
Files uploaded to Glycoz: lab reports, meal photographs, reports attached to a hospital stay, a doctor's photo, a practice's staff documents and check-in photos.
The files, filed under an account number rather than a name, in a private bucket in Amazon's Mumbai region, closed to public access and encrypted at rest by Amazon.
OpenStreetMap
The map under a walk or ride you track.
Your phone's internet address and the part of the map on screen. Never the route, which stays on your phone.
OpenFreeMap
No personal dataThe map a doctor uses to place their clinic's pin.
The area of the map being viewed, asked for by our own server — never by the doctor's browser, and never anything about a patient.
Cloudflare
Carrying traffic between your phone and our server.
Encrypted traffic in transit. Nothing is stored there.
If you work at a practice
What a practice holds about its team.
A practice can run its team on Glycoz — attendance, leave, pay and documents. What it holds about you, who sees it and how long it is kept, in plain words.
- If your practice runs attendance on Glycoz, checking in or out asks for a photo taken there and then with the front camera, and one location fix at that moment. The app says so before your phone asks for either.
- Your practice decides, with one switch, whether both are required or both are optional. Being far from the clinic is shown beside the time, and never stops a check-in.
- Who sees them: you, the practice owner, and colleagues the practice has given attendance access over you. Never a public link, and never the people who run Glycoz.
- The photo is deleted after 45 days. The time and the location stay, because they are the attendance record.
- Nothing compares your face to anything. A person looks at a photo only if a check-in is questioned.
- Location is read once, when you tap — never in the background, and never as a stream.
- Your identity documents, contract or registration can be uploaded only after you have agreed on your own record. Turning that off stops anything further being added.
Taking a copy, and having it erased
Both are yours to do, without asking.
A copy of everything
Ask in Settings › Your data and we email you a link to everything held about you. It works once, lasts 48 hours, and the file is deleted afterwards. Photographs and documents are listed in it by name and date, and stay in the app.
Or a report, any time
A PDF to read, or a CSV of the records themselves for any period. Keep it or send it wherever you like, without asking anybody.
Or have the account erased
Ask in Settings › Your data and nothing changes for 30 days, so a tap you regret can be withdrawn; then the account is erased by itself. Or ask by email without the app. What is kept, and why, is listed rather than glossed over.
Nothing is held to ransom
Your records are never deleted because of anything commercial, and a doctor's practice leaving Glycoz does not take your prescriptions, alerts or past appointments with it. An appointment that had not happened yet is cancelled.
The law
Who answers for your data, and what you can ask of us.
Glycoz is written to India’s Digital Personal Data Protection Act, 2023. Under it, you are the Data Principal and we are the Data Fiduciary — the one responsible for what happens to your data.
P6s, a registered sole proprietorship, proprietor Param Suthar, of Ahmedabad, Gujarat, India.
Questions and complaints about your data go to Param Suthar, at [email protected]. A complaint is acknowledged within 24 hours and resolved within 15 days.
- Access
- Your records are in the app, and a copy of everything held about you is one request away in Settings › Your data.
- Correction
- Edit any record in the app, and ask us to correct account details.
- Erasure
- From the app, with 30 days to change your mind, or by email without it.
- Withdrawing consent
- Switch an area off, disconnect a doctor, or turn off the AI agreement in Settings — each with no reason asked.
- Nomination
- Name someone to exercise these rights for you if you die or cannot.
- Grievance
- Complain to us first, and to the Data Protection Board of India if we do not resolve it.
Glycoz records, presents and carries what you and your doctor write. It does not diagnose, treat, advise or decide. It is not intended to be used as a medical device, and has not been assessed as one: whether software like it falls under India’s Medical Devices Rules, 2017 is a question for a regulatory specialist, and one will be engaged to answer it before Glycoz is launched to the public.
This website
Nothing here follows you around.
No advertising trackers, no third-party analytics, and no cookie banner — because with nothing to consent to, a banner is theatre rather than a choice.
The fonts are served from this site rather than from a font network, so reading a page about privacy does not hand your internet address to a third party. If any of that ever changes, it will be described here before it ships, not after.
Ask us something specific
If there is something on this page you want demonstrated rather than asserted, write to [email protected]. A question about your own data gets answered by a person.
The formal documents: privacy policy, terms of use, medical disclaimer and delete my data.