Insu-Lens Privacy Policy

Insu-Lens ("the App") is operated by Ignis Algos Inc. ("we", "us", or "our"). This Privacy Policy explains what information the App collects, how we use it, who we share it with, and what choices you have.

In short: Insu-Lens collects the minimum data needed to forecast glucose trends and provide personalized insights. We do not sell your data. You can export or delete your data at any time.

We collect three categories of information:

a. Information you provide

• Account email and password (if you create an account)
• Optional profile details: age range, diabetes type (Type 1, Type 2, gestational, prediabetes), diagnosis date
• Notes you add to glucose readings or meals

b. Information collected automatically

• Glucose readings, insulin doses, meal entries, and activity data you log or sync from connected devices (e.g., Dexcom, Libre, Medtronic, Apple Health, Google Fit)
• App usage analytics: which screens you visit, which insights you view, how often you log entries (used only to improve the App)
• Device information: model, OS version, app version, language
• Crash reports and diagnostic data

c. Information from connected services (only if you opt in)

• Continuous glucose monitor (CGM) data via manufacturer integrations
• Insulin pump data via manufacturer integrations
• Health platform data (Apple HealthKit, Google Fit) — read-only access for relevant metrics

We use the information we collect to:

• Provide glucose forecasts and personalized insights (the core feature of the App)
• Send you alerts when forecasts indicate concerning glucose trends (only if you enable alerts)
• Sync data across your devices and remember your preferences
• Improve the App's predictions and user experience through aggregated, de-identified analysis
• Provide customer support when you contact us
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not use your health data for advertising. We do not sell your data to third parties, period.

We share information only in these limited circumstances:

• With your explicit consent. For example, if you choose to share your data with a healthcare provider or caregiver.
• With service providers. We use trusted vendors for hosting, error tracking, and analytics. These vendors are contractually obligated to protect your data and may only use it to provide services to us.
• For safety or legal reasons. If we believe in good faith that disclosure is necessary to prevent harm, comply with law, or respond to a valid legal request.
• In a business transfer. If Ignis Algos Inc. is acquired or merges, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.
• Aggregated and de-identified data. We may share statistics that cannot be used to identify you (e.g., "30% of users in our pilot study saw a 12% improvement in time-in-range").

We never sell your personal information to data brokers, advertisers, or any third party.

You have the following rights regarding your data:

• Access. You can export all your data as a JSON or CSV file from the App's Settings screen.
• Delete. You can delete individual readings, your account, or all your data at any time. Account deletion permanently removes your data within 30 days.
• Disconnect integrations. You can revoke access for any connected device or health platform at any time.
• Opt out of analytics. You can disable usage analytics in Settings → Privacy.
• Correct. You can edit any reading or profile field at any time.

To exercise any rights not available in the App, email privacy@insu-lens.app.

We keep your data for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law (e.g., tax records). Aggregated, de-identified data may be retained indefinitely.

We protect your data with industry-standard safeguards:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Row-level access controls — no engineer can read your raw glucose data without an audited, time-limited access grant
• SOC 2 Type II controls audited annually
• Regular penetration testing by independent third parties
• HIPAA-aligned safeguards for any data that touches US healthcare providers

No system is 100% secure. If we discover a breach affecting your data, we will notify you and relevant authorities within 72 hours as required by GDPR.

Insu-Lens is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, contact us at privacy@insu-lens.app and we will delete it within 30 days.

Insu-Lens is operated from the United States. If you use the App from outside the US, you understand that your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses for transfers from the EEA, UK, and Switzerland.

For users in California (CCPA/CPRA), the European Economic Area (GDPR), the United Kingdom (UK GDPR), and Brazil (LGPD), you have additional rights described in our Regional Rights page.

We may update this Privacy Policy as the App evolves. We will notify you in-app and via email before material changes take effect, and we will keep prior versions available on request.

Ignis Algos Inc.

Email: privacy@insu-lens.app

Data Protection Officer: privacy@insu-lens.app