Your Data Rights

As a data subject under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten")
• Restriction of processing in certain circumstances
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interest or for direct marketing
• Withdraw consent at any time, without affecting prior lawful processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@insu-lens.app. We respond within 30 days.

Our EU representative can be reached at the same address.

California residents have the right to:

• Know what personal information we collect, use, share, or sell
• Delete personal information we have collected
• Correct inaccurate personal information
• Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising
• Limit use of sensitive personal information to that necessary to provide the service
• Non-discrimination for exercising CCPA rights

To exercise these rights, email privacy@insu-lens.app or use the in-app controls in Settings → Privacy.

Brazilian data subjects have rights similar to GDPR, including:

• Confirmation of the existence of processing
• Access to data
• Correction of incomplete or inaccurate data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability
• Information about public and private entities with which data has been shared
• Information about the possibility of refusing consent and the consequences
• Revocation of consent

Contact: privacy@insu-lens.app. Brazilian Data Protection Authority (ANPD) complaints can be filed at gov.br/anpd.

Categories of personal information we collect:

• Identifiers (email, device ID)
• Health information (glucose readings, insulin doses, meals, activity)
• Biometric information (only if you opt in for app-based biometric login)
• Internet activity (app usage analytics)
• Geolocation (only if you opt in for activity tracking)
• Inferences drawn from the above (your forecasted glucose risk profile)

Retention periods: account data while account is active + 30 days after deletion; health data per your account settings; analytics data 24 months in aggregated form.

Sensitive personal information use: we use health data only to provide the core forecasting service you signed up for. We do not use it for any other purpose.

Ignis Algos Inc.
Email: privacy@insu-lens.app

We respond to verified requests within 30 days. We do not charge for responding to legitimate rights requests, unless a request is manifestly unfounded or excessive.