Privacy Policy

1. Information we collect

Account information

Sign-in details. If you sign in with Google or Apple: your name, email address (Apple may give us a private-relay address instead) and the provider’s unique account identifier. If you use phone sign-in: your phone number.
Doctors and administrators sign in to the web dashboard with an email address and a password; we store only a salted hash of the password, never the password itself.

Profile and health information you give us

Date of birth, gender, height, weight and your diabetes or metabolic condition.
Your glucose unit and your personal target glucose range.
Emergency contact name and phone number.
Blood glucose readings, and the reasons and notes you attach to glucose spikes.
Medications and the times you take them.
Meals you log and exercise you log, including calories.
Meal and exercise plans your doctor assigns to you.
Challenges you join, points you earn and rewards you redeem.
Messages you exchange with your doctor through in-app chat, and notifications we send you.
Calculated values such as your estimated BMR and metabolic age, derived from the profile information above.

Health data from your phone (only with your permission)

If you allow it, impA1ct reads data from Apple Health (iPhone) or Health Connect (Android): steps, heart rate, blood glucose, sleep, active calories and exercise sessions. The app can also write blood glucose, steps, heart rate, sleep, active calories and exercise back to these services. You choose which categories to allow and can change this at any time in your phone’s settings. Of these, the server stores blood glucose readings only; the other categories are used on your device to show you insights and are not uploaded to our servers.

Dexcom

If you choose to connect a Dexcom CGM through Dexcom Share, you enter your Dexcom Share username and password in the app. These credentials are kept in your device’s secure storage and are sent only to Dexcom to retrieve your glucose readings. They are never sent to or stored on our servers. They are removed from your device when you sign out.

Technical information

Your device’s time zone (so “today” means your local day), and standard server logs such as IP address, request time and error details, used for security and troubleshooting.

What we do not collect

We do not collect your precise location, contacts, photos or microphone data. We do not use advertising or third-party analytics SDKs in the app.

2. Google Sign-In and Google user data

impA1ct offers “Sign in with Google”. When you use it, Google shares with us only the basic identity information covered by the standard openid, email and profile scopes:

your name,
your email address, and
your Google account identifier.

We use this information solely to create your impA1ct account, recognise you when you sign in, and display your name in the app. We do not access your Gmail, Google Drive, Google Calendar, contacts or any other Google service or data, and we do not request any sensitive or restricted Google scopes.

We do not sell Google user data, use it for advertising, or transfer it to anyone except as described in this policy (see “Who we share it with”). impA1ct’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke impA1ct’s access at any time from your Google Account permissions page, and you can delete your impA1ct account as described in section 6.

3. How we use information

To create and secure your account and sign you in.
To show you your glucose, meal, exercise, medication and progress data.
To let your doctor see the information needed to care for you, and to let you and your doctor message each other.
To calculate your trends, calories, BMR and metabolic age.
To run challenges, points and rewards.
To send you in-app notifications and on-device medication reminders.
To keep the service secure, prevent abuse and fix problems.

We do not sell your personal information, and we do not use health information for advertising or marketing.

4. Who we share it with

Your doctor. Patients are linked to a doctor on the impA1ct platform. Your doctor can see your profile and health records in the dashboard and can chat with you. Platform administrators can also access records as needed to operate and support the service.
Sign-in providers. Google and Apple verify your identity when you sign in. If you delete an account that uses Sign in with Apple, we revoke the Apple grant.
Dexcom, only if you connect Dexcom Share, and only directly from your device (see above).
Infrastructure. Our servers and database are hosted on a virtual private server we operate. We do not share your data with advertisers or data brokers.
Legal reasons. We may disclose information if required by law, or to protect the safety and rights of users or the public.

5. Data that stays on your device

Your sign-in session is kept in your device’s secure storage (Keychain on iPhone, Keystore on Android). Medication reminders are scheduled locally on your phone using the operating system’s notification system; they are not sent through a push-notification server. Some app data, such as recent chat messages, is cached on your device for up to an hour. Signing out or deleting the app removes this local data.

6. Retention and account deletion

We keep your information for as long as your account exists. You can permanently delete your account at any time from inside the app (Profile → Delete account). Deletion is immediate and permanent: it removes your profile, glucose readings, medications, food and exercise logs, meal and exercise assignments, points and rewards, challenge registrations, chat messages, notifications, sign-in links and session tokens from our database.

Routine database backups are kept for 14 days and are then automatically deleted, so deleted data can remain in backups for up to that long before it is gone completely.

If you cannot access the app, email proximityfocal@gmail.com from the address on your account and we will delete the account for you.

7. Security

All traffic between the app, the dashboard and our servers is encrypted with HTTPS. Sign-in tokens are kept in your device’s secure storage, doctor and administrator passwords are stored as salted hashes, and access to records is restricted by role. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and will notify affected users and authorities where the law requires.

8. Your choices and rights

Access and correction. You can view and update your profile and records in the app.
Deletion. Delete your account in the app, or contact us (see section 6).
Permissions. Turn Apple Health / Health Connect categories and notifications on or off in your phone’s settings; disconnect Dexcom in the app.
Other rights. Depending on where you live (for example the EU/UK or California) you may have additional rights, such as receiving a copy of your data or objecting to certain processing. Contact us to exercise them and we will respond within the time the law requires.

9. Children

impA1ct is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date, and if the changes are significant we will tell you in the app.

11. Contact us

Questions or requests about privacy: proximityfocal@gmail.com

Contents