Privacy Policy

DiabetesLife (“we”, “us”, “our”) provides a mobile app and a doctor portal that help people manage diabetes. This policy explains what data we collect, why we collect it, and the choices you have. Your health information is sensitive, and we treat it that way.

Who we are

DiabetesLife — the mobile app, this website and the doctor portal at doctor.diabeteslifeapp.com — is operated by Ringmann Global Private Limited (CIN U28261TZ2025PTC033824), S.F 192, Airy Garden, Ravuthur Pirivu, Kannampalayam, Mettupalayam, Coimbatore – 641402, Tamil Nadu, India. Ringmann Global Private Limited is the data fiduciary responsible for your personal data under India’s Digital Personal Data Protection Act, 2023. For any privacy question, contact us at support@diabeteslifeapp.com.

Information we collect

• Account and profile information — your email address, name and optional title, date of birth (and age), sex, height and weight, diabetes type, time zone and glucose targets. For doctors, the professional profile details they enter.
• Health data you log — glucose readings, meals, medicines and insulin, blood pressure and weight, activity and steps, low blood sugar episodes, and the health check-ups you record.
• Pregnancy details — if you have gestational diabetes or are pregnant, your due date, the date your baby is born and any pregnancy glucose goals your doctor sets. They are used only to set your pregnancy goals, show your pregnancy week, plan pregnancy-safe meals and remind you about the glucose test after the birth. You can change or remove them in the app at any time.
• Lab reports — images or PDFs you upload for scanning, and the values extracted from them (for example HbA1c, lipids, kidney and thyroid results).
• Meal photos— when you use “Snap your plate”, the photo is sent for AI analysis and is not stored by us; only the food items you choose to save are kept.
• Messages and appointments — messages you exchange with a doctor you have linked, and appointments they schedule.
• Emergency contact — if you choose to add one, the name, phone number and (optionally) email of a family member or carer, which you should add only with their agreement.
• Purchase status — whether you have a Pro or Clinic plan and when it renews. We never receive your card details.
• Technical information — our hosting and security providers process technical data such as your IP address to deliver the service and prevent abuse. We do not use analytics, advertising or crash-reporting tools.

How we use your information

• To provide the core features: logging, trends, analytics and reminders.
• To provide AI features: reading lab reports, recognising the food in a meal photo, explaining lab results and generating meal plans. The report, photo or relevant health values (including, if you are pregnant, your pregnancy week and goals) are processed by our AI provider (Google Gemini, on its paid service) solely to return the result to you; this data is not used to train AI models.
• To alert the people you choose: if you log a severely low blood sugar (below 54 mg/dL) and have added an emergency contact’s email, we email them that you may need help. A doctor you have linked can also choose to receive a daily email summary of urgent alerts, such as a severe low, about their patients.
• To share your data with a doctor only when you link your account to that doctor. You control this link and can remove it.
• To process payments for Pro and Doctor plans through our payment providers — Google Play Billing for in-app purchases on Android, and Razorpay on the web. We never receive or store your card details.
• To keep the service secure and comply with legal obligations. Our sign-in screens are protected against bots and abuse by Cloudflare Turnstile, which processes technical signals such as your IP address, browser and device characteristics for this purpose.

Data sharing

We do not sell your personal data. We share it only with service providers who help us run DiabetesLife, and only as needed:

• Supabase — secure database and authentication hosting.
• Google Gemini — AI processing of lab reports, meal photos, lab explanations and meal plans.
• Google Play Billing & Razorpay — payment processing for paid plans (Google Play for Android in-app purchases, Razorpay on the web).
• Resend — sending email: sign-in codes, alerts to your linked doctor, and emergency-contact alerts.
• Cloudflare Turnstile— bot and abuse protection on our sign-in screens. See Cloudflare’s Turnstile Privacy Addendum for how it processes these signals.
• Your linked doctor, when you choose to connect your account, including messages you send them.
• Clinic staff your linked doctor adds to their account (up to 5, such as a nurse, diabetes educator or dietitian). Each signs in with their own account and can view your readings, meals, medicines and lab results, and add glucose readings and lab results, which are marked with their name. They cannot see your messages or your doctor’s notes. Unlinking your doctor ends their staff’s access too.
• Your emergency contact, only as described above, when you have added one.
• Family members you invite (for example a son, daughter or spouse). Once they accept, they can view your readings, medicines, meals, lab results and low-sugar episodes in their own app, but cannot change anything, and we email them if you log a severely low reading (you can turn this off for each person). You can remove anyone at any time and access stops immediately.

Cookies

Our website uses only strictly necessary cookies — for example, to keep you signed in and to keep the service secure. We do not use advertising, analytics or tracking cookies, and we do not track you across other websites. Because these cookies are essential to provide the service you request, we do not display a cookie consent banner. If we introduce any non-essential cookies in future, we will ask for your consent first and update this policy.

Data storage and security

Your data is stored on secured cloud infrastructure with access controls, database row-level security, and encryption in transit and at rest. Access to your health records is restricted to your own account, the doctor you link, the clinic staff they add and the family members you invite. Our staff can reach account data only through an access-controlled admin console, used to support you.

Access record.Every time your doctor, their clinic staff or a family member opens your records, and every time our support team changes your account, we add an entry to an access record you can read in the app (Settings → Who has viewed my data). Entries cannot be edited or deleted by anyone using the app.

If something goes wrong. If a personal data breach affects you, we will tell you without delay, in the app or by email, what happened, what data was involved, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India within 72 hours, as the DPDP Rules, 2025 require.

Your rights and choices

• You can view and edit the data you log at any time in the app.
• You can unlink a doctor, or remove a family member, to stop sharing with them.
• You can see who has opened your records, in the app (Settings → Who has viewed my data).
• You can name a nomineewho may exercise these rights for you if you die or become unable to (Settings → Your privacy rights → Add a nominee).
• You can withdraw your consentat any time (Settings → Your privacy rights). Because the app cannot work without processing your data, withdrawing consent stops all processing and erases your account and data; we offer you an export first.
• You can ask us to correct anything you cannot edit yourself by emailing us.
• You can permanently delete your account and associated data from within the app (Settings) or the doctor portal, or by emailing support@diabeteslifeapp.com. See how to delete your account for details.
• You can export a full copy of your data from the app (Settings → Export all my data) on every plan, free or paid.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your personal and health data from our systems, except where we are required to retain limited records (for example payment records) to meet legal obligations.

We keep the access record and security logs for at least one year, as the DPDP Rules, 2025 require. These entries say who opened an account and when; they contain no health readings. When an account is erased, its entries are kept without the link to that account for the rest of that year and then deleted.

Children

You must be 18 or older to create a DiabetesLife account yourself. Many children live with diabetes, so a parent or legal guardian may create and manage an account for a child under 18; by doing so they give consent on the child’s behalf, as India’s Digital Personal Data Protection Act requires. When the date of birth shows a child, the app asks for the parent or guardian’s name, relationship and year of birth, confirms they are an adult, and records their consent before any health data is entered. We do not show advertising, track children across services, or profile them for any purpose other than providing the app. If you believe a child’s account was created without a parent or guardian, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you in the app.

Grievance Officer

If you have a concern about how your personal data is handled, contact our Grievance Officer:

• Name: Vijay Anand Bezzala
• Email: support@diabeteslifeapp.com (subject “Privacy grievance”)
• Post: Ringmann Global Private Limited, S.F 192, Airy Garden, Ravuthur Pirivu, Kannampalayam, Mettupalayam, Coimbatore – 641402, Tamil Nadu, India

We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Contact

Questions about your privacy? Email support@diabeteslifeapp.com.