Privacy Policy

This Privacy Policy describes how KRONIK APP (“KRONIK APP”, “we”, “us”) collects, uses and shares information when you use the mobile application Blood Sugar - Diabetes App (the “App”), which lets you log blood glucose readings and meals and ask an AI assistant about them. By downloading or using the App you agree to this Policy.

Blood Sugar is not a medical device, and it does not provide medical advice, diagnosis or treatment. It is a personal logging tool. See our Terms of Use for the full disclaimer.

1. No account, no name required

The App does not have user accounts. You do not sign up, and we never ask for your email address, phone number or contacts. Giving the App your name during setup is optional and used only to greet you inside the App — it is stored solely on your device and is never sent to us or to anyone else.

2. What stays on your device, in full

Your glucose readings, meal entries, chat history, reminder settings and any name you gave the App are stored only in the App’s local storage on your device. None of it is uploaded to us, backed up to our servers, or visible to us in any form. Deleting the App, or using its “Delete All Data” option, removes it. PDF reports are generated on your device and only leave it if you choose to share or save one yourself.

3. What a chat question sends, and why

The App’s AI Chat is answered by a real AI model, not a script running on your phone. This is the one feature where health information leaves your device, so we are precise about exactly what that involves — and the App tells you the same thing on screen and asks for your agreement before your first question is sent. If you don’t agree, nothing is sent and the rest of the App keeps working.

1. When you ask a question, the App sends your question text and a derived summary of your readings — things like recent averages, how many readings fall in each range, a trend direction, and your last 14 readings — to our own backend service, which we operate on Cloudflare’s network.
2. Your name is never included, whether or not you gave the App one.
3. Our backend forwards your question and that summary to Anthropic (maker of the Claude AI model) to generate a reply, under rules that keep it from giving diagnoses or medication/dosing advice and that tell it to say plainly when a described reading or symptom needs urgent medical attention.
4. Nothing about your chat is cached or stored on our servers. Each answer is generated for that one question and then the request is done. Your side of the conversation — the questions and answers — is saved only in the App, on your device, same as your readings.

If AI Chat is not configured for your build of the App (for example, during development), questions are answered instead by a small set of rules running entirely on your device, and nothing is sent anywhere.

4. Other information we collect

• Usage & diagnostics data. How you interact with the App (features used, screens, taps), device model, OS and app version, language, general region, and crash / performance logs. This does not include your glucose or meal data.
• Attribution & device identifiers. Technical identifiers used to tell us which advertisement or campaign led you to install the App. On iOS we access the advertising identifier (IDFA) only if you grant permission through Apple’s App Tracking Transparency prompt.
• Advertising data. If you are on the free plan, the App may show ads served by Google AdMob, which can use device and advertising identifiers to select and measure ads. Ad revenue figures (never your personal data) are shared with our analytics and attribution providers so we can tell which campaigns are worth running.
• Push notification token. If you allow notifications, Firebase Cloud Messaging gives the App a token so we can send occasional messages (for example, offers). Daily logging reminders you set yourself are scheduled on your device and do not involve our servers.
• Subscription data. Your subscription status (for example: trial active, plan, renewal state). Payments are handled by Apple or Google — we never receive your card number.

5. How we use information

• To generate AI Chat replies to the questions you ask.
• To manage your subscription and unlock premium features.
• To analyze and improve the App, fix crashes, measure which campaigns bring users, and prevent abuse of the AI Chat service.
• To comply with legal obligations and enforce our terms.

6. Third-party services

We use a small number of providers that process data under their own privacy policies, only as needed to run the service:

• Anthropic — generates AI Chat replies from your question and the derived summary described in section 3.
• Cloudflare — hosts the backend that relays AI Chat requests.
• Google Firebase (Analytics & Crashlytics) — usage analytics and crash reporting.
• Google AdMob — serves ads to free-plan users.
• Adapty — validates purchase receipts and manages subscription state.
• Singular — install and campaign attribution.
• Meta (Facebook App Events) — measures app installs and opens from Meta ad campaigns. Purchase events are forwarded server-side by Adapty; your health data is never sent.
• Google Analytics for Firebase & Firebase Cloud Messaging — usage analytics (including subscription events forwarded by Adapty) and push notifications.
• Apple App Store / Google Play — distribution, payments and subscriptions.

7. Sharing your information

We share data with the providers described above, when required by law or a valid legal request, and as part of a business transfer (e.g. merger or acquisition). We do not sell your personal information, and we do not use your glucose or meal data for advertising of any kind.

8. Health data & special-category data

Glucose readings and meal entries are health information. Under GDPR they are a “special category” of data (Art. 9). We process the AI Chat summary described in section 3 only when you choose to ask a question — that action, taken after the in-App notice explaining what will be sent, is your explicit consent to that specific transfer. You can use the rest of the App, including logging readings and meals, without ever triggering it.

Blood Sugar is not provided by a HIPAA covered entity (a healthcare provider, health plan or clearinghouse), so HIPAA does not apply to it. Your information is instead protected by this Policy and by applicable consumer privacy law, including health-data rules such as Washington’s My Health My Data Act and the CCPA/CPRA’s treatment of sensitive personal information, where they apply to you.

9. Data retention

• Readings, meals, chat history, reminders, your name: on your device only, until you delete them or remove the App. We hold no copy.
• AI Chat requests (on our backend): not stored — processed for the single request and discarded.
• Analytics, diagnostics and purchase data: kept only as long as necessary for the purposes above or as required by law, then deleted or anonymized.

10. Your rights & choices

• Your data: delete any entry, or everything at once with “Delete All Data”, from inside the App at any time.
• Permissions: manage notification and tracking permission in your device settings at any time.
• Analytics consent (EU/EEA, UK, Switzerland):in these regions analytics and attribution tools that read device identifiers stay off until you allow them in the App. You can change your choice any time in Settings → Analytics & attribution.
• Subscriptions: manage or cancel any time in your device’s account settings (App Store or Google Play) — see our Terms of Use for step-by-step instructions.
• EU/EEA & UK (GDPR): you may access, correct, delete, restrict or object to processing and request portability. Because your health data lives only on your device, most of this you can already do yourself, instantly.
• California (CCPA/CPRA): you may request access or deletion. We do not sell or share personal information for cross-context behavioral advertising.
• Türkiye (KVKK): you have the rights set out in Law No. 6698.

To exercise any right, contact support@kronikapp.com. Because we hold no account and no copy of your health data, in most cases the data you want removed is on your own device, and you can remove it yourself, immediately.

11. Children’s privacy

The App is a general-audience app and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child provided us data, contact us and we will delete it.

12. Security

Traffic between the App and our backend is encrypted in transit. API keys for third-party AI services are held on our server and never shipped inside the App. We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, but we continuously review our safeguards.

13. International transfers

Our providers may process data in countries other than yours, including the United States. Where required we rely on appropriate safeguards for such transfers.

14. Changes

We may update this Policy from time to time. The current version is always posted here with a revised “Last updated” date.

15. Contact

Questions about this Policy? Contact us at support@kronikapp.com.
KRONIK APP — 42 Maslak B Blok Sitesi D:546 No:4, Maslak Mah. AOS 55. Sok., Sarıyer / Istanbul