Translation for your convenience. The German version is legally binding.
2. The GlucoMatch app – in brief
The app's full privacy policy is at glucomatch.com/privacy.html – identical to the version shown in the app under Settings (German version: glucomatch.com/datenschutz.html). The key points:
- Everything stays on your device: meals, photos, blood sugar and insulin values and settings are stored only locally. There's no user account and no server where we store your data. Uninstalling the app deletes it.
- AI photo analysis: a meal photo you have analyzed is sent to Google (Gemini) or – if you choose it in the settings – to OpenAI.
- Nightscout (optional): the app retrieves glucose values directly from your own Nightscout site and uploads nothing there. The data does not pass through us.
- Ads (Google AdMob): Google, as an independent controller, processes among other things your device's advertising ID, device information and your truncated IP address. Google does not receive health data or photos. In the EEA and the UK, the app first asks for consent to personalized ads; you can change this anytime in the app under “Ad privacy options”.
- “Ad-free” subscription (optional): purchase and billing run entirely through Google Play or the App Store. We receive no payment data; the app only asks the store whether a subscription is active.
- Security: API keys and the Nightscout secret are stored encrypted in your device's secure storage; all transfers use HTTPS.
3. Former waiting list for the iPhone version
Until the iPhone version launched in October 2026, you could join a waiting list on this website with your email address. The form no longer exists. We use addresses already on the list solely to inform you about the iPhone launch and GlucoMatch updates.
We use the service provider Brevo (Sendinblue SAS), 106 boulevard Haussmann, 75008 Paris, France, for sending. Brevo processes the data on our behalf on servers within the EU. You can unsubscribe at any time via the link in every email or by writing to us.
Legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time with effect for the future.
4. This website: hosting, server logs and embedded services
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, the server stores technically necessary access data (IP address, date and time, page requested, browser and operating system details, referrer) in server logs. They are used solely for secure operation and troubleshooting and are deleted automatically after a short time.
To display the page, your browser loads files directly from the following providers, who receive your IP address in the process:
- Google Fonts (font; Google Ireland Limited, Dublin, Ireland / Google LLC, USA)
- Tailwind CSS via cdn.tailwindcss.com (styling; Tailwind Labs Inc., USA)
- Font Awesome via cdnjs (icons; Cloudflare, Inc., USA)
No cookies are set for analytics or advertising and no tracking is used. Your language choice on this website (German/English) is remembered only in your browser's local storage and is not transmitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional and consistently displayed website). For providers in the USA, data may be transferred to a third country; this is based on the EU-US Data Privacy Framework or the EU standard contractual clauses.
5. Your rights
You have the right at any time to:
- Access the personal data we store about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data ("right to be forgotten", Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR) & data portability (Art. 20 GDPR)
- Withdraw consent you have given, with effect for the future
Just send an informal message to glucomatch@digital-workshop.at. You also have the right to lodge a complaint with the competent supervisory authority (Austrian Data Protection Authority, www.dsb.gv.at).