Privacy Policy

1. Introduction

CarbSathi ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application and website (the "Service").

By using CarbSathi, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account Information: Email address (optional)
• Health Data: Meal history, body weight, nutrition preferences, dietary goals
• Usage Data: Food preferences, favorite foods, meal templates

2.2 Automatically Collected Information

• Device Information: Device type, operating system
• Usage Information: App features used, time spent
• Location Data: Not collected (we don't track location)

2.3 Third-Party Services

LibreLinkUp Integration: If you connect FreeStyle Libre, we access glucose readings through LibreLinkUp API (with your explicit consent).

3. How We Use Your Information

We use your information to:

• ✅ Provide Services: Track nutrition, analyze meals, provide health insights
• ✅ Improve App: Analyze usage to improve features
• ✅ Personalize Experience: Remember your preferences
• ✅ Send Notifications: Alert you about glucose levels (if enabled)
• ✅ Support: Respond to your inquiries

4. Data Storage & Security

4.1 Where We Store Your Data

• Primary Storage: Supabase (cloud database) for synced data
• Local Storage: Your device (localStorage) when you use the app without cloud sync

4.2 Security Measures

We implement industry-standard security measures:

• ✅ Encryption: Data is encrypted in transit and at rest by our providers
• ✅ Access Control: Access is restricted and protected
• ✅ Authentication: Secure login system (when enabled)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Sharing

We do NOT share your personal information with third parties, except:

1. Service Providers: Supabase (database hosting), Railway (app hosting), SendGrid (email service) - These providers are bound by confidentiality agreements
2. Legal Requirements: If required by law or court order, to protect our rights or safety, to prevent fraud or abuse
3. With Your Consent: We will only share data if you explicitly consent

6. Data Retention

We retain data only as long as needed to provide the Service and improve product quality during beta. You can request deletion at any time.

7. Your Rights (Under DPDPA)

You have the right to:

1. Access: Request a copy of your data
2. Correction: Correct inaccurate data
3. Deletion: Delete your data ("Right to be Forgotten")
4. Portability: Export your data in machine-readable format
5. Withdraw Consent: Withdraw consent at any time
6. Object: Object to processing of your data

To exercise these rights, contact us at: support@carbsathi.com

8. Children's Privacy

CarbSathi may be used by minors only under the supervision of a parent or guardian. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately.

9. Cookies & Tracking

• Cookies: We use essential cookies for app functionality
• No Third-Party Tracking: We don't use advertising trackers
• Opt-Out: You can disable cookies in your browser settings

10. International Data Transfers

• Data Location: We store data with trusted providers; details are available in app settings or upon request
• Transfers: Data may be processed where our providers operate in order to deliver the Service
• Compliance: We follow applicable data protection principles and laws

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email (if you've provided email)
• In-app notification

Your continued use of the Service after changes constitutes acceptance of the new Privacy Policy.

12. Medical Disclaimer

IMPORTANT: CarbSathi is an educational tool only. It does not provide medical advice, diagnosis, or treatment. Insulin calculations are estimates only and should not replace professional medical guidance. Always consult your doctor or diabetes educator before making insulin dosing decisions.

We are not responsible for any health outcomes resulting from use of this app.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

• Email: support@carbsathi.com
• Address: [Your Business Address]
• Phone: [Your Phone Number]

14. Governing Law

This Privacy Policy is governed by the laws of India and the Digital Personal Data Protection Act (DPDPA) 2023.