Embedded Files
Privacy Policy
Who We Are
The "sweet.spot" mobile application (the "App") is operated by Milán Vanczák ("we", "us", "our"), who acts as the data controller in respect of the processing described in this Policy.
Scope of This Policy
This Policy explains what information the App collects and how that information is used, stored and shared, including health-related data (glucose, insulin and carbohydrate intake). It applies to all users of the App and is available within the App and on the store listing page.
Information We Collect
Account information
When you sign in with Google or Apple, we receive your user identifier, your email address and basic authentication provider details (such as the provider type). We also store your language preference and the consent choices you make in the App settings, including whether you opt in to receive email communications from us.
Health data
Your glucose readings, carbohydrate entries, insulin doses and values derived from them (for example active insulin and active carbohydrate estimates) are stored locally on your device. We do not store this data on our servers unless you use one of the optional features described below.
Cloud backup
If you choose to create a cloud backup or enable Automatic Daily Backups, a copy of your logged health data and certain app settings is uploaded to a private, account-linked cloud storage operated by Google. Backups are protected by Google's cloud security measures. Each new backup replaces the previous one. Manual backups cover the last 14 days; Pro users may also back up their full history (90 days). You can delete your backup or disable automatic backups at any time, and your backup is deleted if you delete your account.
Health platforms and Nightscout
If you activate them, data may be exchanged with Apple Health (iOS) or Health Connect (Android) after you grant permission, and with your own Nightscout instance, which we do not operate. Revoking permission or disconnecting stops further data exchange.
CGM cloud account
If you connect the cloud account you hold with your CGM sensor manufacturer, the App can read glucose data from it. You sign in with your own account for that service; we never see those sign-in credentials, and the App does not write data back to it. Disconnecting the account stops further reading.
Therapy Settings Tuner
If you use the Therapy Settings Tuner, the App sends aggregated statistics derived from your last 14 days of logged data (such as average glucose, average daily insulin dose, weight, height, time-in-range and glucose variability) to a calculation service operated by Diabetesnet.com, which returns recommended therapy settings shown in the App. No name, email address or account identifier is transmitted, and your date of birth is used only to derive an age category. As with any internet request, the service may see your IP address. Data is only sent when you actively run the calculation.
Subscription and purchase data
We use RevenueCat to manage subscriptions. RevenueCat and the app store process transaction receipts and identifiers; we never receive raw payment card data.
Diagnostics and usage
Crash reports and error logs (Crashlytics) and minimal automatic analytics such as app installs and opens, in each case only while they are enabled in the App settings. Health data is never included.
Device and technical information
Device model, operating system version, app version, locale, timezone, approximate region, installation and update times, app preference flags, subscription status, and basic session information (such as device name and model) used to limit the number of concurrently signed-in devices.
Support communications
Any messages or logs you voluntarily send to us.
How We Use Information
To provide and maintain the App's core features, such as logging, visualization and statistics.
To calculate therapy-related estimates (such as active insulin) on your device.
To provide cloud backups and restore them when you request it.
To provide Therapy Settings Tuner recommendations when you request them.
To synchronize data with the third-party services you have authorized (Nightscout, Apple Health / Health Connect, or your CGM sensor manufacturer's cloud account).
To authenticate you and manage subscriptions.
To maintain the stability and security of the App (crash diagnostics and minimal analytics).
To prevent fraud and abuse, comply with legal obligations, and enforce our Terms.
Legal Bases for Proessing (EEA/UK)
Contract: necessary to provide the App and its features when you use it.
Legitimate interests: security, crash diagnostics and minimal analytics, balanced against your rights.
Consent: enabling cloud backup; using the Therapy Settings Tuner; writing health data to Apple Health / Health Connect; Nightscout synchronization; connecting your CGM sensor manufacturer's cloud account; and manual data entry. You may withdraw consent at any time by disabling the feature, deleting entries or uninstalling the App.
How We Share Information
We do not sell your personal data. We share information only as described below:
Service providers: Firebase (authentication, cloud storage for account data and backups, analytics, crash reporting) and RevenueCat (subscription management).
Third-party services you choose to use: Nightscout (your own instance), Apple Health / Health Connect (where authorized), your CGM sensor manufacturer's cloud service (read-only, if you connect it), and Diabetesnet.com (only when you run the Therapy Settings Tuner).
Identity providers: Google and Apple, for sign-in.
Legal authorities, where required by law, and professional advisers under duties of confidentiality.
Data Retention
The most recent 90 days of health data are kept on your device; older entries are automatically deleted. You can also delete entries earlier yourself, clear app data or uninstall the App at any time.
Cloud backups are retained until you delete them or delete your account; backups are replaced by each new backup.
Account metadata is retained while your account is active and is deleted after a verified deletion request, unless a legal obligation requires otherwise.
Crash reports and analytics data follow vendor retention periods in aggregated form.
Data Security
We apply appropriate technical and organizational measures, including least-privilege access, encrypted (HTTPS) transport, and the exclusion of health data from diagnostics and analytics. Cloud backups are stored in your account-linked private cloud storage. No method of transmission or storage is completely secure; please keep your device and operating system up to date.
Children
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13; if we learn that we have, we will delete it. Parents or guardians may contact us.
Your Rights
Depending on your location, you may have the right to access, correct, delete or obtain a copy of your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your supervisory authority. Contact us at hello@sweetspot.hu. We may ask you to verify that you control the account (for example, via access to the sign-in email) before acting on a request.
Managing and Deleting Your Data
Manage or delete your cloud backup and toggle Automatic Daily Backups in the App's Backup & Restore settings.
Revoke Apple Health / Health Connect permissions in your device settings.
Disconnect Nightscout or remove its URL/API key.
Disconnect your CGM sensor manufacturer's cloud account in the App's data source settings.
Delete individual entries in the App.
Delete your account in the App. This removes account metadata and your cloud backup. It does not automatically delete data already written to Nightscout or Apple Health / Health Connect.
Third-party Services
The App relies on third-party services whose own policies also apply: Firebase, RevenueCat, Diabetesnet.com, and the cloud service of your CGM sensor manufacturer if you connect it. We encourage you to review their privacy policies.
Changes to This Policy
We may update this Policy from time to time. We encourage you to review it periodically; continued use of the App after changes take effect constitutes acceptance of the updated Policy.
Google Sites
Report abuse