Privacy Policy

Last updated: October 21, 2026

SweetLife is a diabetes app, so most of what you put into it is health information. This policy explains what we collect, where it's kept, who else handles it, and how to delete it. We don't sell your data, we don't show ads, and we don't use your health data for marketing.

What we collect

• Your account: your email address, your password (handled by our sign-in provider and never stored in readable form), and the name you enter.
• What you log or import: blood sugar readings, insulin doses, meals and carbs, exercise, daily notes, how you were feeling at a reading, and your A1C history.
• Your profile: diabetes type, how you take insulin and which brands, target range, insulin-to-carb ratio, correction factor, insulin duration, goals, the year you were diagnosed, your devices, and any emergency details you add (emergency contacts, allergies, notes, and your doctor's name and phone number).
• Chug conversations: the messages you send and Chug's replies.
• App activity: streaks and achievements, reminder settings, and a daily count of Chug messages so the free plan's limit can be applied.
• Device details: a notification token so alerts can reach your phone. If you send feedback, your app version, phone model, operating system version and language are attached so we can trace bugs.

We don't collect your location, contacts or photos. The camera is only used to scan food barcodes, and nothing it sees is saved or sent.

Where your data is kept

SweetLife needs an account. What you log is saved on your phone and synced to your account in our cloud database, which is run by Supabase. That keeps your data safe if you lose or change phones, and lets family members you invite see it.

Data travels over encrypted connections, and Supabase encrypts the data it stores. The database only lets each account read its own records, plus records you've chosen to share with followers. Data on your phone is protected by your phone's own security, such as your passcode.

If you connect CareLink, your CareLink username and password are kept in your phone's secure storage (the iOS Keychain or Android Keystore) so the app can reconnect. They are never sent to us.

Chug, the AI assistant

Chug is powered by Claude, an AI model made by Anthropic. We ask for your permission before your first message, and again if what's shared changes. Each time you send a message, it goes through our server to Anthropic together with:

• your first name
• recent blood sugar readings, your 7-day average and time in range
• meals, insulin doses and exercise from the last 24 hours, and your active insulin
• your diabetes type, target range and setup (devices, insulin brands, year diagnosed)

Anthropic uses this to write Chug's reply and does not use it to train its models. Your conversations are saved to your account so they're there when you come back. Clearing the chat in Chug deletes them from your phone and your account. Chug is not a doctor, and its replies are not medical advice.

Apple Health and CareLink

If you turn on Apple Health, SweetLife reads blood glucose from it, and saves the blood sugar readings, insulin doses and carbs you enter in SweetLife to it. If you connect Medtronic CareLink, the app signs in to CareLink from your phone and downloads your pump and sensor readings. Readings from either source are kept in your account like any other reading.

Data from Apple Health is never used for advertising or marketing and is never sold. You can turn either connection off at any time.

Family sharing

You can invite people to follow you. Anyone who accepts your invite can see your blood sugar readings, insulin, meals and exercise, plus your name, diabetes type and target range, and can get alerts when you go low or high. Followers can't see your notes, moods, Chug conversations or setup.

Alerts include your name and the reading, and are delivered through Expo's notification service. To keep followers up to date, our server may send your phone a silent notification that lets the app sync CareLink in the background. You can revoke a follower's access at any time in Family Sharing.

Who else handles your data

We use a few services to run SweetLife, and each gets only what it needs:

• Supabase: our database, sign-in and server. It stores your account and everything you log.
• Anthropic: writes Chug's replies. It receives only what's listed above, and only if you use Chug.
• Expo: delivers notifications and app updates.
• RevenueCat: manages subscriptions. It receives your account ID and purchase history. Apple or Google handles payment, and we never see your card.
• Medtronic: only if you connect CareLink, the app exchanges data directly with CareLink.
• Open Food Facts: when you search for a food or scan a barcode, the search or barcode is sent to look up nutrition. Nothing that identifies you is included.
• Apple: Apple Health data stays on your iPhone and is handled by Apple.

We don't sell your data or share it with advertisers or data brokers, and SweetLife has no advertising or third-party analytics.

Notifications and the widget

Reminders and the morning note are scheduled on your phone. Notification previews and the home screen widget can show readings or reminder text where other people might see them. You can hide previews in your phone's notification settings and remove the widget at any time.

Your choices

• See and export your data: Profile → Export Data, or create a Doctor Report.
• Correct it: edit any entry or your profile in the app.
• Delete it: Profile → Delete Account permanently deletes your account and everything in it from our database.
• Change what's shared: stop using Chug, disconnect Apple Health or CareLink, revoke followers, or turn off notifications.
• Anything else: email [email protected] and we'll help, including with requests to access or delete your data.

How long we keep it

We keep your data while you have an account. Signing out removes it from that phone; it stays in your account for when you sign back in. When you delete your account, your records are deleted from our database straight away, though copies can remain in our database provider's routine backups for a short time until they're replaced. Feedback you've sent is kept, but is no longer linked to you.

Children

SweetLife can be used by people of any age with diabetes. For a child under 13, a parent or guardian should create and manage the account. We don't knowingly collect personal information from a child under 13 without a parent's consent. If you believe that has happened, contact us and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top, and we'll tell you in the app about significant changes. If Chug is ever going to send Anthropic something new, we'll ask for your permission first.

Contact

Questions about your privacy or your data? Email [email protected].