Glycio — Privacy Policy

📋 Information We Collect

We collect only what is necessary to provide the app's functionality.

Account Information

• Username and email address (when you register)
• Password (stored securely as a hashed value — we never store plain text passwords)
• Display name and daily sugar goal

Health & Usage Data

• Meals you log, including food name, sugar content, and calories
• Your daily sugar intake totals and streak history
• Water intake logs
• Craving logs (food, intensity, triggers, resistance outcome)

Device Permissions

• Camera — used only for barcode scanning. Photos are never saved or uploaded.

⚙️ How We Use Your Information

• To provide and sync your meal logs, streaks, and goals across sessions
• To power the AI Coach feature (your recent stats are sent as context — no personal identifiers)
• To display your weekly and monthly progress charts
• To maintain your account and authenticate you securely

🔗 Third-Party Services

Glycio uses the following third-party services to deliver its features:

Open Food Facts

When you scan a barcode, we query the Open Food Facts public database to retrieve nutritional information. The barcode number is sent to their API. No personal data is shared. See their privacy policy at openfoodfacts.org/privacy.

Anthropic Claude AI

The AI Coach feature sends your recent sugar stats (today's total, streak count, weekly meal count, craving resistance rate) and your message to Anthropic's API to generate a response. No personally identifying information such as your name, email, or exact meal history is included. See Anthropic's privacy policy at anthropic.com/privacy.

Railway (Backend Hosting)

Our backend server is hosted on Railway. Your account data and meal logs are stored on a secure server with a private database. See Railway's privacy policy at railway.app/legal/privacy.

🔒 Data Storage & Security

• All data is transmitted over HTTPS (encrypted in transit)
• Passwords are hashed using industry-standard algorithms before storage
• Authentication uses JSON Web Tokens (JWT) with expiration
• Your meal and health data is stored on a private database accessible only to your account

While we take reasonable precautions to protect your data, no system is 100% secure. We encourage you to use a strong password.

🗓️ Data Retention

Your data is retained for as long as you have an active account with Glycio.

If you delete your account (available in the app under Profile → Delete Account), all your personal data including meals, streaks, cravings, and account information is permanently deleted from our servers within 30 days.

✅ Your Rights

You have the right to:

• Access your data — all your logs are visible directly in the app
• Export your data — use the Export Data option in Profile settings
• Delete your account and all associated data — available in the app under Profile → Delete Account
• Correct your information — you can update your goals and profile at any time

👦 Children's Privacy

Glycio is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes your acceptance of the updated policy.

For significant changes, we will notify you within the app.