DiabCam Privacy Policy

1. Data Controller

The controller of your personal data is Corebell. We care about your privacy and the security of your data. Please direct any questions to: corebelldev@gmail.com.

2. Medical Disclaimer

DiabCam is not a medical device. AI calculations (e.g., Carbohydrate Exchange - WW, Protein-Fat Exchange - WBT) are for educational and estimated purposes only. Before administering insulin or changing treatment, the user must verify the data and consult with a physician. The app is a supporting tool and cannot replace professional medical advice.

3. Health Data Handling & Scope of Collected Data

We collect the following data to ensure the full functionality of the application:

• Account Data: Email address required for registration and access recovery.
• Health & Meal Data: Your set goals, preferences, metabolic parameters, and saved meal history (ingredients, weight, calculated nutritional values).
• Confidentiality: We process your health data and meal parameters only for the purpose of providing the diary service. We do not share this data with third-party companies or advertisers.
• Google API Services: Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Multimedia: Camera access is granted only with the explicit consent of the user and is used only at the moment of taking a photo of a meal for AI analysis. Photos are not collected in the background.
• Technical Data: System logs, device type, and OS version for diagnostic purposes.

4. Purpose and Method of Processing

Your data is processed based on your explicit consent (Art. 9(2)(a) GDPR) for:

• Analyzing the nutritional value of meals and determining indicators (GI, GL, WW, WBT) using AI.
• Creating summaries and statistics in your meal diary.
• Synchronizing data across your devices (via Google Firebase).
• Improving image recognition algorithms.

5. Data Sharing

Your data is entrusted only to trusted technological partners for service operation:

• Google Firebase: Hosting, database, and authentication.
• AI Providers: Processing images for analysis (data is transmitted via encrypted connections).
• No Third-Party Sales: We never sell or share your data for marketing or advertising purposes.

6. Data Retention & Deletion

• Retention: Your data is stored as long as your account is active.
• Deletion: You can delete your account and all associated data at any time through the application settings or by sending a request to corebelldev@gmail.com. Upon request, all your data will be permanently removed from our servers within 30 days.

7. Security

We apply high security standards, including SSL/TLS encryption and secured databases. Access to your account is protected by Google authorization or a secure password.

8. Your Rights (GDPR)

Under GDPR, you have the right to access, rectify, or delete your data, restrict its processing, and withdraw your consent at any time.

9. Children's Privacy

The application has a PEGI 3 rating, which means that its content is safe for all age groups. However, we do not knowingly collect personal data from children under the age of 16 without the consent of their legal guardians. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, please contact us at corebelldev@gmail.com – we will immediately delete such information.