GlucoseTracker privacy policy
GlucoseTracker is a personal blood-glucose logbook made by Nazmul Haque (Soft Git). It keeps your log on your phone. This page describes what the app actually stores and what it does not send anywhere.
What stays on your phone
The app does not create an account and does not upload your log. These things are stored only in the app’s private storage on the device:
- Glucose readings, in a local Room database named
glucose-log.db. Each reading stores the value in mg/dL, the number and unit you typed (mg/dL or mmol/L), the date and time, the meal context, an optional note of up to 280 characters, and, if you upgraded from the older app, the old row id used to avoid copying that row twice. - Your display name and settings, in a local preferences file named
glucose_settings(Android DataStore). That file holds whether you finished the first screen, your display name (up to 40 characters), your chosen unit, light or dark theme, whether you asked for exact reminder timing, your low, high, very low, and very high limits, and your reminders (time, weekdays, label, and whether each reminder is on). - A one-time migration flag, in SharedPreferences (
glucose_migration), so the copy from an older install is not repeated. If an older install is present, the app reads that app’s SharedPreferences (PatientPrefs, keykey_unit) only to decide whether those old numbers were mmol/L or mg/dL, and reads the old local databaseuser-databaseonly to copy its rows. That older file, if it is still on the phone, also stays in app-private storage. - A CSV file you asked to share, written under the app’s cache and removed when it is more than an hour old, when you clear the cache, or when you clear the app’s data.
What the app does not do
The installed app has no internet permission. It does not contain an account system, analytics, crash reporting, advertising, or a billing library. It does not send readings, notes, your name, or settings to the developer or to any other server.
Permissions
The release app asks for only these Android permissions:
- Notifications (
POST_NOTIFICATIONS). On Android 13 and later the app asks for this when you turn reminders on. It is used to show the reminder you created. If you say no, the app does not post that notification. - Run at startup (
RECEIVE_BOOT_COMPLETED). The boot receiver stays off until you have at least one reminder turned on. It then reschedules those reminders after a restart, a clock change, or a time-zone change. It does not send data off the phone. - Exact alarms (
SCHEDULE_EXACT_ALARM). Used only if you turn on exact timing and Android still allows exact alarms for this app. Otherwise a reminder is set in a window of about ten minutes. The app does not use the always-on exact-alarm permission.
AndroidX also adds a signature permission, com.softgit.glucose_tracker.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION, so its own internal receivers are not available to other apps. You are not asked to grant it, and it does not read your log.
The app does not request location, contacts, camera, microphone, photos, advertising id, or broad storage access.
CSV export
A CSV file is created only when you tap Share or Save. Share opens the Android share sheet and gives a temporary read permission to the app you pick. Save writes the file to the folder you pick. GlucoseTracker does not upload that file. Whatever you send it to is then governed by that app or service, not by this policy.
Backup
android:allowBackup is set to false in the merged release manifest. The app does not ship dataExtractionRules or a full-backup rule. Android cloud backup and device-to-device transfer do not copy this app’s data. Export is the way a copy of your readings leaves the phone.
Deleting your data
You can delete one reading in the app. Undo is only available until that message goes away. You can change your display name, unit, theme, limits, and reminders in the app.
To delete the whole log, open Android Settings, then Apps, then GlucoseTracker, then Storage, and clear the app’s data. That removes the Room database, the preferences file, SharedPreferences, cached CSV files, and any leftover older database. Uninstalling the app removes the same private storage. There is no copy on a server for the developer to delete.
Children
GlucoseTracker is not directed at children. It has no account and does not send personal information to the developer, so the developer does not knowingly collect personal information from children. A parent who types a child’s readings into the log keeps those readings on that device only.
Medical disclaimer
GlucoseTracker is a personal logbook only. It is not a medical device and does not diagnose, treat, or prevent any condition. It does not recommend insulin doses or treatment. It is not a substitute for professional medical advice. Range colors are for information only. Always talk to your doctor or care team before changing your treatment. If you have symptoms of very low or very high blood sugar, follow your care plan or seek medical help right away.
Changes
If this policy changes, the page and the effective date above will be updated. The copy at this address is the current policy.
Contact
Nazmul Haque
nazmul.cste07@gmail.com