Privacy Notice

1. Introduction

CarbTrack ("we", "us", "our") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your personal data when you use our App.

2. Data We Collect

We collect and process the following categories of data:

• Health data: glucose readings, carb intake, insulin doses, diabetes type, and related health metrics you enter
• Profile data: your preferences, settings, and onboarding choices
• Device data: device type, operating system version, and app version for troubleshooting
• Usage data: anonymous analytics about how you interact with the App

3. How We Use Your Data

Your data is used to:

• Provide core App functionality (carb counting, dose calculations, logging)
• Generate your personal reports and trend charts
• Improve App performance and user experience
• Provide customer support when requested

4. Data Storage & Security

Your health data is stored locally on your device using encrypted storage. If you opt into cloud sync (future feature), your data will be encrypted in transit and at rest using industry-standard encryption. We implement appropriate technical and organisational measures to protect your data.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Cloud service providers (only if you enable sync) — under strict data processing agreements
• Analytics providers — anonymised, aggregated data only
• Law enforcement — only when required by law

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

7. Data Retention

Your data is retained on your device for as long as you use the App. If you delete the App, all locally stored data is removed. Cloud-synced data (when available) will be retained for up to 30 days after account deletion, after which it is permanently erased.

8. Children's Privacy

The App is not intended for use by children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will delete it promptly.

9. Third-Party Services

The App may integrate with third-party services (e.g., health platforms, food databases). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

10. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of significant changes through the App. Your continued use after changes constitutes acceptance of the updated Notice.

11. Contact Us

For privacy-related enquiries or to exercise your rights, contact us at waleed@allaudintech.com.