Controller and contact
Data controller: VESCIA DARIO, an individual based in France, who publishes GLUCORE under the Unwellcollective brand. For privacy questions, to exercise your rights or to request deletion, write to ffad@ffadbyunwellcollective.com. Version of this notice: 4 November 2026.
What GLUCORE is for
GLUCORE is a personal diary for people with type 2 diabetes: you record blood glucose, meals, medications and doses, wellbeing, exercise and reminders, and you can create a report. On request, artificial intelligence estimates the carbohydrates and calories of a photographed meal. Estimates can be wrong: always check them and do not use them to decide treatments or doses. GLUCORE does not make diagnoses and does not replace your doctor or pharmacist.
Data on your phone and permissions
Your profile, readings, meals, medications, wellbeing entries, emergency contacts and preferences are stored on your phone in encrypted storage. Access is protected by your PIN and, if you enable it, by the fingerprint or face unlock managed by Android. GLUCORE asks for permissions only when needed: camera and gallery for a meal photo, Bluetooth to look for a meter, notifications for reminders. On Android 11 and earlier, Bluetooth scanning also requires the location permission: GLUCORE does not read or store your location. This version does not use the microphone.
Cloud account
After you unlock the app, if a connection is available, GLUCORE creates a technical cloud account on Supabase identified by a random code (UUID). No email address is needed: the account is pseudonymous, not anonymous. If you add and confirm an email address and a password, you can recover the same account on another phone. The app PIN and the cloud password are separate. Without a confirmed email, a lost account cannot be recovered.
Meal photos and artificial intelligence
Premium feature. GLUCORE asks for your confirmation before each upload. The photo travels encrypted to Supabase server functions (European Union) and from there to OpenAI (United States), which returns the estimate. GLUCORE does not store the photo on its servers and deletes the temporary copy on your phone. Under OpenAI's terms for API services, submitted data is not used to train models and may be kept for up to 30 days for abuse monitoring. Avoid photographing faces or documents. For each analysis we keep the date, type, outcome and usage, to apply the daily limit.
Reporting an AI result
If an AI result seems offensive, dangerous to health, inaccurate or problematic for another reason, you can report it from the app. You see a full preview before sending. We send the reason, the language, the app version and the text and values of the result (at most 24 KB), linked to your cloud account: they may contain health data. We do not send photos, audio or comments. Reports are used to check the safety and accuracy of results; they do not necessarily receive an individual reply. Limit: 20 reports per account per day.
Subscriptions and gift codes
Premium subscription payments are handled by Google Play: GLUCORE does not receive your card details. Our server checks the subscription status with Google and keeps the product, period, expiry date and a fingerprint of the purchase token, so that the same purchase cannot be used by several accounts. Premium gift codes require an account with a confirmed email: we keep a fingerprint of the code and the activation receipt with its duration and dates. Deleting your account does not cancel a Google Play subscription: cancel it in the Play Store.
Providers and transfers
Supabase (database, authentication and server functions; data hosted in Ireland, European Union) and OpenAI (meal photo analysis; United States) process data on our behalf; Google handles payments through Google Play under its own terms. Transfers to the United States rely on the European Commission's standard contractual clauses included in the providers' agreements. All communications are encrypted (HTTPS). GLUCORE does not sell data, does not show ads and does not use tracking or analytics tools.
How long we keep data
Data on your phone stays until you delete it or uninstall the app. Cloud data, AI analysis counters, reports, and subscription and gift data are kept as long as the account exists. Under Profile → Delete my account you delete the cloud account with all linked data and the profile on your phone. Only a technical deletion receipt (the account's random code, date and outcome), aggregate counters without identity and, to prevent fraud, the pseudonymous fingerprint of a Google Play purchase that has already been used remain. Copies on other devices and reports already sent to others are not deleted.
Your rights
Under the General Data Protection Regulation (GDPR) you can request access, rectification, erasure, restriction and portability of your data, object to processing, and withdraw your consent at any time without affecting earlier processing. Write to ffad@ffadbyunwellcollective.com; to request deletion without the app, use the subject “GLUCORE — account deletion” and include your confirmed email, if any. Do not send passwords, PINs, codes or health data. We reply within one month. You can lodge a complaint with the CNIL (www.cnil.fr) or with the authority of your country.
Minors
GLUCORE is intended for adults. We do not knowingly collect data from minors: if you believe a minor has used the app, write to us and we will delete the data.
Legal bases and changes
We process health data on the basis of your explicit consent (GDPR Art. 9(2)(a)), which you give when you confirm a sync, a photo upload or a report; other data is needed to provide the service you request (Art. 6(1)(b)) and to prevent abuse and fraud (legitimate interest, Art. 6(1)(f)). If this notice changes significantly, we will tell you in the app. Version: 4 November 2026.