Consumer Health Data Privacy Policy

Who this covers

BEET BUDDY is run by Chris Campbell, an individual in Buckley, Washington, USA. Contact contact@beetbuddy.app. Beet Buddy is a project in development, tested privately and not available to download yet. This policy covers the Stay in the loop list on this website and the Beet Buddy app as it's tested privately. It's written for Washington's My Health My Data Act, and it applies to everyone, wherever you live. Our general privacy policy covers everything else.

What health information we collect, and why

From the Stay in the loop list

If you're a Beet, or both:

• That you live with type 1 diabetes. That alone shows a health condition.
• Your diabetes tech: which CGM you use, how you take insulin, and, for some answers about insulin such as a pump without automation, which pump. If you choose Other, the short name you type.
• A private planning group our server works out from your phone, CGM and insulin answers, to count which setups to plan for. It isn't shown to you and never decides whether you hear from us. It's an inference about your health, so we treat it the same way.
• If you choose to help shape Beet Buddy after you finish: how you share your glucose today and with how many people.

If you're a Buddy only, you give us no health information about yourself. We ask your relationship to the person you support, and nothing about that person. Choosing “Parent or guardian of a child” does tell us that a child has type 1 diabetes. We collect no details about the child: no name, age or health details.

If a Buddy chooses to help shape Beet Buddy after they finish, they can tell us how they see their person's glucose today, such as which app, and how many people that person would share with. That says nothing about the Buddy's own health, and we ask nothing else about the other person.

Everyone also gives an email address, a phone type and where they live, and may add optional answers (phone model, smartwatch, what they'd want most, how they heard about us). Linked to a Beet's answers, these are part of that Beet's health information too.

If you join by email instead, we keep what you write to us in the same way.

Why: to plan a future beta and understand who Beet Buddy is for, and to email you if a beta opens. For planning we look at totals only. It's never sold, never shared with anyone else, and never used for marketing. We never ask for glucose values, doses or other readings, and we ask you not to send them.

From the app

• Glucose readings, their trend and their age.
• Insulin on board, only if the Beet turns it on.
• Pod and sensor start times, low events, and carb entries the Beet adds to a low (optional).
• Nudges, including the reading a Beet's Nudge carries.
• Low check-in answers, and what a Beet chooses to share with each Buddy.
• Whether you're a Beet or a Buddy, and who you're linked to.
• Last 7 days summaries our server works out from a Beet's readings: time in range, lows, highs and patterns. These are inferences about health, so we treat them the same way.
• Feedback reports you send from the app, and the screenshots you choose to attach, which can show health information.

Why: to show the Beet's information to the Beet and to the Buddies they choose, and to raise the alerts those Buddies set. Nothing else.

Where it comes from

• You, when you fill in the sign-up form, email us, or use the app.
• The Beet's own devices and apps: readings from their CGM through xDrip+ on their phone (or a Nightscout site of their own, if they connect one), and insulin on board from the Omnipod 5 app's notification on their phone.
• Our own server, which works out the Last 7 days summaries from those readings.

We don't buy health information, and we don't get it from anyone else.

What we share, and with whom

• With the Buddies a Beet chooses, in the app: the readings and other information that Beet shares with them. That's the service the Beet asks for, and the Beet can remove a Buddy at any time.
• With service providers that store or carry it for us, under their contracts with us, never for their own use:
  • Cloudflare stores the Stay in the loop list, serves this website, carries the app's connection to our server and forwards email sent to contact@beetbuddy.app.
  • DigitalOcean hosts our server in the United States, where app data is stored.
  • Google delivers app notifications (they carry only a message ID, never health information) and holds the inbox that contact@beetbuddy.app forwards to.

Beet Buddy uses no AI service. Our summaries, including Last 7 days, are made by our own rule-based code. Old meal photos and Log entries (meals, exercise and notes) from a retired feature are still stored on our server. We don't use them, and we're deleting them this week.

We have no affiliates. We never sell health information, never use it for ads, and never share it with anyone else, unless the law requires it.

Your consent

If you're a Beet, or both, the last step of the Stay in the loop list asks for your OK in its own box, which is never ticked for you: “Use my CGM and insulin answers to help plan the beta. I can ask for them to be deleted anytime.” Washington's health-data law asks for a separate OK for health information, so we ask for it on its own. Without it we can't add you. A Buddy-only sign-up isn't asked, because it holds no health information about the Buddy.

Deleting your answers, any time

Email contact@beetbuddy.app from the address you signed up with and ask us to delete your CGM and insulin answers, or your whole sign-up. You don't need to give a reason. We delete them, ask our service providers to delete any copies, and reply to tell you it's done, within 45 days at most and usually much sooner. Withdrawing your consent works the same way: we stop collecting and delete what we have.

Your rights, and how to use them

Email contact@beetbuddy.app from the address you signed up with, or the Google account you use in the app. Tell us what you'd like:

• Confirm and see. Whether we hold your health information, a copy of it, and the list of everyone it's been shared with (above), with how to contact them.
• Delete. We delete it, and ask our service providers to delete it too. Backups are deleted within 30 days.
• Withdraw consent to any further collection.

We check that the request really comes from you, usually by replying to that address. We answer within 45 days. If we need longer, we'll tell you why within those 45 days and take at most 45 more. It's free, up to twice a year.

If we say no

We'll tell you why. You can appeal by replying with "Appeal" in the subject line. We'll decide within 45 days and explain our decision in writing. If we turn down your appeal, you can contact the Washington State Attorney General's office (atg.wa.gov) to complain.

Using your rights never changes how we treat you.

How long we keep it

• The Stay in the loop list: until it's no longer needed for these plans, then deleted. Sooner if you ask: email contact@beetbuddy.app to be removed.
• App information: until you delete your account.
• Old meal photos and Log entries from a retired feature: being deleted this week.

Changes

If this policy changes, we update the date above. We won't use health information for a new purpose without asking you first.