Privacy Policy
Effective date: June 2, 2026 · Last updated: June 2, 2026
This Privacy Policy explains how INBO APP, LLC (“INBO,” “we,” “us,” “our”) collects, uses, and shares information when you use the INBO mobile application (“the App”) and related services (together, the “Service”).
We designed INBO to help people manage Type 1 diabetes. That means we handle sensitive health information. We take that responsibility seriously and have written this policy to be as plain and accurate as we can.
We only collect the data necessary to provide insulin guidance, safety alerts, and logging features. We do not use your data for targeted advertising.
If anything here is unclear, email us at support@inbo-app.com.
1. Who we are
INBO APP, LLC is a Florida limited liability company.
- Legal entity: INBO APP, LLC
- Address: 1945 Overlook Drive, Mount Dora, FL 32757, United States
- Contact: support@inbo-app.com
For users in the EU, UK, or other jurisdictions that require a “data controller” designation: INBO APP, LLC is the controller of personal data processed through the Service.
2. Who may use the Service
The Service is intended for people 13 years of age or older. By using INBO you confirm you are at least 13. If you are a parent or guardian and want to log data about a child under 13, you may do so using your own account — the account, and all data in it, belongs to you.
We do not knowingly collect personal information from anyone under 13 through a child-owned account. If we learn we have done so, we will delete it. If you believe a child under 13 has created an account, email support@inbo-app.com and we will remove it.
3. Information we collect
3.1 Information you give us
- Account information. Email address. Display name if you choose to provide one.
- Health information. Blood glucose readings, insulin doses (units, type, timing), meals and carbohydrate estimates, exercise notes, free-text notes about your health. You enter this yourself.
- Emergency contact information. When you enable the Emergency Contact feature, you provide the name, phone number, and relationship of one or more people you want us to be able to message on your behalf during a potential hypoglycemic emergency. See Section 8 for how we handle this.
- Settings and preferences. Target glucose ranges, insulin-to-carb ratios, correction factors, notification preferences, and similar configuration.
3.2 Information collected automatically
- Device and technical information. Push notification token, device model, operating system version, app version, and a randomly generated device identifier. We use this to deliver notifications and diagnose technical issues.
- Service usage logs. When the app communicates with our server, we log the request (timestamp, endpoint, response status) for debugging, security, and abuse prevention. These logs are kept for a limited time — see Section 6.
3.3 Information from third parties
- Subscription status. If you purchase a subscription, Apple and our subscription management provider (RevenueCat) tell us that you have an active subscription and which plan. We do not receive your payment card number or full billing details.
- CGM glucose readings and credentials. If you choose to connect a continuous glucose monitor (Dexcom Share, FreeStyle Libre, or Nightscout), you give INBO the credentials needed to retrieve your readings from that provider. We store those credentials on our servers so INBO can keep fetching readings on a 5-minute interval — including while the INBO app is closed — and we store the resulting glucose readings (value, timestamp, and trend) for use by the in-app features that depend on them (Trends, Bedtime Guardian, Post-Meal Tracker, etc.). CGM credentials are encrypted at rest with AES-GCM and are used solely to retrieve readings from the CGM provider you chose. You can disconnect a CGM at any time in Settings → CGM, which deletes the credentials from our servers.
3.4 What we do not collect
- We do not use third-party analytics (Google Analytics, Mixpanel, PostHog, etc.).
- We do not use advertising SDKs or serve ads.
- We do not track you across other apps or websites.
- We do not collect precise location data except when you explicitly choose to share your location as part of the Emergency Contact feature.
- We do not access your contacts, photos, calendar, or other device data beyond what you explicitly enter into the app.
4. How we use information
We use the information above to:
- Operate the core insulin-calculation, logging, and reminder features
- Deliver notifications you have enabled (bedtime guardian, post-meal check-ins, correction monitor, pattern spotter, and others)
- Send messages to your designated emergency contacts during a potential hypoglycemic emergency (see Section 8)
- Process and manage subscriptions
- Communicate with you about the Service (support replies, important changes, security notices)
- Diagnose bugs and improve reliability
- Prevent fraud, abuse, and unauthorized access
- Comply with legal obligations
We do not sell your personal information. We do not use your identifiable health data to train machine-learning models. We do not share your data with advertisers or data brokers.
4.1 Automated analysis
INBO includes agents that automatically analyze the data you enter to generate alerts, reminders, and suggestions (for example: a bedtime hypoglycemia check, a correction-stacking warning, or a pattern report). These outputs are informational. They support your decisions — they do not make binding decisions on your behalf. You can disable individual agents or notifications at any time in Settings.
5. Legal bases (EU/UK users)
If you are in the EU, UK, or another jurisdiction that requires a legal basis for processing under GDPR or equivalent law, we rely on:
- Contract. To provide the Service you signed up for.
- Consent. For optional features you explicitly enable, such as the Emergency Contact feature and push notifications. You can withdraw consent at any time in the app’s Settings.
- Legitimate interests. For fraud prevention, security, and service improvement, balanced against your rights.
- Legal obligation. When we are required by law to retain or disclose information.
6. Data retention
- Account and health data: kept while your account is active, plus 30 days after you delete your account or request deletion, after which it is permanently removed from live systems. Backups are overwritten on our standard rotation (typically within 90 days).
- Technical logs: kept for up to 30 days, then automatically deleted. Logs are not used to profile health behavior and are kept separate from health data where technically feasible.
- Subscription records: retained as required for tax, accounting, and chargeback-dispute purposes (typically 7 years).
7. Sharing with third parties
We share data only with service providers we need to operate the Service. These providers act as data processors on our behalf — each is contractually bound to protect your data and use it only for the services they provide to us.
| Provider | What they handle | Where they process data |
|---|---|---|
| Apple, Inc. | App distribution, subscription billing, push notification delivery | United States |
| Cloudflare, Inc. | Application hosting, database, networking | United States and globally |
| RevenueCat, Inc. | Subscription status and entitlement management | United States |
| Twilio, Inc. | SMS and WhatsApp message delivery for the Emergency Contact feature | United States |
We may also disclose information if required by law, legal process (e.g., subpoena), or to protect the rights, property, or safety of INBO, our users, or the public.
If INBO APP, LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before any such transfer becomes subject to a different privacy policy.
8. The Emergency Contact feature
The Emergency Contact feature is optional. When you enable it and INBO detects a potential hypoglycemic emergency, we send a text message (SMS or WhatsApp) to the contact(s) you have designated, informing them of the situation and your location if you have shared it.
What this means for your privacy:
- You provide us with names and phone numbers of other people. You are confirming that you have a lawful basis to share their contact information with us for this purpose (usually consent from them).
- When we message your emergency contacts, we use Twilio to deliver the message. Twilio receives the phone number and the message content.
- We log the fact that a message was sent, the timestamp, the delivery status, and which contact received it. We do not record replies.
- Messages may be sent automatically based on our detection systems and may be triggered in error. The Emergency Contact feature is designed as a safety net and not as a substitute for direct human judgment or emergency services. False positives are possible. If a contact receives a message in error, you or they can notify us at support@inbo-app.com.
- You can disable the feature or remove contacts at any time in Settings.
What an emergency contact can do: If someone you have designated contacts us at support@inbo-app.com and asks us to stop receiving messages on your behalf, we may remove their number from your contact list. We will notify you if we do.
9. Security
We use industry-standard measures to protect your data:
- Encryption in transit (HTTPS/TLS) for all communication between the app and our servers
- Encryption at rest for stored data
- Access controls and audit logging on our infrastructure
- Minimum-necessary access by our small team
No system is perfectly secure. If we discover a security incident that affects your personal information, we will notify you as required by applicable law.
10. International data transfers
INBO is operated from the United States. If you use the Service from the EU, UK, or another country, your information will be transferred to and processed in the United States. We rely on the appropriate legal mechanisms for such transfers, including the EU Standard Contractual Clauses where applicable.
11. Your rights
Depending on where you live, you may have the following rights:
All users:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and personal information
- Export your data in a portable format
EU/UK users (under GDPR):
- All of the above, plus:
- Restrict or object to certain processing
- Withdraw consent for consent-based processing
- Lodge a complaint with your national data protection authority (e.g., the UK ICO, your EU member-state authority)
California users (under CCPA/CPRA):
- Know what categories of personal information we collect and the purposes
- Request deletion
- Correct inaccurate information
- Limit the use of sensitive personal information (note: we already limit use to providing the Service)
- Opt out of “sale” or “sharing” of personal information (we do not sell or share your data for cross-context behavioral advertising)
- Non-discrimination for exercising these rights
To exercise any right, email support@inbo-app.com from the address associated with your account, or use the in-app controls under Settings → Account. We will respond within 30 days (or 45 days with extension where permitted).
12. Account deletion
You can delete your account at any time from Settings → Account → Delete Account in the app. Deletion is permanent and cannot be undone. Your health data, emergency contacts, and account record are removed from live systems within 30 days. Backup copies are overwritten on our standard rotation.
You may also request deletion by emailing support@inbo-app.com from the email associated with your account.
13. Medical disclaimer
INBO is a tool to help you manage Type 1 diabetes. It is not a substitute for professional medical advice, diagnosis, or treatment. Always consult your healthcare provider about your condition and before making changes to your treatment. Do not rely solely on INBO for emergency medical care. In a medical emergency, call 911 (in the US) or your local emergency number.
INBO is not intended to be a regulated medical device and is designed as a decision-support tool. The calculations and suggestions the app provides are intended to assist your decisions, not to replace clinical judgment.
14. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, notify you through the app or by email before the change takes effect.
15. Contact
Questions, requests, or complaints about this policy or our privacy practices:
INBO APP, LLC1945 Overlook Drive
Mount Dora, FL 32757, USA
Email: support@inbo-app.com