InRange — Privacy Policy

InRange is a companion to a continuous glucose sensor. It reads glucose values your own sensor app has already recorded, matches them to meals you log, and shows what each meal did. It does not measure glucose itself, does not estimate or predict anything, and gives no medical advice. It is not a medical device.

This policy describes what the app does with your information. The short version: nothing leaves your phone unless you ask for something that needs it — a share, a backup, a dish named from a photograph, a packet looked up by its barcode — and each of those is described below.

Who is responsible

InRange is published by Tugay Demir. Questions about this policy or about your data: privacy@getinrange.app.

What stays on your phone

Your glucose readings, the meals you log, their photographs, activities, insulin doses, notes and every figure derived from them are stored on the device. They are not uploaded, and there is no account, unless you turn on one of the two features below.

Meal photographs are kept in the app's own storage with iOS file protection applied. Deleting a meal deletes its photograph.

What leaves your phone, and only if you ask

Sharing with another person

If you create a share code and someone accepts it, the readings, meals, activities, doses and notes inside the window you chose are copied to InRange's server so that person's phone can read them. They see only that window, enforced by the database rather than by their app. Ending the share stops it. When the last share ends, or when you use Delete server copy in Settings › Data & privacy, the server copy is removed.

Backup

If you sign in and switch backup on, your record is stored under your account so it survives a lost phone. It is used for nothing else. The same delete removes it.

Meal photographs and recognition

When you photograph a meal, the picture is sent once to a third-party AI vision service to name the dish. InRange keeps no copy of it: nothing about the photograph is written to our servers, and it is not linked to your account or to your identity. The answer is a name, never a number — InRange does not estimate carbohydrate from a photograph.

What that service does with it is governed by its provider's own terms, which allow the provider to use what it is sent to improve its services. We cannot promise on the provider's behalf that the picture is used for nothing else, and we will not pretend otherwise. If that matters to you, do not use the photograph: typing the dish name gives you exactly the same app.

Barcodes

When you scan a packet, the barcode — and nothing else — is sent to Open Food Facts, a public food database, to look up what the label declares. No account, no identifier and no other data is sent. Products you have scanned are then kept on your phone so the same packet needs no second lookup.

Apple Health

If you choose Apple Health as your source, InRange reads blood glucose, and optionally workouts and insulin, from Health. It never writes to Health. Health data is never shared with third parties, never used for advertising or data mining, and never sold — as Apple's guideline 5.1.3 requires. You can withdraw access at any time in the Health app.

LibreLinkUp and Nightscout

If you connect LibreLinkUp, your Abbott credentials are stored in this phone's keychain and are sent only to Abbott's own servers. If you connect Nightscout, the site address and read token you enter are stored on the phone and sent only to the site you named — which is yours, not ours. InRange only ever reads from either; it never writes.

Notifications

If you allow notifications, Apple issues this phone a device token which is stored on InRange's server so a shared record can be kept current: when a person you share with opens their copy of the app, the server asks your phone, silently, to send its latest readings. The token identifies the device, not you, and signing out deletes it.

Payments

InRange sells nothing, so there are no payments, no purchase history and no payment details anywhere near it.

What we do not do

• No advertising, and no advertising identifiers.
• No analytics brokers, no third-party trackers, no marketing SDKs.
• Your data is never sold, rented, or used to build a profile.
• InRange uses nothing you log to train a model. What the vision service's provider may do with a meal photograph is described above.

Who processes data on our behalf

How long anything is kept

On the phone: until you delete it or delete the app. On the server: only while a share or backup is active, and only within the window you chose. Deleting the server copy, and deleting the account itself, are both immediate and both offered inside the app, without writing to us.

Your rights

You can export everything the app holds (Settings › Data & privacy › Export) as a spreadsheet or a PDF, delete the server copy from the same screen, delete your account outright (Settings › Account › Delete my account, which removes the account, its backup, every share, and this app's access to your Apple ID), and delete everything on the phone by removing the app. If you are in the EU or the UK you also have the rights to access, rectification, erasure, restriction, portability and objection under the GDPR; write to the address above and we will answer within 30 days.

Children

InRange is not directed at children under 13 and we do not knowingly collect their data. A parent watching a child's readings uses their own account, with the child's record shared to it by code.

Changes

If this policy changes in a way that affects what leaves your phone, the app will say so before the change takes effect. The date at the top always reflects the current version.

Not a medical device

InRange shows information. It does not replace your sensor's own app. Glucose alarms, and every decision about insulin, belong there and with your clinician.