Glimpse Privacy Policy

Glimpse is designed around the principle that health information deserves a high level of privacy protection.

Our current privacy commitments include:

• We do not sell identifiable health information.
• We do not use identifiable health information for targeted or behavioral advertising.
• We do not allow advertising companies to build advertising profiles based on your glucose readings, meals, medications, diagnoses, or other Consumer Health Data.
• We do not use identifiable Consumer Health Data to train general-purpose artificial intelligence models, unless we separately explain such a use and obtain any consent required by applicable law.
• We limit access to health information to personnel, contractors, and service providers who require access for legitimate business purposes.
• We provide mechanisms for users to access and delete their information as required by applicable law.

These commitments apply subject to disclosures that you specifically direct us to make, legal requirements, and other limited circumstances described below.

This Privacy Policy applies to personal information that Glimpse processes through the Service.

It does not govern independent products, websites, devices, or services operated by third parties, even when they connect to Glimpse.

For example, Apple Health, Health Connect, continuous glucose monitor providers, glucose meter manufacturers, payment processors, and other connected services maintain their own privacy practices.

The information we collect depends on the features you choose to use.

3.1 Account and Contact Information

We may collect:

• name;
• email address;
• account identifier;
• username or display name;
• authentication credentials or authentication tokens;
• communication preferences;
• account creation date; and
• other information necessary to maintain your account.

We generally do not store your password in readable form when authentication is handled using standard secure authentication systems.

When you choose to use health-related features, we may collect information such as:

Glucose Information

• blood glucose readings;
• glucose reading date and time;
• whether a reading is associated with fasting, a meal, exercise, bedtime, or another context;
• manually entered glucose information;
• glucose information imported from compatible services or devices; and
• trends and statistics calculated from glucose readings.

Meal and Nutrition Information

We may collect:

• meals and snacks;
• meal times;
• food descriptions;
• food categories or tags;
• portion information;
• nutritional information;
• photographs of food if such functionality is offered;
• notes associated with meals; and
• relationships between meals and recorded glucose readings.

Medication Information

If medication-related functionality is offered and you choose to use it, we may collect:

• medication names;
• medication schedules;
• medication-related notes;
• medication reminders; and
• information you voluntarily provide regarding medication use.

Unless expressly stated otherwise, Glimpse is not a medication prescribing or medication dosing system.

Other Health and Wellness Information

Depending on features you use, we may collect:

• health goals;
• weight;
• physical activity;
• HbA1c information;
• blood pressure;
• diabetes-related information;
• symptoms or notes;
• lifestyle information;
• sleep information;
• wellness information;
• information from questionnaires; and
• other health information you voluntarily choose to record.

Some of this information may constitute Consumer Health Data or Sensitive Personal Information under applicable law.

Please see our Consumer Health Data Privacy Policy for additional information.

If you choose to connect Glimpse with an external health service, device, or platform, we may receive information authorized by you from services such as:

• Apple Health;
• Android Health Connect;
• continuous glucose monitoring platforms;
• glucose meter platforms;
• wearable devices;
• fitness services;
• nutrition services; and
• other compatible third-party services.

The specific information Glimpse receives depends on:

1. the integration;
2. the permissions you grant; and
3. the settings associated with your third-party account.

We will request access only to data reasonably necessary for the Glimpse features being provided.

You may be able to revoke an integration through Glimpse, the third-party service, your mobile operating system, or your device settings.

We may generate information based on data available through Glimpse, including:

• glucose averages;
• trends;
• time-based patterns;
• charts and graphs;
• correlations;
• summaries;
• reports;
• wellness insights;
• meal-related observations;
• statistical information;
• risk or pattern indicators, if offered;
• AI-generated or algorithmically generated insights; and
• other inferences.

These generated results may themselves constitute Consumer Health Data when they identify or relate to your health.

When you use Glimpse, we may automatically receive information such as:

• device type;
• operating system;
• application version;
• browser type;
• IP address;
• device or application identifiers;
• language;
• time zone;
• crash information;
• diagnostic information;
• application performance information;
• security events;
• login information; and
• interactions with Glimpse features.

We use this information primarily for security, application operation, debugging, analytics, and product improvement.

We do not intentionally use technical identifiers to create advertising profiles based on your Consumer Health Data.

Glimpse does not currently require precise geolocation to provide its core glucose and meal tracking features.

We may infer an approximate geographic area from information such as an IP address for purposes such as security, fraud prevention, application functionality, analytics, and compliance.

If a future feature requires precise location information, we will request appropriate permission before collecting it.

If you contact us, we may collect:

• your name;
• email address;
• support messages;
• attachments;
• feedback;
• survey responses; and
• other information you choose to provide.

Please avoid including health information in general support communications unless it is necessary to resolve your issue.

If Glimpse offers paid services, subscriptions may be processed through:

• Apple App Store;
• Google Play;
• a payment processor; or
• another authorized payment provider.

Glimpse generally does not receive or store complete payment card numbers when transactions are handled by third-party payment processors.

We may receive information such as:

• subscription status;
• product purchased;
• payment status;
• renewal date;
• transaction identifier; and
• limited billing information.

We may use personal information to:

Provide Glimpse

Including to:

• create and maintain accounts;
• save glucose readings;
• maintain meal logs;
• generate dashboards;
• generate charts and reports;
• provide reminders;
• synchronize information;
• enable device integrations; and
• provide features requested by you.

Generate Insights

We may process health information to:

• identify patterns;
• calculate statistics;
• generate reports;
• identify relationships between recorded meals and glucose values;
• provide educational or wellness insights; and
• provide AI-assisted features where offered.

Personalize the Experience

We may use information to customize:

• dashboard content;
• reminders;
• reporting periods;
• educational information;
• feature recommendations; and
• other elements of the Glimpse experience.

Maintain and Improve the Service

We may use information to:

• diagnose technical problems;
• measure feature performance;
• improve usability;
• develop new features;
• conduct testing;
• prevent errors; and
• improve system reliability.

Where reasonably possible, we use aggregated or de-identified information for product development rather than identifiable health information.

Security and Fraud Prevention

We may use information to:

• authenticate accounts;
• identify suspicious activity;
• prevent unauthorized access;
• detect misuse;
• protect Glimpse systems;
• investigate security incidents; and
• maintain application integrity.

Communicate With You

We may use contact information to send:

• account verification messages;
• security notices;
• password reset messages;
• service communications;
• privacy notices;
• requested reminders;
• support communications; and
• marketing communications where permitted.

You may unsubscribe from promotional emails using the unsubscribe mechanism included in those communications.

Certain transactional or security communications are necessary for providing the Service and may not be subject to marketing opt-out preferences.

Legal and Compliance Purposes

We may process information when reasonably necessary to:

• comply with applicable law;
• respond to legally valid requests;
• establish or defend legal claims;
• investigate fraud or abuse;
• protect users or others; and
• fulfill applicable privacy, security, and regulatory obligations.

We do not sell identifiable Consumer Health Data.

We may disclose information in the following circumstances.

12.1 Service Providers and Processors

We use companies that help us operate Glimpse.

Depending on our technology infrastructure, these may include providers of:

• cloud hosting;
• databases;
• authentication;
• security;
• email delivery;
• customer support;
• crash reporting;
• application analytics;
• subscription management;
• payment processing;
• AI processing;
• data storage; and
• other technical infrastructure.

Where these providers process Consumer Health Data on our behalf, we require appropriate contractual privacy and confidentiality protections as required by applicable law.

Current providers must be identified in Glimpse's Consumer Health Data Privacy Policy where applicable.

We may disclose information when you direct us to do so.

For example, you may choose to:

• export a PDF report;
• send a report to a physician;
• share information with a caregiver;
• download your data;
• connect a health service;
• transmit information to another application; or
• otherwise authorize a disclosure.

Once you provide information directly to another person or independent organization, their privacy practices apply to their handling of that information.

We may disclose information if we reasonably believe disclosure is required or permitted to:

• comply with applicable law;
• respond to a valid subpoena, warrant, court order, or other lawful process;
• investigate fraud;
• protect the security of Glimpse;
• protect our legal rights;
• prevent misuse of the Service; or
• protect the rights or safety of users or others.

Because health information can be particularly sensitive, we evaluate government and legal requests consistent with applicable law.

If Glimpse is involved in a merger, financing, acquisition, bankruptcy, reorganization, or sale of business assets, personal information may be involved in the transaction to the extent permitted by applicable law.

Any transfer of Consumer Health Data will remain subject to applicable consumer health privacy laws and any required notices, authorizations, or consents.

Glimpse does not use identifiable Consumer Health Data for targeted advertising or cross-context behavioral advertising.

We do not permit advertising companies to use information such as:

• glucose readings;
• diabetes-related information;
• medication information;
• meal/glucose relationships;
• health conditions; or
• Glimpse-generated health insights

to target advertisements to you.

If Glimpse introduces advertising in the future, this Privacy Policy will be updated and additional consent will be obtained where required by law.

Glimpse may use AI or machine-learning providers to support optional features such as:

• health and wellness summaries;
• pattern identification;
• meal analysis;
• report generation;
• natural-language interaction; and
• personalized educational information.

When a third-party AI provider processes identifiable information on our behalf, we will seek to contractually restrict that provider's use of the information to providing services to Glimpse.

We do not use identifiable Consumer Health Data to train general-purpose AI models unless we separately disclose that use and obtain any legally required consent.

We may use aggregated or appropriately de-identified information to evaluate and improve Glimpse where permitted by law.

We may transform information into aggregated or de-identified information that is not reasonably linkable to an identified or identifiable person.

We may use such information for purposes such as:

• analytics;
• research;
• product development;
• system improvement;
• understanding population-level patterns;
• benchmarking; and
• business planning.

Where required by law, we will take reasonable measures to prevent de-identified information from being associated with an individual and will not attempt to re-identify it except as permitted for testing the effectiveness of de-identification processes.

Our website and application may use:

• cookies;
• software development kits ("SDKs");
• local storage;
• application identifiers;
• pixels; and
• similar technologies.

We use these technologies for purposes such as:

• authentication;
• security;
• application functionality;
• preference storage;
• debugging;
• analytics; and
• understanding Service performance.

We do not knowingly configure third-party advertising technologies to receive identifiable Consumer Health Data for behavioral advertising.

The Health Insurance Portability and Accountability Act ("HIPAA") applies to certain healthcare providers, health plans, healthcare clearinghouses, and their business associates.

Using Glimpse as an independent consumer application does not necessarily mean that information stored in Glimpse is protected by HIPAA.

If Glimpse enters into an arrangement in which it acts as a business associate of a HIPAA-covered entity, information subject to that arrangement will be handled according to applicable HIPAA requirements and the applicable Business Associate Agreement.

Other federal and state privacy laws may apply independently of HIPAA.

We retain personal information only for as long as reasonably necessary for purposes described in this Privacy Policy, including providing the Service, maintaining security, complying with legal requirements, resolving disputes, and enforcing agreements.

Retention depends on the category of information.

Account Information

Generally retained while your account remains active and for a limited period thereafter where necessary for security, legal, fraud-prevention, or administrative purposes.

Health Information

Generally retained while your account is active or until you request deletion, subject to applicable law and limited legal exceptions.

Support Records

May be retained for a reasonable period necessary to resolve issues, document communications, prevent fraud, or satisfy legal requirements.

Transaction Records

May be retained as required for accounting, tax, fraud prevention, and legal compliance.

System and Security Logs

Generally retained for a limited period based on operational and security requirements.

When we no longer need information, we may delete or de-identify it.

Deletion from backup systems may occur on a delayed schedule as permitted by applicable law.

We maintain administrative, technical, and organizational safeguards designed to protect personal information appropriate to the sensitivity of the information involved.

Our security program may include measures involving:

• access controls;
• authentication;
• encryption;
• monitoring;
• logging;
• secure development practices;
• vendor controls;
• vulnerability management;
• incident response; and
• personnel confidentiality obligations.

No electronic system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and devices.

If we discover unauthorized acquisition or disclosure of protected information, we will investigate and take appropriate action.

Where required, we will notify affected individuals, regulators, the Federal Trade Commission, state authorities, or others according to applicable breach-notification requirements.

Depending on where you live and applicable law, you may have rights to:

• know whether we process personal information about you;
• access information;
• obtain a copy of information;
• correct inaccurate information;
• delete information;
• withdraw consent;
• obtain information regarding disclosures;
• opt out of certain sales or sharing;
• restrict certain uses of sensitive information;
• appeal certain privacy-request decisions; and
• exercise privacy rights without unlawful discrimination.

Consumer Health Data may be subject to additional rights described in our Consumer Health Data Privacy Policy.

You may submit a privacy request using:

Privacy Email: support@glimpse-health.com

Privacy Request Page: Privacy Request page

In-App: Settings → Privacy → Privacy Request

We may need to verify your identity before fulfilling a request.

We will request only information reasonably necessary to authenticate the request.

Where permitted, an authorized agent may submit a request on your behalf.

We will respond within the timeframe required by applicable law.

California residents may have additional privacy rights under applicable California laws.

Depending on which laws apply to Glimpse and the information involved, these may include rights to:

• know what personal information is collected;
• access personal information;
• request correction;
• request deletion;
• receive information concerning disclosures;
• opt out of sale or sharing;
• limit certain uses of Sensitive Personal Information; and
• receive equal service when exercising privacy rights.

Glimpse does not sell personal information and does not use Consumer Health Data for cross-context behavioral advertising.

Certain health information maintained by Glimpse may also be subject to California medical-information privacy requirements separate from HIPAA.

Residents of certain states have specific rights relating to Consumer Health Data.

Additional information regarding:

• Consumer Health Data we collect;
• why we collect it;
• where it comes from;
• how it is processed;
• with whom it is shared;
• consent;
• deletion;
• withdrawal of consent; and
• other Consumer Health Data rights

is provided in our separate Consumer Health Data Privacy Policy.

Glimpse is currently intended for individuals 18 years of age or older.

We do not knowingly allow individuals under 18 to create independent Glimpse accounts.

If we learn that information has been collected from a child in violation of applicable law, we will take appropriate steps to delete the information.

If Glimpse introduces a product designed for parents, guardians, families, or minors, we will introduce appropriate consent, privacy, and account-management requirements before offering that functionality.

Glimpse is currently intended for users in the United States.

Information may be processed in the United States and, depending on our service providers, other jurisdictions in which those providers operate.

Where required, we take appropriate measures relating to such processing.

We may update this Privacy Policy to reflect:

• new features;
• changes in our practices;
• changes in technology;
• regulatory requirements; or
• changes in applicable law.

If we make material changes affecting how we use sensitive or health information, we will provide notice as required by law and obtain consent where legally required.

The date at the top of this Privacy Policy indicates when it was most recently updated.

Questions about this Privacy Policy or Glimpse's privacy practices may be directed to:

Novyte Labs Inc
Doing business as Glimpse

Privacy: support@glimpse-health.com
Support: support@glimpse-health.com
Website: [https://YOURDOMAIN.com]
Mailing Address: Novyte Labs Inc, 1600 N. Milwaukee Ave #1044, Vernon Hills, IL 60061 United States

Privacy requests may also be submitted through:

Privacy Request page