Privacy Policy
Last updated: August 2026
This policy describes what PeakGly does today. It is pending review by healthcare privacy counsel; if a reviewed version later conflicts with this one, the reviewed version governs.
What we collect
Health data. Glucose readings retrieved from your CGM roughly every five minutes; workout sessions you log or confirm; meals and carbohydrate estimates; sleep hours and quality; long-acting insulin check-ins; and your training schedule.
CGM credentials. Your Dexcom Share username and password. These are required to retrieve your readings, are stored encrypted with a per-record AES-256-GCM key, and are sent to Dexcom each time we fetch readings.
Account. PeakGly does not require an email address, password, or real name. Your account is an anonymous identifier created on your device, plus a one-time recovery code for moving it to a new device. Your athlete profile — name, sport, age, height, weight, target range — is optional and stored on your device.
Technical. A push notification token, your timezone, notification preferences, and subscription status.
Who we share it with
We do not sell your data. PeakGly contains no advertising or tracking software. We share only with the services required to operate:
- Dexcom — receives your credentials in order to return your glucose readings.
- Anthropic — receives your current glucose, trend, time in range, sport, and sleep along with your question, to generate coaching responses.
- Expo and Apple — deliver your notifications. Alert notifications contain your glucose value.
- Apple, RevenueCat, and Stripe — process subscriptions and payments.
- Neon, Vercel, Netlify, and Cloudflare — host the database, application, website, and scheduled jobs.
PeakGly is not affiliated with or endorsed by Dexcom.
Sharing with people you choose
You can generate a share code and give it to someone — a parent, a coach, an athletic trainer. Anyone who redeems your code can see your glucose data, history, and reports, receives your low and high alerts, and can log workouts on your behalf. They cannot access your credentials or billing. You can revoke access at any time from the app.
How long we keep it
Glucose readings and workout history are retained while your account exists. Disconnecting your CGM stops new readings from being collected but does not delete readings already stored.
Your choices
You can disconnect your CGM at any time, revoke anyone you have shared with, and control which notifications you receive. To request a copy of your data or deletion of your account, contact us at the address below and we will respond.
Children
Type 1 diabetes is often diagnosed in childhood, and PeakGly may be used by minors, in many cases with a parent managing the account. If you believe a child has provided information to PeakGly without appropriate parental involvement, contact us and we will address it.
Security
CGM credentials are encrypted with a per-record key. All communication uses HTTPS. Access to your data requires a token held on your device.
Not a medical device
PeakGly is a performance companion, not a medical device. It does not diagnose or treat any condition and never calculates or recommends insulin doses. Your CGM remains your primary alert system and your endocrinologist's plan governs your care.
Contact
Questions about this policy or your data: peakgly@gmail.com