Privacy Policy
Last updated: September 2026
This policy describes what PeakGly does today. It is pending review by healthcare privacy counsel; if a reviewed version later conflicts with this one, the reviewed version governs.
What we collect
Health data. Glucose readings retrieved from your CGM roughly every five minutes; workout sessions you log, confirm, or import from Apple Health; meals and carbohydrate estimates; sleep hours and quality; long-acting insulin check-ins; and your training schedule.
CGM credentials. Your Dexcom Share username and password. These are required to retrieve your readings, are stored encrypted with a per-record AES-256-GCM key, and are sent to Dexcom each time we fetch readings.
Account. PeakGly does not require an email address, password, or real name. Your account is an anonymous identifier created on your device, plus a one-time recovery code for moving it to a new device. Your athlete profile — name, sport, age, height, weight, target range — is optional and stored on your device.
Technical. A push notification token, your timezone, notification preferences, and subscription status.
Apple Health
Connecting Apple Health is optional. If you connect it, PeakGly reads your workout records only — the type of workout, when it started and ended, and energy burned — so your training sessions appear in PeakGly automatically instead of being logged by hand. PeakGly reads no other category of Apple Health data.
PeakGly never writes to Apple Health.
Workouts read from Apple Health are stored on PeakGly’s servers alongside your other training sessions and are used to show your training history, pair each session with your glucose readings, and learn your weekly training pattern. Summaries of your training, which can include these sessions, may be sent to Anthropic solely to generate your coaching replies, as described below.
Apple Health data is never sold, never shared with advertisers, and never used for advertising or any form of use-based data mining. It is not used for any purpose other than providing PeakGly to you.
You can stop syncing at any time from PeakGly’s Profile screen, and you can revoke PeakGly’s access entirely in the iOS Settings app under Health → Data Access & Devices. Deleting a workout in Apple Health also removes it from PeakGly, unless you separately confirmed that session yourself in the app.
Who we share it with
We do not sell your data. PeakGly contains no advertising or tracking software. We share only with the services required to operate:
- Dexcom — receives your credentials in order to return your glucose readings.
- Anthropic — receives your current glucose, trend, time in range, sport, and sleep along with your question, to generate coaching responses.
- Expo and Apple — deliver your notifications. Alert notifications contain your glucose value.
- Apple, RevenueCat, and Stripe — process subscriptions and payments.
- Neon, Vercel, Netlify, and Cloudflare — host the database, application, website, and scheduled jobs.
PeakGly is not affiliated with or endorsed by Dexcom.
Sharing with people you choose
You can generate a share code and give it to someone — a parent, a coach, an athletic trainer. Anyone who redeems your code can see your glucose data, history, and reports, receives your low and high alerts, and can log workouts on your behalf. They cannot access your credentials or billing. You can revoke access at any time from the app.
How long we keep it
Glucose readings and workout history are retained while your account exists. Disconnecting your CGM stops new readings from being collected but does not delete readings already stored.
Your choices
You can disconnect your CGM at any time, revoke anyone you have shared with, and control which notifications you receive. To request a copy of your data or deletion of your account, contact us at the address below and we will respond.
Children
Type 1 diabetes is often diagnosed in childhood, and PeakGly may be used by minors, in many cases with a parent managing the account. If you believe a child has provided information to PeakGly without appropriate parental involvement, contact us and we will address it.
Security
CGM credentials are encrypted with a per-record key. All communication uses HTTPS. Access to your data requires a token held on your device.
Not a medical device
PeakGly is a performance companion, not a medical device. It does not diagnose or treat any condition and never calculates or recommends insulin doses. Your CGM remains your primary alert system and your endocrinologist's plan governs your care.
Contact
Questions about this policy or your data: peakgly@gmail.com