Privacy Policy

Last updated: March 10, 2026

T1DAI ("we," "us," or "our") operates ddvisual-platform.vercel.app (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

When you create an account we collect:

• Your name and email address
• A hashed (bcrypt) password — we never store your password in plain text

When you connect a CGM or Loop app we receive and store:

• Continuous glucose monitor (CGM) readings (blood glucose values, timestamps, trend direction)
• Loop device status data including insulin on board (IOB) and carbs on board (COB)

We do not collect your real name, address, phone number, insurance information, or any information that directly identifies you as a patient to a third party.

2. How We Use Your Information

• To display your glucose data and analytics on your personal dashboard
• To generate reports you request
• To send transactional emails (account confirmation, password reset) via Resend
• To process payments via Stripe

We do not sell your data. We do not use your glucose data for advertising. We do not share your health data with any third party except as described below.

3. Third-Party Services

• Vercel — hosts our application (servers located in the United States)
• Neon — hosts our database (PostgreSQL, United States)
• Stripe — processes payments; Stripe stores payment card data, we never see your card number
• Resend — sends transactional emails

Each of these providers maintains their own privacy practices and security certifications.

4. HIPAA

T1DAI is a direct-to-consumer wellness application. We are not a HIPAA "covered entity" (we are not a healthcare provider, health plan, or healthcare clearinghouse) and we are not acting as a "business associate" of a covered entity. Accordingly, HIPAA's technical requirements do not apply to T1DAI.

However, we take the security of your health data seriously and implement reasonable administrative, technical, and physical safeguards including encrypted connections (TLS), hashed passwords, and access controls.

If you are a healthcare provider or covered entity and wish to use T1DAI in a clinical context, please contact us before doing so.

5. Data Retention

We retain your glucose data for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us. We will delete your data within 30 days of your request.

6. Children

T1DAI is not directed to children under 13. We do not knowingly collect information from children under 13. Parents and guardians may create accounts on behalf of a child and manage their data.

7. California Residents (CCPA)

California residents have the right to request disclosure of personal information we collect, request deletion of personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.

8. Changes to This Policy

We may update this policy. We will notify you of material changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

9. Contact

Questions about this Privacy Policy? Email us at: privacy@t1dai.com