Back to Home

Privacy Policy

Last Updated: January 30, 2026

Privacy at a Glance

Before you create your GlucoRevert account, we want to be clear about how we handle your health data.

1. What We Collect

We collect your name, email, and the food logs/glucose data you enter. This includes sensitive health information.

2. Why We Collect It

We use this data to calculate your nutritional insights and track your pre-diabetes reversal progress. We do not sell your health data to advertisers.

3. Who Sees It

Your data is processed securely by our infrastructure providers (AWS Canada, Google Cloud Platform Canada). Food photos are anonymized before AI analysis - no personal identifiers are sent to Google.

4. Risks of Harm

While we use encryption to protect you, no system is perfect. In the unlikely event of a security breach, health status could be exposed. We have strict protocols to minimize this risk.

1. Governance & Accountability

Company: GlucoRevert Canada Inc.
Privacy Officer: Chief Technology Officer is responsible for our privacy compliance.
Contact: privacy@glucorevert.ca
Commitment: We maintain an internal Privacy Management Program (PMP) that includes staff training, regular impact assessments, and breach response protocols.

2. The Data We Collect

  • Identity Data: Name, email address (for account management).
  • Health & Biometric Data: Blood glucose readings, weight, dietary logs, and photos of meals. (Classified as “Sensitive Information” under C-27).
  • Technical Data: IP address, device type, browser info (for security and app optimization).

3. How We Use Your Data

  • Service Delivery: To provide the dashboard, analytics, and food scoring.
  • AI Analysis: To analyze meal photos and suggest “diabetic-friendly” alternatives.
  • Improvement: De-identified (anonymized) data may be used to improve our algorithm’s accuracy.

4. Third-Party Sharing & Data Transfers

We do not sell data. We transfer data only to these “Service Providers” necessary to run the app:

  • Hosting & Database: Amazon Web Services Canada (Montreal, ca-central-1 region).
  • AI Processing: Google Cloud Platform Canada (Montreal, northamerica-northeast1 region) for food image analysis using Gemini AI.
  • Location of Data: All personal health information remains encrypted within Canadian borders. Your data is stored in AWS ca-central-1 and processed in GCP northamerica-northeast1.

Google Cloud Platform (GCP) Processing Disclosure

What data is sent to GCP: When you use the AI-powered food logging feature, we send food photos to Google Cloud Platform for analysis. These photos are classified as Non-PHI (Non-Personal Health Information) because:

  • Food photos do not contain medical diagnoses, treatment information, or prescription details
  • Photos are anonymized before transmission - all identifying metadata is removed
  • No user identifiers (name, email, account ID) are sent with the images

Canadian Data Residency: All AI processing occurs exclusively in Google Cloud Platform's Canadian region (northamerica-northeast1, located in Montreal). We have hardcoded this endpoint in our system to ensure your data never leaves Canada during AI analysis.

Anonymization Process: Before sending any food photo to GCP, our system:

  1. Strips all EXIF metadata (location, device information, timestamps)
  2. Generates a temporary session ID that cannot be linked back to your account
  3. Removes all user identifiers from the request
  4. Validates that the image contains only food (rejects images with faces or prescription bottles)
  5. Deletes the temporary session ID after 24 hours

Data Retention at GCP: Google processes the anonymized food images in real-time and does not retain them. Our audit logs (stored in Canada on AWS) record only the anonymized session ID and analysis results, not the actual images.

5. Automated Decision Systems (AI Transparency)

What is it? GlucoRevert uses Artificial Intelligence to analyze your food photos and estimate carb counts.

How it works: The system compares your photo against a database of foods to predict nutritional content.

Limitations: These are estimates. You should not use these calculations for insulin dosing without verifying them yourself.

Human Review: You have the right to request a human review if you believe the AI has significantly errored in a way that impacts your service.

6. Your Rights Under Bill C-27

  • Right to Disposal (The "Delete Button"): You can request the permanent deletion of your account and data at any time via the "Settings" page. We will complete this within 30 days.
  • Right to Mobility: You can download a structured file (CSV/JSON) of your glucose and food logs to move to another platform.
  • Right to Withdrawal: You can withdraw consent for AI processing at any time (though this may disable certain app features).

7. Data Security & Retention

Security: We use encryption in transit (HTTPS) and at rest (AES-256) to protect your sensitive health data.

Retention: We retain your personal data only as long as you have an active account. If you are inactive for 2 years, we will notify you before deleting your data.

8. Children’s Privacy

GlucoRevert is not intended for users under 18. We do not knowingly collect data from minors.