Privacy policy

CarbCal AU has no account, no ads, no analytics and no tracking of any kind. Nothing you save is sent anywhere. This policy explains the one thing that does leave your device, and what happens to it.

What stays on your device

Saved meals, custom foods you have entered, your carbohydrate ratio, correction settings, and whether you use a pump or a pen are all stored on your device only. None of it is transmitted, backed up to us, or visible to anyone but you. Deleting the app deletes all of it.

What leaves your device

When you search for a food, the words you type are sent to a server run by the developer so it can send back matching foods. That request contains:

• the text of your search
• your device's IP address, which every internet request necessarily includes

Nothing else is attached. There is no account, no device identifier, no advertising ID, and no way for the server to connect one search to another or to you personally.

Your saved meals, your insulin settings and your custom foods are never sent with a search, or at any other time.

Server logs

The server keeps a short operational log of requests, containing the IP address and the search text, so that faults and misuse can be diagnosed. These logs are kept for up to 14 days and are then deleted automatically. They are not analysed to build a profile, not linked to any identity, and never shared.

Connection security

Searches are currently sent over an unencrypted connection (HTTP). This means the words you search for could in principle be observed by someone in a position to watch your network traffic, such as on a public Wi‑Fi network. No personal or health information beyond the search term itself is transmitted. Encrypting this connection is planned.

What we never do

• No advertising, and no advertising or analytics code of any kind is present in the app
• No third-party tracking libraries, software development kits or services
• No selling, renting or sharing of data with anyone
• No accounts, sign-ups, email collection or newsletters
• No access to your contacts, photos, location or health records
• No connection to Apple Health, Google Fit or any glucose monitor

Children

CarbCal AU is used by people of all ages, including children managing type 1 diabetes with their families. Because the app collects no personal information and has no account, no age verification is required and no information about a child is gathered.

Your rights

Under the Australian Privacy Act you may ask what personal information is held about you and request its deletion. In practice there is nothing to retrieve: no account exists, and the short-lived server logs are not linked to any identifiable person. Requests can still be sent to the address below.

Changes

If this policy changes, the date at the top of this page changes with it. A change that affects what leaves your device will also be noted in the app's release notes.

Contact