1. Overview
Your health data stays on YOUR device. We don’t store your meal photos, activity data or personal health information on our servers. You have complete control over your data.
App information
| App name | AiDia - AI Diabetes Assistant |
| Developer | Neuroxes |
| Platform | Android, iOS, Web |
| Category | Health & Fitness / Medical |
| Contact | support@neuroxes.com |
What AiDia does
AiDia helps diabetes patients manage their carbohydrate intake and insulin needs using AI-powered food analysis. Users take photos of meals to get instant nutritional information, track physical activity, receive personalized AI coaching, and monitor their HbA1c goals.
- Your meal photos and health data stored locally on your device
- We never sell your personal information
- You can delete all data anytime
- HTTPS encryption for all network communications
- Full compliance with GDPR, CCPA, and other privacy laws
2. Data Collection
We believe in transparency. Here’s exactly what data we collect and where it’s stored:
| Data type | Storage location | Purpose |
|---|---|---|
| Meal Photos & Nutrition | Your Device Only | Track your meals and carb intake |
| Physical Activity | Your Device Only | Calculate carb offset from exercise |
| User Preferences | Your Device Only | Customize app experience |
| Email & Display Name | Firebase Cloud | Account authentication |
| Subscription Status | Firebase Cloud | Manage app access and credits |
| Food Analysis Requests | OpenAI (30 days) | AI-powered nutritional analysis |
3. Local Storage
This data NEVER leaves your device. It’s stored in your phone’s private app directory using a SQLite database and local storage.
A. Meal information
- Photos of meals (stored in device storage)
- Meal names and timestamps
- Nutritional data: calories, carbs, protein, fats, fiber, sugar
- Food items detected by AI with confidence scores
- Serving sizes and portion multipliers
- User notes and custom tags
- Location information (country/region for meal suggestions — NOT GPS)
B. Physical activity data
- Step counts from device pedometer
- Walking distance and duration
- Activity type (walking, running, cycling, etc.)
- Calories burned estimates
- Activity notes
C. Walking session & story data
- Walking session start/end times
- Steps during story sessions
- Story progress (chapter numbers, completion status)
D. User preferences
- OpenAI API key (if you provide your own)
- Theme preferences (light/dark mode)
- Notification settings
- Language preferences
All locally stored data is protected by Android’s app sandboxing. Only AiDia can access this data. When you uninstall the app, all local data is automatically deleted.
4. Cloud Storage
We use Firebase (Google) to provide account features and app functionality. Here’s what we store in the cloud:
A. Authentication data (only if you create an account)
- Email address
- Display name
- Unique User ID (generated by Firebase)
- Account creation date
B. Subscription & credit tracking
- Current subscription tier (free/standard/pro)
- Daily credit usage count (for AI analyses)
- Last credit reset date
- In-app purchase receipts (for subscription verification)
C. Device-based tracking (for users without accounts)
- Device fingerprint ID (sanitized — no personal info)
- Daily credit usage count
- Last credit reset date
D. Push notification tokens
- Firebase Cloud Messaging (FCM) token
- Notification topic subscriptions (e.g., “all_users”)
Your health data (meals, activity, diabetes profile) is NOT stored in Firebase. It stays on your device only.
5. Third-Party Services
A. OpenAI (AI analysis)
What we send to OpenAI
- Food photos (only when you analyze a meal)
- Your diabetes profile (age, gender, insulin type, carb ratio, glucose targets)
- HbA1c levels (current, target, progress)
- Today’s meal data and carb consumption
- Today’s physical activity (steps, distance, carb offset)
- Country/region (for culturally appropriate suggestions)
- Cuisine preferences and dietary restrictions
- Chat conversation history (for the AI coach feature)
- Voice recordings (if using voice input)
Why we send it
- To analyze food photos and provide nutritional information
- To give personalized diabetes management advice
- To transcribe voice input
- OpenAI keeps API data for 30 days, then automatically deletes it
- OpenAI does NOT use API data to train their models
B. Google AdMob (advertisements)
What is collected
- Device information (device type, OS version)
- Advertising ID (resettable in device settings)
- Approximate location (country/region — NOT precise GPS)
- Ad interaction data (views, clicks)
- App usage patterns (which screens show ads)
Purpose
To display relevant ads and earn revenue to support free app usage.
You can reset your Advertising ID in Android Settings → Google → Ads → Reset Advertising ID.
C. Firebase services (Google)
What is collected
- Authentication data (email, UID)
- App usage analytics (screen views, feature usage — anonymous)
- Crash reports and error logs (for bug fixes)
- Performance metrics (app speed, network latency)
Purpose
To provide user accounts, sync credits, send notifications, and improve app stability.
6. App Permissions
Here’s why we request each permission and whether you can deny it:
| Permission | Why we need it | Can deny? |
|---|---|---|
| INTERNET | Connect to OpenAI API for food analysis | ❌ Required |
| CAMERA | Take photos of meals for analysis | ✅ Yes (use gallery) |
| READ_MEDIA_IMAGES | Select photos from gallery | ✅ Yes (use camera) |
| RECORD_AUDIO | Voice input for hands-free logging | ✅ Yes (type instead) |
| POST_NOTIFICATIONS | Send meal reminders | ✅ Yes (no notifications) |
| ACTIVITY_RECOGNITION | Track steps from pedometer | ✅ Yes (no step tracking) |
All optional permissions can be denied. The app will still work, but some features will be unavailable. You can change permissions anytime in your device settings.
What we DON’T collect
- Precise GPS location
- Contacts list
- Calendar events
- SMS or phone call data
- Full photo library
- Background location tracking
- Biometric data (fingerprints, face ID)
- Payment card numbers
- Browsing history
- Medical records or prescriptions
7. How We Use Data
1. Food analysis
- Photos sent to OpenAI to identify foods and calculate nutrition
- Your diabetes profile used to personalize recommendations
2. AI coaching
- Meal history and progress used to provide personalized diabetes advice
- Chat history used for context in conversations
3. Credit tracking
- Track daily AI analysis usage (free tier: 5 per day)
- Reset credits at midnight each day
4. Physical activity
- Calculate carb offset (extra carbs you can eat due to exercise)
- Adjust meal recommendations based on activity level
5. Ads & monetization
- Show ads to free-tier users
- Track ad views to earn revenue
6. App improvement
- Anonymous analytics to understand feature usage
- Crash reports to fix bugs
- Sell your data to third parties
- Share your meal photos with anyone except OpenAI (for analysis only)
- Use your health data for advertising targeting
- Share your data with insurance companies or healthcare providers
- Track your location in the background
8. Data Security
How we protect your data
1. Local storage security
- Meal photos and health data stored in app’s private directory
- Only AiDia can access this data (Android app sandboxing)
- Data automatically deleted when you uninstall the app
2. Network security
- All internet communication uses HTTPS/TLS encryption
- OpenAI API calls use secure Bearer token authentication
- Firebase uses encrypted connections
3. API key security
- Your OpenAI API key (if you provide one) stored only on your device
- Never sent to our servers
4. Account security
- Passwords hashed by Firebase (we never see your password)
- Email verification available
- Password reset via secure email link
Your meal photos, activity data, and health information stay on your device. If you change phones, you must manually export/import data. We don’t have access to your health data stored locally.
Data breach protocol
In the unlikely event of a security breach affecting Firebase data (email, subscription info), we will:
- Notify affected users within 72 hours
- Report to relevant authorities as required by law
- Provide guidance on protective measures
- Post updates on our website: www.neuroxes.com
9. Your Rights
Data access & control
You have full control over your data. Here’s what you can do:
1. Access your data
- View all stored meals, activity logs, and preferences within the app
- Export data in JSON format (Settings → Export Data)
- Request a copy of your Firebase account data by emailing support@neuroxes.com
2. Modify your data
- Edit meal entries and nutritional information
- Update your diabetes profile and preferences anytime
- Change your email and display name in account settings
3. Delete your data
- Local data: Settings → Clear All Data (deletes meals, activity, preferences)
- Account: delete your account and data
- Complete removal: uninstalling the app deletes all local data automatically
4. Data portability
- Export your data as a JSON file
- Import data from previous exports
- Transfer data to another device manually
Once you delete your account or local data, it cannot be recovered. Make sure to export your data first if you want to keep a backup.
Legal rights (GDPR, CCPA, and more)
If you’re in the European Union (GDPR)
- Right to Access: Request a copy of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Delete your account and data
- Right to Data Portability: Export your data
- Right to Object: Opt-out of advertising (reset Ad ID)
- Right to Withdraw Consent: Revoke permissions anytime
If you’re in California (CCPA)
- Right to Know: What data we collect and how we use it
- Right to Delete: Request deletion of your data
- Right to Opt-Out: We don’t sell data, so no opt-out needed
- Right to Non-Discrimination: Same service whether you exercise rights or not
If you’re in other regions
We respect privacy laws worldwide, including Brazil’s LGPD, Canada’s PIPEDA, Australia’s Privacy Act, and others. Contact us to exercise your rights.
Exercise your rights
- Email us at support@neuroxes.com with subject “Privacy Rights Request”
- We’ll respond within 30 days (or as required by local law)
10. Children’s Privacy
AiDia is not intended for children under 13 years old.
Our policy
- We do not knowingly collect data from children under 13
- If you’re a parent and believe your child has provided us with data, contact us immediately
- We will delete any child data within 72 hours of notification
Parental guidance
If you’re a parent of a teen (13–17) using AiDia:
- Review this privacy policy with them
- Supervise their use of the app
- Understand that diabetes management requires medical supervision
- Consult their doctor before using any diabetes app
COPPA compliance (USA)
We comply with the Children’s Online Privacy Protection Act (COPPA). We do not:
- Collect personal information from children under 13
- Allow children to publicly post personal information
- Send notifications or marketing to children
11. International Laws
Where your data is stored
- Local data: Your device (your country)
- Firebase: Google Cloud servers (multiple regions, including EU and US)
- OpenAI: OpenAI servers in the United States
Data transfer safeguards
When your data crosses international borders (e.g., EU to US), we ensure protection through:
- Standard Contractual Clauses (SCCs): Legal agreements approved by the EU Commission
- HTTPS Encryption: Data encrypted during transfer
- Firebase Privacy Shield: Google’s compliance with EU-US data protection framework
Compliance with regional laws
🇪🇺 European Union (GDPR)
- Legal basis for processing: Consent, Contract, Legitimate Interest
- Data Protection Officer available at: support@neuroxes.com
- Right to lodge complaint with your local supervisory authority
🇺🇸 United States (CCPA, HIPAA)
- CCPA: We don’t sell your data. You can delete your data anytime.
- HIPAA: AiDia is NOT a HIPAA-covered entity. We don’t have access to your medical records or prescriptions.
🇬🇧 United Kingdom (UK GDPR)
- Same protections as EU GDPR
- Right to complain to the Information Commissioner’s Office (ICO)
🇨🇦 Canada (PIPEDA)
- We follow PIPEDA’s 10 Fair Information Principles
- You can withdraw consent for data processing anytime
🇦🇺 Australia (Privacy Act)
- Compliance with Australian Privacy Principles (APPs)
- Right to complain to the Office of the Australian Information Commissioner (OAIC)
🇧🇷 Brazil (LGPD)
- Legal basis for processing: Consent and Legitimate Interest
- Right to complain to ANPD (Brazilian Data Protection Authority)
We apply the highest privacy standards globally, regardless of where you’re located. Your privacy matters everywhere.
12. Policy Changes
How we update this policy
- We may update this policy to reflect new features, laws, or practices
- Material changes will be notified via in-app notification and email (if you have an account)
- The “Last Updated” date at the top will always show the latest version
- Continued use of the app after changes means you accept the updated policy
Version history
| Version | Date | Changes |
|---|---|---|
| 1.0 | November 28, 2025 | Initial privacy policy release |
You can view the full version history at: neuroxes.com/terms-condition#privacy
13. Contact Us
We’re here to help! Contact us anytime about privacy concerns, data requests, or general questions.
Response time: 24–48 hours
Visit for updates and news
Settings → Help & Support
Submit a support ticket directly
Data Protection Officer
For GDPR-related inquiries, you can reach our Data Protection Officer at:
- Email: support@neuroxes.com
- Subject line: “ATTN: Data Protection Officer”
Legal requests
For legal matters, law enforcement requests, or subpoenas:
- Email: support@neuroxes.com
- Subject line: “Legal Request”
Your trust is important to us. If you have any concerns about how we handle your data, please don’t hesitate to reach out. Contact us now →
AiDia is NOT a medical device and should NOT replace professional medical advice.
- This app provides estimates only and may contain inaccuracies
- Always consult your doctor or diabetes care team before making medical decisions
- Do not adjust insulin doses based solely on app recommendations
- In case of medical emergency, call emergency services immediately
- AiDia is not FDA-approved or clinically validated
- Use at your own risk and discretion
By using AiDia, you acknowledge that you understand these limitations and will use the app as a supplementary tool only.