Effective 2026-04-15
Diabec ("we", "us") operates the Diabec mobile application, website, and supplement shop. Contact: jeff@dia-bec.com. This Privacy Policy explains what we collect, why, and your rights.
To provide core tracking features, personalise insights, deliver your supplement orders, alert your Care Circle when you use the SOS, respond to support requests, prevent fraud, comply with legal obligations, and (only with your separate opt-in) send marketing communications.
EU/UK users: we rely on (a) your consent (Art. 6(1)(a), and Art. 9(2)(a) for health data), (b) performance of our contract with you (Art. 6(1)(b)), (c) legitimate interests in service security and improvement (Art. 6(1)(f)), and (d) legal obligation (Art. 6(1)(c)) for tax and compliance retention.
We do NOT sell your data. We share only with processors who act on our instructions under a data processing agreement:
We also disclose data if legally required (court order, subpoena).
Our servers are located in the United States (Fly.io Ashburn, Supabase, Cloudflare). If you are in the EU, EEA, or UK, your data is transferred internationally under Standard Contractual Clauses (SCCs) approved by the European Commission. You can request a copy of the SCCs by emailing jeff@dia-bec.com.
EU Representative (GDPR Article 27): to be appointed before EU launch. Contact jeff@dia-bec.com until the representative is named.
Active account: for as long as you keep the account. After account deletion: we delete personal data within 30 days, except transactional records we are required to keep for up to 24 months for tax, legal, and fraud-prevention purposes. Aggregated and fully de-identified analytics may be retained indefinitely.
Subject to applicable law, you can:
Email jeff@dia-bec.com to exercise any right; we respond within 30 days.
Diabec is not intended for users under 13. We require a date of birth at registration and block accounts where the user is under 13. Users aged 13–17 must confirm a parent or guardian is aware they use the app.
Diabec is a dietary supplement and wellness-tracking companion, not a medical device. The app does not diagnose, treat, cure, or prevent any disease. AI-generated estimates (carbs, glucose prediction, sleep correlation) are informational only. Always consult a licensed healthcare professional before making medical decisions.
We protect your data with TLS in transit, encryption at rest (iOS Keychain / Android Keystore for tokens), least-privilege access controls, and regular security review.
If a personal-data breach affects you and creates a risk to your rights and freedoms, we notify the relevant supervisory authority within 72 hours of becoming aware of it (GDPR Article 33), and we notify you without undue delay where required by law (GDPR Article 34). No system is perfectly secure; we treat every incident with the same transparency.
We may update this Policy. If we make material changes we email you at least 30 days before the changes take effect. Continued use after the effective date means you accept the updated Policy.
Questions about this Policy or your data: jeff@dia-bec.com.
Diabec is operated by NIBARTECH LTD. Effective date: 2026-04-15. © 2026 Diabec. All rights reserved.