Privacy Policy

1. General Information

The protection of your personal data is very important to us. In this privacy policy, we inform you about what personal data is collected, processed and stored in our app and for what purpose this is done.

The processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection laws.

2. Responsible Party

Responsible for data processing is:

  • Fabian Link
  • Kolonie Vollmond 93, 44803 Bochum, Germany
  • carbcheck@gmail.com

3. Access to the App

Our app can only be used after registration and login. When accessing the app, technically necessary data is processed to ensure operation.

The following data, among others, may be processed:

  • IP address (shortened or anonymized, if possible)
  • Date and time of access
  • Device and browser information

This data is used exclusively for the technical provision and security of the app.

4. Registration and Login (Supabase)

We use Supabase for user registration and authentication.

Processed data:

  • Email address
  • User ID
  • Name or username (if provided)

Purpose of processing:

  • Creation and management of your user account
  • Secure login
  • Protection against unauthorized access

Legal basis:

  • Art. 6 para. 1 lit. b GDPR (Contract fulfillment)

Supabase processes the data as a processor in accordance with Art. 28 GDPR. You can find more information in Supabase's privacy policy.

5. Cookies

Our app uses only technically necessary cookies.

These cookies are required to:

  • maintain login status
  • enable secure use of the app
  • provide basic functions

Legal basis:

  • Art. 6 para. 1 lit. f GDPR (Legitimate interest)
  • or Art. 6 para. 1 lit. b GDPR (Contract fulfillment)

No tracking, marketing or analytics cookies are used.

6. Processing of Health Data

Our app may process health-related data, in particular:

  • Blood sugar values
  • Timelines of measurements
  • Manual additions by the user, if applicable

This data is considered special categories of personal data according to Art. 9 GDPR.

Purpose of processing:

  • Calculation and display of personal blood sugar trends
  • Support for diabetes management
  • Provision of personalized evaluations

Legal basis:

  • Art. 9 para. 2 lit. a GDPR (Explicit consent)
  • Art. 6 para. 1 lit. b GDPR (User contract)

Storage is exclusively account and user-related.

7. Stored Product and Scan Data

When scanning barcodes, the following data is stored:

  • Scanned product IDs / barcodes
  • Associated nutritional information (e.g. carbohydrates)
  • Link to your user account

Purpose:

  • Calculation of carbohydrates
  • Display of scanned products
  • Improvement of user experience

8. Storage and Hosting

The data is stored on Supabase servers.

  • Server locations: 🔧 EU / specify third country if applicable
  • Data transmission is encrypted (HTTPS / TLS)
  • Access only for authorized systems

9. Data Sharing

Your personal data will not be shared, except:

  • it is necessary for contract fulfillment
  • we are legally obliged to do so
  • you have explicitly consented

Your data will not be sold.

10. Retention Period

We only store your data as long as:

  • your user account exists
  • it is necessary for the respective purposes
  • legal retention obligations exist

After deletion of your account, your data will be completely deleted, unless legal obligations prevent this.

11. Your Rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Correction (Art. 16 GDPR)
  • Deletion (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Revocation of your consent (Art. 7 para. 3 GDPR)

You can contact us at any time at:
carbcheck@gmail.com

12. Right to Complain

You have the right to complain to a data protection supervisory authority if you believe that the processing of your data violates the GDPR.

13. Data Security

We use technical and organizational security measures to protect your data from:

  • Loss
  • Manipulation
  • Unauthorized access

to protect.

14. Changes to this Privacy Policy

We reserve the right to adjust this privacy policy if:

  • legal requirements change
  • new features are added to the app

The current version is available at any time in the app.

    CarbCheck