Caramella – Privacy Policy

Effective date: October 2025
App name: Caramella
Developer: Bertil Jasper Cochlovius
Contact: hello@caramella.life

1. Purpose

Caramella helps people living with diabetes capture meals, calculate insulin boluses, and log daily data in a simple, privacy-first way.

2. Data We Collect

Caramella stores only the data required for your use of the app:

Account information: email address and optional first name/avatar.
App data: meals (photos, nutrients, notes), diary entries, insulin entries, settings (ICR, ISF, targets), and ratings.
Device data: basic technical logs (for crash/error diagnosis; no advertising ID).
Payments: if you buy a subscription, Apple or Google handle the purchase and billing. Caramella receives no payment details.

3. How We Use Data

To operate and personalize your app experience.
To sync and back up your entries securely on Supabase.
To generate your exports (CSV/PDF).
To analyze anonymous usage statistics (only if you consent to analytics).

4. Data Storage and Security

All data is stored in the European Union (Supabase Postgres + Storage) with Row-Level Security (RLS) so you can only access your own data.
Photos and avatars are stored in user-scoped folders.
All connections are encrypted (HTTPS / TLS).

5. Data Sharing

We never sell or share your data with third parties for advertising.
Only essential processors are used:

Supabase Inc. (for database, authentication, storage)
OpenAI LLC (for meal photo analysis via anonymized API call)
Each request is sent without personal identifiers.

6. Your Rights

You can at any time:

Access or export your data (CSV/PDF inside the app).
Delete your account and all stored data (Settings → Delete Account).
Withdraw consent for analytics.

To exercise other GDPR rights (access, rectification, erasure, restriction), email privacy@caramella.life.

7. Legal Basis

Processing is based on your consent (Art. 6 (1)(a) GDPR) and performance of contract (Art. 6 (1)(b) GDPR).

8. Children

Caramella is intended for users 16 years and older.

9. Changes

We may update this policy occasionally. The current version is always available at https://caramella.life/caramella-privacy-policy/