Privacy, cookies and terms

1. Legal notice and identification of the data controller

In compliance with article 10 of Law 34/2002 (LSSI-CE), the details of the owner of this site are provided below:

Titular / Responsable: GLOBAL TORLA, SL

NIF / CIF: B10927689

Domicilio: PASEO DE LA CASTELLANA, 266 E3

Website: glukochi.com

Glukochi (hereinafter, "the Service") is a web application that represents your glucose in real time as a visual creature based on the data you connect (for example, your own Nightscout).

2. Privacy policy (GDPR)

This policy complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

2.1 Data controller

The data controller is the owner indicated in section 1. For any matter regarding your data, write to hola@glukochi.com.

2.2 Data we process

Category	Data	Source
Identification and account	The name you choose, username (your address), email, password (stored encrypted with a hash), optional profile (e.g. type 1, type 2, gestational, caregiver…).	You, when you register.
Connection to your sensor	Your Nightscout URL and the access token/key you enter to read your glucose and insulin.	You, in the settings.
Health data	Glucose and active insulin values shown on screen. They are not stored on our servers: they are read live from your Nightscout, and insulin is sent to your Nightscout, not saved locally.	Your sensor / Nightscout.
Payment	The subscription is charged through Stripe. Card data is processed by Stripe; we only store identifiers (customer and subscription) and the status/expiry of the subscription.	Stripe.
Technical data	IP address and sign-up date (for security and abuse prevention).	Automatic.

Glucose and insulin data are special category data (health, art. 9 GDPR). Their processing is based on your explicit consent [art. 9.2.a] and on the performance of the Service you request.

We do not store or use your glucose values. Glukochi does not store any glucose reading from its users on its servers, nor does it use them for any other purpose. Each value is read live from your own Nightscout solely to display it on screen at that moment: it is not recorded, not stored, not shared with third parties and not analyzed. The insulin you log is sent to your Nightscout; it is not saved in Glukochi either.

2.3 Purposes and legal basis

Providing the Service (creating your account, showing your creature, connecting your sensor): performance of a contract [art. 6.1.b].
Displaying health data on your page: explicit consent [art. 9.2.a], revocable at any time.
Charging the subscription of €15 /month: performance of the contract [art. 6.1.b] and legal accounting/tax obligations [art. 6.1.c].
Security and abuse prevention (IP, sign-up control): legitimate interest [art. 6.1.f].

2.4 Recipients and data processors

We do not sell your data. We share only what is essential with providers acting as processors:

Stripe Payments Europe, Ltd. — payment processing and subscription management.
[HOSTING PROVIDER] — server where the Service runs.
Your own Nightscout — you define the connection; its data is governed by your own configuration.

2.5 International transfers

Some providers (e.g. Stripe) may process data outside the EEA. In such cases, appropriate safeguards apply, such as the European Commission's Standard Contractual Clauses.

2.6 Retention

We keep your account data while it is active. If you cancel or request closure, we delete or anonymize it, except for billing data that the law requires us to keep (normally up to 6 years under commercial/tax regulations).

2.7 Your rights

You may exercise at any time, free of charge, your rights of access, rectification, erasure, objection, restriction, portability and to withdraw consent, by writing to hola@glukochi.com (proof of identity may be requested). You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your supervisory authority.

3. Cookie policy

We use the minimum number of cookies possible. We only load analytics if you accept in the cookie notice; without your consent it is not activated.

Cookie	Type	Purpose	Duration
`PHPSESSID`	Technical (essential)	Keep you logged in and protect forms (CSRF).	Session
`gk_consent`	Technical (preference)	Remember your choice about this cookie notice.	6 months
Google Analytics (`_ga`, `_ga_*`)	Analytics (third party)	Measure site usage on an aggregated basis. They are only loaded if you accept the cookie notice; the IP is anonymized.	Up to 24 months
Stripe cookies	Third party (payment)	Only during payment: security and fraud prevention in the charging process.	Per Stripe

Technical/essential cookies are exempt from consent under art. 22.2 LSSI and the EDPB guidelines, because they are essential for the Service to work. Even so, we inform you of all of them. You can delete or block cookies from your browser settings; note that without the essential ones you will not be able to log in.

4. Terms of service and subscription

What it is: Glukochi is a visual companion. It is not a medical device (see section 6).
Price: €15 /month (VAT included where applicable), charged via subscription through Stripe.
Renewal: the subscription renews automatically each month until you cancel it.
Cancellation: you can cancel whenever you want by writing to hola@glukochi.com or through your payment provider. When you cancel, your Glukochi is paused at the end of the period already paid for; you can reactivate it by paying again.
Non-payment: if the payment is not completed, the account is paused until it is settled.
Correct use: you agree to use the Service in accordance with the law and not to enter third-party credentials without authorization.

5. Right of withdrawal

As a consumer in the EU, you have 14 calendar days to withdraw from the contract without justification (arts. 102 et seq. of Royal Legislative Decree 1/2007 and Directive 2011/83/EU).

Immediate start of the service and waiver. By activating your account and starting to use Glukochi during the 14-day period, you expressly request that the service begin immediately and you acknowledge that, once the service has been fully performed, you will lose the right of withdrawal (art. 103.a of RLD 1/2007). If you withdraw before that period ends and have already used the service, the proportional part used may be charged.

To withdraw, an unequivocal statement to hola@glukochi.com within the deadline is enough. We will refund what is due without undue delay.

6. Medical disclaimer and exemption from liability

Glukochi is NOT a medical device and is not certified, authorized or approved as a medical product by any authority — neither under Regulation (EU) 2017/745 (MDR) in Europe, nor by the FDA (Food and Drug Administration) in the United States. It is a general wellness tool, a visual and motivational companion, and it does not provide medical advice, guidance or information.

It does not diagnose, does not treat, does not prevent any disease or condition.
Do not make clinical decisions (insulin doses, food intake, medication, emergencies) based on Glukochi. Always use your sensor, meter and the guidance of your healthcare team.
The values shown may have delays, errors or connection drops and should not be considered exact.
The insulin button only logs a unit in your Nightscout for the active insulin calculation; it does not administer insulin nor replace your pump, pen or system.
In case of severe hypoglycemia or hyperglycemia symptoms, act according to your medical instructions and, if it is an emergency, call the emergency services (112 in Spain, 911 in the USA).

Waiver: by using Glukochi you accept that you do so at your own risk and that the owner will not be liable for health decisions made based on the information shown. This exemption does not limit rights that the law mandatorily grants to the consumer.

United States users. Glukochi is a general wellness tool and is not an FDA-regulated medical device: it does not diagnose, treat, cure or prevent any disease, and it provides no medical advice or treatment, dosing or medication recommendations. Glukochi does not store your glucose data and must not be used to make health decisions; always consult your healthcare professional.

7. Warranties and limitation of liability

The Service is provided "as is" and "as available". To the maximum extent permitted by law, the owner does not guarantee uninterrupted availability or the absence of errors and is not liable for indirect damages or data loss arising from third-party failures (sensor, Nightscout, connectivity or payment providers). Nothing in the above excludes or limits liability that cannot be excluded legally, including that arising from willful misconduct, gross negligence or the mandatory rights of the consumer.

8. Applicable law and jurisdiction

These terms are governed by Spanish and European Union law. For consumers, the courts of your place of residence shall have jurisdiction. You may also use the European online dispute resolution platform: ec.europa.eu/consumers/odr.

9. Contact

For any question about privacy, cookies, your subscription or these terms, write to us at hola@glukochi.com.

10. Notice for United States users

If you access Glukochi from the United States, the following applies in addition to the above. This section is provided in good faith and does not constitute legal advice.

10.1 Nature of the service (FDA / HIPAA)

Glukochi is a general wellness tool, not an FDA-regulated medical device, and it does not provide medical advice, diagnosis or treatment (see section 6). Glukochi is not a covered entity or a business associate under HIPAA: we are not your healthcare provider or your insurer.

10.2 Privacy and consumer health data

We do not sell or share your personal information (under any meaning of "sale" or "sharing" per California's CCPA/CPRA and similar state laws). As for consumer health data (e.g. under Washington's My Health My Data Act): we do not collect, store, sell or share it. Your glucose and insulin values are read live from your Nightscout and processed only ephemerally to display them on screen; they are not retained on our servers.

Under applicable state privacy laws (e.g. California's CCPA/CPRA and consumer health data laws such as Washington's My Health My Data Act), you may request to access, correct, delete and learn about the processing of your data, and you will not be discriminated against for exercising those rights. To exercise them, use the contact email in section 9.

10.3 Children's privacy (COPPA)

Glukochi is not directed to children under 13 and we do not knowingly collect personal data from children under 13 (COPPA). People under 18 should only use the Service under the supervision of a parent or legal guardian.

10.4 Disclaimer of warranties and assumption of risk

To the maximum extent permitted by applicable law, the Service is provided "AS IS" and "AS AVAILABLE", without warranties of any kind, express or implied, including — without limitation — those of merchantability, fitness for a particular purpose and non-infringement. You use Glukochi at your own risk and assume the risks of any decision you make. To the maximum extent permitted by law, the owner's total liability for any claim relating to the Service is limited to the amount you paid in the 12 months prior to the event giving rise to the claim; nothing here excludes liabilities that cannot be excluded by law.

10.5 Governing law and dispute resolution (USA)

For users located in the USA, before starting any claim we ask you to attempt an amicable resolution by writing to the email in section 9; we will try to resolve it within 60 days. You may still bring a claim in small claims court. This section does not limit the rights mandatorily granted to you by your state's law.

"Do Not Sell or Share My Personal Information." Glukochi does not sell or share your personal information and does not store your glucose data. If you reside in the USA and want to exercise your privacy rights, write to us at the contact email in section 9.