Privacy Policy

1. Introduction

Welcome to Ando (“we”, “our”, or “us”).

Ando is operated by ARETAEUS, a company registered in France (SIREN 932 795 925), 103 avenue Parmentier, 75011 Paris. Ando is a consumer software companion for people who use a CGM. It helps you see glucose alongside activities and other context. It is not a medical device. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services at https://ando.care and https://app.ando.care (collectively, the “Service”).

Sensitive health data

Because Ando processes glucose and other health-related data, we treat it as sensitive and apply additional safeguards. We process connected health data to provide the service you request and, where required by law, on the basis of your explicit consent for certain features.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address and display name when you create an account
• Food Logs: Meal names, timestamps, and photos you choose to log
• Manual Activity Logs: Activities you manually record in the app
• Subscription status: Whether your account is on a trial or a paid plan, and related store transaction identifiers needed to unlock the Service

2.2 Information from Third-Party Services

When you connect third-party services to Ando, we receive data from those services:

We only access data you explicitly authorize through each service's OAuth consent flow. You can revoke access at any time.

2.3 Information Collected Automatically

• Usage Data: App and web interactions, features used, and timestamps
• Device Information: Device type, operating system version
• Log Data: Error logs and performance data to improve reliability and fix issues
• Product analytics: We use PostHog (EU-hosted by default in our configuration) to understand how the website and product are used: onboarding, feature usage, and product improvement. This is not used to show you advertising. Our servers (including Supabase) may also store technical and usage-related data needed to run the service and support your account. We do not use your health data for advertising or marketing.
• Ad landing page: when you arrive on app.ando.care/try from one of our ads on Facebook or Instagram and tap an App Store or Google Play button, we tell Meta that this ad led to a store visit, so we can measure our ads. We send the ad click identifier Meta added to the link, your IP address and your browser type, and only with your agreement where the law requires it (in the EU and the UK we ask first). No cookies, nothing from the app, and never any health data. The app itself contains no advertising trackers.

2.4 What We Do NOT Collect

3. How We Use Your Information

We use your information solely to provide and improve the Service:

Product analytics and error reporting help us improve reliability, onboarding, and the product experience. They are not used to profile you for advertising. We do not sell your data.

We do NOT:

4. Legal Bases for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

1. Contract: To provide the services you signed up for
2. Consent: For optional features like Strava description updates and research participation
3. Legitimate Interest: To improve our services, fix bugs, and ensure security

5. How We Share Your Information

5.1 With Third-Party Services (At Your Request)

When you connect Strava, we may update your activity descriptions with glucose statistics. This is done only with your explicit consent and can be disabled in Settings.

5.2 Service Providers

We use the following service providers to operate Ando:

We use Apple, Google, and RevenueCat for subscriptions. Payment card details are processed by Apple or Google only; we do not store them.

All providers are bound by data processing agreements and appropriate safeguards (Standard Contractual Clauses).

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests by public authorities.

6. Third-Party Services

Ando connects to external services like Strava, Dexcom, LibreLinkUp, and Nightscout. We also use Apple, Google, and RevenueCat for subscriptions. When you use these integrations, their privacy policies also apply to the data they process.

We recommend reviewing their privacy policies:

• Strava Privacy Policy →
• Dexcom Privacy Policy →
• Abbott/LibreLinkUp Privacy Policy →
• Nightscout (open-source, self-hosted) →
• Apple Privacy Policy →
• Google Privacy Policy →
• RevenueCat Privacy Policy →

We are not responsible for the data practices of these third-party services.

7. Research & Clinical Studies (Optional)

7.1 Participation in Research

With your explicit consent, your anonymized data may be used to support research conducted by accredited academic institutions or healthcare organizations.

7.2 What This Means

7.3 How to Participate

To participate, enable “Contribute to Research” in Settings → Privacy.

To withdraw, disable “Contribute to Research” at any time. Previously shared anonymized data cannot be recalled, but no new data will be shared.

7.4 Research Partners

We only partner with:

• Accredited academic institutions
• Healthcare organizations with ethics board approval (IRB/CPP)
• Research projects that have passed ethical review

8. Data Retention

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication: Secure authentication via Supabase Auth
• Token Security: Third-party tokens (Strava, CGM) are encrypted using AES-256-GCM before storage
• Access Control: Row-level security ensures you can only access your own data
• Anonymization: Research data is irreversibly anonymized before any sharing

While we strive to protect your information, no method of transmission over the Internet is 100% secure.

10. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

To exercise any of these rights, contact us at privacy@ando.care.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA (notably the United States for some service providers). We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Service providers with appropriate data protection certifications

12. Do Not Track

Most web browsers and some mobile operating systems include a “Do Not Track” (DNT) feature. As there is no uniform standard for DNT signals, we do not currently respond to DNT browser signals. If a standard is adopted in the future, we will update this policy accordingly.

13. Age Restriction

Ando is intended for users aged 16 years and older. We do not knowingly collect personal information from users under 16. By creating an account or using our services, you confirm that you meet this age requirement.

If we learn that we have collected data from a user under 16, we will take steps to delete that information promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the “Last updated” date
• Sending you an email notification for material changes

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Quick Summary