Privacy Policy

Last updated September 23, 2026

Aura T1D is a viewer for your own glucose data. You connect it to one source: either your Nightscout site, or your Dexcom account through Dexcom Share. It shows a clean dashboard over the readings that source already holds (and, with Nightscout, your insulin and carb entries too), plus trends drawn from that data. This policy explains what we store, why, and what we never do with it.

The short version: your data is yours. We do not sell it, we do not show ads, and we do not use it for advertising or profiling.

What we collect and why

Account details

When you sign in we receive your email address and a unique account ID from Firebase Authentication (Google, a service of Google LLC). If you choose Google sign-in, Google also shares your name and profile picture. We use these only to sign you in and to show who is on an account.

Your Nightscout connection

If you connect a Nightscout site we store its address and the access token or API secret you enter. They are saved in your account record (Google Cloud Firestore). People you invite can view your dashboard and share access to the account's connection details, but they cannot change them.

Your Dexcom connection

If you connect a Dexcom account instead, we store the Dexcom username and password you enter, and your region, in your account record (Google Cloud Firestore). Our servers use them to sign in to Dexcom Share — Dexcom's own sharing service, the one behind the Share feature in the Dexcom app — and fetch your readings on your behalf. The password is never shown in the app again after you save it. Like the Nightscout details, it is part of your account record, which anyone you have invited to your account can also read. Aura T1D is not affiliated with or endorsed by Dexcom, and Dexcom may change or restrict Share at any time; if that happens the connection stops working and the app shows the source as unavailable.

Glucose and treatment data

Readings are fetched from your source each time you open the app; with Nightscout we also fetch insulin and carb entries and pump/sensor status. With Dexcom Share, our servers contact Dexcom roughly every minute while the app is open, about once an hour in the background to keep your history up to date, and every couple of minutes for alerts if you turn them on. Dexcom Share only provides the last 24 hours, so to power trends and monthly statistics we keep a compact history of your readings and daily summaries in your account (we do the same for Nightscout). This is health data and it is only ever tied to your own account.

Documents you add

You may attach a small number of text documents (for example a care plan). We store the extracted text in your account, we do not send it anywhere else, and we use it for nothing else. You can delete a document at any time.

Invitations

When you invite someone we store their email address so they can be recognised when they sign in, and we send them an invitation email through Resend, an email delivery service.

Notifications and widgets

If you turn on alerts, we store a device token that lets Apple deliver notifications and Live Activity updates to your device. Tokens are used only to deliver these updates to you.

Usage analytics

We collect anonymous, aggregated usage information (for example which screens are used and app errors) to keep the app working well. Analytics never include glucose values, treatments or your Nightscout or Dexcom login details.

Optional web-only features

The web version offers an optional remote-command feature that the account owner must switch on and configure. If you do, the one-time-password secret you provide is kept in a protected part of your account that other members cannot read, and it is used only to send commands you start yourself. This feature is not part of the iOS app.

Where your data lives

Your account data is stored in Google Cloud Firestore and protected by security rules that limit each record to its owner and the people they invite. The app is hosted on Vercel. All traffic uses HTTPS.

Who we share data with

Only the service providers named above (Google Firebase, Resend, Apple push services, Vercel and our analytics provider), and only to provide the features you use. If you connect a Dexcom account, our servers also send your Dexcom username and password to Dexcom, Inc.'s Share service in order to sign in and retrieve your own readings; we never send your glucose data to Dexcom, and Dexcom is not otherwise involved. We never sell personal or health data, and we do not share it with advertisers or data brokers. We would disclose data only if required by law.

Your choices and rights

You can change or remove your glucose source at any time in Account (Switch source). Switching clears the previous source's login details from your account record, so removing a Dexcom connection deletes the stored Dexcom username and password. Closing your account removes them too.
You can remove members you have invited, and delete documents you have added.
You can close your account in the app, under Account → Delete account. This signs you out immediately and permanently: you will not be able to sign in again, and that email address cannot be used to register a new account.
Closing your account does not erase the history we already hold. If you want your stored data erased as well, email support@aurat1d.com from the address you signed up with and we will remove it.
You can ask us for a copy of the data we hold about you at the same address.

Children

Aura T1D is intended for adults and for parents or caregivers managing a family member's data. It is not directed at children under 13, and we do not knowingly create accounts for them.

Not a medical device

Aura T1D displays information from your own Nightscout site or Dexcom account for convenience. It is not a medical device, does not give dosing or treatment advice, and must not replace your CGM, pump or care team. Always confirm readings on your primary devices before making any treatment decision.

Changes and contact

If this policy changes in a meaningful way we will update the date at the top and note the change in the app. Questions: support@aurat1d.com.