Privacy Policy

Who we are and what this policy covers

This policy explains how KL8 Tech Group (“we”, “us”) handles information in the GlucoHome Hub Android app.

App: GlucoHome Hub (package id.glucohome.hub)
Developer: KL8 Tech Group · ABN 77 923 391 849 · New South Wales, Australia
Privacy contact: ktb@kl8tech.group

GlucoHome Hub is a companion display for your GlucoHome account at glucohome.id. Your GlucoHome account itself (sign-in, glucose history, Dexcom connection saved in your account, subscriptions and so on) is covered by the GlucoHome Privacy Policy. This page covers what the Hub app adds on top of that.

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We do not sell, rent or trade your information. GlucoHome Hub is not a medical device.

No ads, analytics or tracking

GlucoHome Hub contains no advertising, no analytics or crash-reporting SDKs and no tracking libraries. It does not use the advertising ID, does not request location, and does not access your contacts, photos, files, microphone or camera. Release builds do not write sign-in tokens, cookies or web addresses to the device log.

What the app handles and why

• Your GlucoHome sign-in. You sign in with Google on glucohome.id, in a browser tab opened by the app. We never see your Google password. The app keeps the resulting GlucoHome session and a Hub device token, encrypted on the device, so it can stay signed in.
• Glucose readings (health information). The app downloads your latest readings, the last few hours of history and, if your account provides one, a trend estimate from glucohome.id, and shows them on screen. It keeps the most recent reading on the device so it can stay on screen (in grey) when there is no signal.
• Dexcom Share details (optional). If you add them as a backup source, your Dexcom Share username and password are stored encrypted on the device only and sent only to Dexcom’s Share service to fetch your latest readings. Hub does not send them to glucohome.id.
• Hub check-in. About every 30 seconds while it is running, the app tells glucohome.id that the display is working: a random ID created when the app was installed, app version, last-seen time, the time of the reading on screen, where it came from (GlucoHome or Dexcom), a simple status (for example “ok” or “no signal”), battery level, whether it is charging, and whether the optional lamp feature is on. This lets you see in GlucoHome whether your Hub is online and lets you ask it to resync. It does not include your glucose values.
• Your agreement. When you accept the Terms of Use and medical disclaimer in the app, the terms version and time are recorded on your GlucoHome account.
• Settings and home devices (optional). Display settings, and the local network addresses and IDs of any smart lamps or smart plug you add, stay on the device. Lamp and plug commands are sent directly over your home Wi-Fi and are not sent to us. If you use automatic Philips Hue bridge discovery, the app asks Signify’s discovery service (discovery.meethue.com), which sees your internet address.

Permissions

• Internet, network and Wi-Fi state: to fetch readings and to notice when the connection drops or returns.
• Wi-Fi multicast: to find supported smart lamps on your home network, only if you use that feature.
• Foreground service and notifications: to keep the display running, with an ongoing notification so you know it is active.
• Start after restart and wake lock: to start the display again after the device restarts, and to keep the device awake briefly while a reading is fetched.
• Precise timing (exact scheduling): to check for a new reading on time, shortly after each expected 5-minute sensor sample. You can turn this off in Android Settings; Hub then uses less precise timing.

Who receives your information

Some of these providers store or process data outside Australia, and may not be bound by the Australian Privacy Principles.

• GlucoHome (glucohome.id), our own service, hosted by Hostinger (data centres may be outside Australia): sign-in, readings, check-ins and agreement records.
• Google (United States and other countries): sign-in only, as described in the GlucoHome Privacy Policy.
• Dexcom (United States, or another region depending on your Dexcom account): only if you add Dexcom Share details.
• Signify / Philips Hue: only if you use automatic Hue bridge discovery.

We may also disclose information where the law requires or permits it.

Security

All internet traffic from the app uses HTTPS (plain-text connections are blocked). Sessions, tokens and Dexcom Share details are encrypted on the device with Android Keystore-backed keys, and app data is excluded from device backups. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information and will follow the Notifiable Data Breaches scheme if a breach is likely to cause serious harm.

Keeping and deleting your information

• On the device: sign out in Hub Settings to remove your GlucoHome session; remove Dexcom Share details in Hub Settings; or clear the app’s storage or uninstall the app to remove everything Hub saved on the device.
• Your GlucoHome account: see glucohome.id/delete-account for every step, what is deleted and what may be kept. Deleting your account also removes Hub check-in and device token records. If you can’t sign in, email ktb@kl8tech.group from your account’s email and we will delete it within 30 days.

Children

GlucoHome accounts are for people aged 13 and over. Users under 18 need a parent or guardian’s consent, and a parent or guardian may set up a Hub for their family. We do not knowingly let children under 13 open their own account. If you believe we have collected information from a child under 13, contact us and we will delete it.

Your rights

You can ask to access or correct the information we hold about you by emailing ktb@kl8tech.group; we will reply within 30 days. If you have a privacy complaint, email us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy. We will change the “Last updated” date above and, for material changes, tell you in the app or on glucohome.id.

Contact us

ktb@kl8tech.group · GlucoHome Hub support
KL8 Tech Group · ABN 77 923 391 849 · New South Wales, Australia