GliderMon app privacy policy

The GliderMon app for iPhone and Android · effective November 2, 2026

This policy covers the GliderMon app. The website and the launch waitlist have their own website privacy policy.

Who we are

GliderMon is made by Nestlight LLC ("we", "us"), 418 Broadway Ste R, Albany, NY 12207, USA. You can reach us about privacy at info@nestlightstudio.net.

The short version

GliderMon is a companion game for people living with diabetes. Your glucose readings stay on your phone. We don't run accounts or servers for GliderMon, we don't show ads, we don't track you across apps, and we never sell or share your health information. If you agree, GliderMon sends usage and crash reports that aren't linked to you (never anything about your health); it's off unless you say yes.

What GliderMon stores, and where

Everything below is stored only on your device, in GliderMon's private app storage:

• Glucose readings you allow GliderMon to read from Health Connect (Android) or Apple Health (iOS): the time, the value and its source. We keep the last 14 days and delete older readings automatically.
• Check-ins and goals: your daily goals and how each day went (for example, time in range and the number of high or low readings), kept for up to 60 days.
• Daily summaries: one short summary for each day, kept for up to 200 days, so GliderMon can show how you've been doing over a week, a month or since your last visit: whether you checked in, your plan and whether its goal was met, your planned habits and the small wins you logged, and that day's glucose totals (how many readings and how much of the day they covered, their average and spread, how many were in each range, the first reading of the morning, how many overnight readings were in range and, on days with sensor readings, the same totals for each hour). It never keeps the time of any reading or a list of your readings, though on a day with only one or a few readings a total can be a single reading. "Delete my glucose readings" removes the glucose totals from every summary; "Delete my data" removes the summaries.
• About you, if you choose to tell us: a name or nickname, your glider's name, your diabetes type, what you take for your diabetes, how you check your glucose, what you'd like GliderMon to help with and when your day usually starts.
• Your routine, as GliderMon learns it. GliderMon notices a few patterns from what it already sees, so it can fit your day:
  • the time of day of your recent check-ins (and your phone's time zone then, so travel and clock changes can be set aside), at most 28 of them from the last 42 days;
  • when you open the app before your check-in opens (the first time that day, only from 5 AM, so a night-time open is never kept; at most 28 days from the last 42);
  • the dates of the sensor and pump site changes you log, with your phone's time zone then, so they're shown as you lived them (kept 120 days), and the kind of sensor and pump site you use if you tell it;
  • what it noticed from these (for example, the hour you usually check in, or how long your pump sites usually last) and your answers to its questions, including when it asks whether something seems to have changed, whether you plan sensor changes around their grace period, and "My times vary", which pauses questions about your reminder time for 60 days;
  • when it last asked you something and whether you said "Not now", so it asks less (kept up to 60 days);
  • which habits on your plan you did each day (only the days you said yes; kept 28 days; never a medicine, a device change or a food habit) and the ones you chose to keep on your plan;
  • if you say yes to it, a different reminder time for weekends, or for one weekend day;
  • if you picked "Getting ready for doctor visits" and tell it, the day of your next appointment (only the day, never what it's for; mentioned at a check-in around that day and kept until the day after it).
  It also checks, on your phone, whether your readings keep arriving after the last day of the sensor kind you told it (only their times, never their values), so it can ask whether you changed it.
  
  Your glider adjusts small timing things on its own and always tells you, with Undo. Anything that changes what you're offered, it asks first. All of it stays on this phone. The things it adjusts on its own are the time of your daily reminder, an earlier hour for your check-in to open when you're often up before it, and the day a sensor or pump site change is mentioned (a day ahead, when you usually change before it comes up), and only after you say yes to that once. You can turn it off, undo any adjustment, or forget everything it learned, in Settings under "What GliderMon has learned". Forgetting everything keeps your own answers, such as your sensor or pump site kind, until you change or clear them or delete your data. This is kept like your readings: on your device only, never in backups or usage reports, and encrypted (see Security). The reminder's time itself, and its weekend time if you set one, is saved with your other settings, which device backups can include; what it was learned from is not.
• How you're feeling, if you answer: the daily check-in can ask "How are you today?" (you can skip it, or turn the question off in Settings). GliderMon keeps the one or two words you picked (from a fixed list) for that day only, plus whether today or yesterday felt hard (the day, not the words), so it can be gentler the next morning. It never reads your glucose to do this, and it's never used for anything in the game's rewards.
• Your little journal, only if you turn it on: it's off unless you choose to keep one. If you do, it keeps one entry a day: the words you picked and, if you write one, a short "One good thing" note (one line, up to 140 characters). Nothing else: no scores, charts or trends. Entries are kept until you delete them: one at a time, all at once ("Delete my journal"), when you turn the journal off and choose to delete, or with "Delete my data". Turning it off and keeping your entries leaves them readable in the app, with nothing new added. The journal is never sent to us or anyone else, never included in device backups, and encrypted like your readings (see Security). One exception: on a rare iPhone where GliderMon can't mark its storage folder as excluded from backups, an encrypted copy of the journal and your profile can be included in that phone's backup; it can only be opened on that same phone. "Export my data" includes the journal, so you can keep your own copy; that file can't be loaded back into GliderMon, so a new phone starts a fresh journal.
• "Questions for my doctor": if you write questions on the "For your next visit" page, your words (up to 600 characters) are kept with your daily summaries, encrypted and never in backups, until you clear them or delete your data. They're included in a visit summary only while "Include my questions" is on.
• Game data: progress, in-game currency, cosmetics, your nest, friendships with characters, the companion creatures (Nestlings) in your nest and the names you give them, and settings.
• Photos you take in the app and save to "Your photos" (and, only if you tap "Save to Photos", a copy in your phone's photo library; see "Camera and AR photos").
• The home-screen widget, if you add one: a few pictures of your nest, your glider's name, the day of your last check-in, whether a pouch is waiting and the hour your day starts. Never a reading, a goal or how a day went. It isn't included in backups, and "Delete my data" clears it.

We use this information only to run the game on your device: to check how your daily goals went, learn what a typical day looks like for you, suggest goals that fit, show you that your readings are arriving (a count in Settings and a one-time note in the daily check-in; never a reading's value), and show you how you've been doing over time (your daily summaries).

The nest's weather is made up by the app from the date and your phone's region setting. GliderMon never reads your location. The "Talk to someone" page also uses your phone's region setting to choose which helplines to show, at the moment you open it; the region isn't saved or sent anywhere.

Health Connect and Apple Health

GliderMon asks for permission to read blood glucose only. It does not read other health data and does not write to Health Connect or Apple Health. On Android you can separately allow or decline reading while the app is closed; on iOS, new readings can wake the app in the background. You can withdraw access at any time in Health Connect or the Health app.

How GliderMon uses health data. Data GliderMon reads from Health Connect or Apple Health is used only to provide the in-app features described in this policy. It is never transferred to us or to any third party, never used for advertising, marketing, credit, insurance or employment decisions or other data mining, never sold, and never read by a person at Nestlight. It is not stored in iCloud or any other cloud service.

Once, after you connect, GliderMon looks back up to 180 days in Health Connect or Apple Health to fill in the glucose totals of your daily summaries. It adds each day up on your device and keeps only those daily totals, never the readings themselves, and it never looks back past a time you deleted your glucose readings. On Android this uses Health Connect's permission to read past data (data from before the 30 days around when you allowed access), which you can decline, or turn off in Health Connect at any time; GliderMon still reads your recent readings without it.

Your visit summary (PDF)

"For your next visit" can make a PDF summary for your doctor: the goals, habits, check-ins and glucose figures from your daily summaries, the visit day and, only if "Include my questions" is on, your questions. It has no name or other identifier, and no mood or journal. The PDF is made on your phone and leaves it only if you send it through your phone's share sheet, to wherever you choose. GliderMon never uploads it, and deletes its copy a few minutes after the share sheet closes (or at the app's next launch).

Camera and AR photos

"Out in the World" on the Runway uses your camera so you can take a photo of your glider in the real world: standing on a table (the back camera) or perched at your shoulder in a selfie (the front camera). GliderMon asks for camera access the first time you open it, and you can say no or turn it off later in your phone's settings.

• The camera picture is shown on your screen and used on your device only. GliderMon doesn't record video or sound, and doesn't keep, log or send the camera picture.
• When you take a photo, the camera picture is put together with your glider into one framed photo on your device. The temporary files used to make it are deleted straight away, and the framed photo is deleted when you leave it (Retake, Done or Back) unless you save it.
• A photo is kept only if you choose to: "Save" keeps it in the app's "Your photos", and "Save to Photos" adds it to your phone's photo library (GliderMon asks to add photos only the first time you tap it, and never reads your library). A photo in your photo library is then handled by your phone and its photo backup or sync, like any other photo.
• Nothing leaves your device unless you share a photo yourself through your phone's share sheet. GliderMon never uploads your photos.
• Photos carry no location from the camera, and no glucose or health information is drawn on the AR screen.

Face tracking

In the selfie mode, on phones that support it, GliderMon uses your phone's face tracking (Apple's ARKit with the TrueDepth camera on iPhone, Google's ARCore Augmented Faces on Android) to find where your face is, so your glider can sit at your shoulder and follow as you move. Your phone works this out on the device; GliderMon reads only your face's position and direction, for the moment the camera is open.

• Face data is used only on your device and only to place your glider in the selfie.
• It is not stored, not logged, and not sent to us or anyone else; it is not shared with third parties.
• It is not used for advertising, marketing, identification, or recognizing who you are, and GliderMon doesn't read your face's shape or expressions.
• It is gone as soon as you leave the camera screen. A photo you take includes your face only as a picture, and only if you save or share it.

Google Play Services for AR

On Android, GliderMon's AR photos use Google Play Services for AR. This application runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy. It is installed from the Play Store only if you choose to, and the camera screen works without it (your glider is then placed by hand). GliderMon itself sends nothing to Google through it.

What leaves your device

• When you choose to share: photos you share through your phone's share sheet (your goals board and its numbers are never in the photo; an AR photo holds what your camera saw), a visit summary PDF, and the data file you create with "Export my data" go wherever you send them. A photo you add to your phone's photo library with "Save to Photos" is backed up or synced by your phone like your other photos, under your phone's settings.
• Purchases (GliderMon Plus): purchases are handled by Google Play or the App Store. We use RevenueCat to manage subscriptions. RevenueCat receives a random, anonymous identifier, your purchase and receipt information, and basic technical data (platform, app version, locale, store country). It never receives your glucose readings, your name or your email. RevenueCat processes this for us under its own privacy policy.
• App updates: when GliderMon starts, it asks Expo, the service that delivers GliderMon's small updates and fixes between app store releases, whether a newer version is available, and downloads it if so. That request carries technical details only: your platform, which version of GliderMon you have, a random identifier created for this purpose (used to count active installs and roll updates out gradually), and, as with any connection, your IP address. It never includes your glucose readings, your game or anything you've told GliderMon about you. Expo processes this for us, under its own privacy policy, and keeps it only as long as it needs to run the service.
• Device backups: if you have Google or iCloud backup turned on, your phone's backup can include your GliderMon progress (the game and your settings), under your phone's settings and the backup provider's terms. None of your glucose readings, daily results or answers about you are ever included in backups: not your readings, not your daily summaries or questions for your doctor, not how you said you feel or your journal, and not your name or your glider's name, your diabetes type, what you take for your diabetes, how you check your glucose or when your day starts. Names you give your Nestlings are part of the game and are included. Your settings are included too, and your goal range, which starts from your diabetes type, could suggest it. On a new phone, GliderMon asks its first questions again and reads your recent readings again from Health Connect or Apple Health.
• Reminders are scheduled on your device and never mention your readings or diabetes. They are a short line from your glider and may show the name you gave it on your lock screen (never your own name).
• Pseudonymous usage and crash reports, only if you opt in. GliderMon asks once ("Share anonymous usage & crash reports?") and does nothing until you say yes; you can change your answer any time in Settings › About & privacy. If you say yes:
  • TelemetryDeck, a privacy-focused analytics service, receives product events such as which screens are opened, whether the daily check-in gets finished (which of its main steps were reached and roughly how long it took, in coarse ranges; never what you picked or answered), items bought or equipped, and whether a health link is connected (yes / no, never what it read), together with the app version, platform and operating-system version. They are sent under a random identifier created for this purpose and hashed on your device before sending (TelemetryDeck hashes it again); it is not your name, email, device identifier or advertising identifier, and it is replaced if you turn sharing off and on again. These reports are pseudonymous: not linked to your identity. TelemetryDeck says it never stores IP addresses.
  • Sentry receives crash reports: where in GliderMon's code an error happened, the app version, and your device model and operating-system version. Reports from the app's own code are filtered on your device before sending: no screenshots, no screen contents, no network requests, no device name, no locale or time zone, and numbers, names and quoted text are removed from error messages. Reports of crashes in the phone's system layer are written by Sentry's native component and can include basic device details such as the time zone and language; we remove those with Sentry's server-side filtering, and Sentry is set not to store IP addresses.
  • Never sent to either: your glucose readings or values, time in range, high or low counts, goal results, your diabetes type, what you take for your diabetes, how you check your glucose, your names, how you said you feel, your journal, or anything you type. (Only whether the check-in's "How are you today?" was answered or skipped is counted, never the answer, and which of the Quiet corner's moments was opened: Breathe, Keep me company or a quiet day.)
  • Turning sharing off stops it immediately and deletes any reports not yet sent from your device; "Delete my data" does the same and resets your answer. Sentry keeps crash reports for up to 90 days. TelemetryDeck keeps usage events in aggregate with no fixed deletion date. Because neither kind of report is linked to you, we can't pick out yours to look up or delete; turning sharing off is how you stop them.

We do not use advertising services and do not track you across other companies' apps or websites. Every service named above is held to what this policy promises: none of them receives your health information, and each processes what it does receive only to provide its service to GliderMon.

Your choices and rights

In Settings › About & privacy you can:

• read "Your privacy", a plain-language summary;
• Export my data: a file with everything GliderMon saved on your device (your journal included);
• Delete my journal: erase every journal entry, keeping everything else;
• Delete my data: erase everything GliderMon saved on your device (your subscription stays with your app store account; cancel it there; photos you added to your phone's photo library are yours and stay there); or delete just your glucose readings.

Because we don't hold your data on our servers, these in-app controls are how you access, export and delete it (step by step: delete your data). For anything else, email us at info@nestlightstudio.net and we'll answer within 30 days. To withdraw a permission, turn it off in Health Connect, the Health app or your phone's settings (camera, photos), or turn off usage & crash reports in Settings › About & privacy. If you think we've mishandled your data, you can also complain to the data protection or consumer protection authority where you live.

Age

GliderMon is for people 13 and older (16 in the UK and EU). It isn't made for children under 13.

Security

Data is kept in GliderMon's private storage, which other apps can't access, and is protected by your device's own encryption and screen lock. Your glucose readings, daily summaries, questions for your doctor, answers about you (your name, your glider's name and your diabetes answers), how you said you feel and your journal are additionally encrypted (AES-256-GCM) with a key that is kept in your device's secure key storage and never leaves it. Your health information is never sent anywhere, and what GliderMon does send (purchases, app updates and, if you opt in, usage and crash reports) goes over encrypted connections (HTTPS).

Not medical advice

GliderMon is not a medical device and does not diagnose, treat, cure, or prevent any medical condition, or give medical advice. Always check with your doctor or care team about your diabetes. See also our terms of use.

Changes

We'll update this policy when our practices change and show the new effective date. Material changes will be announced in the app.

Contact

Nestlight LLC, 418 Broadway Ste R, Albany, NY 12207, USA · info@nestlightstudio.net

← Back to GliderMon