Legal

Privacy

Our privacy promise

Your health data belongs to you. We built Uriya so your health information stays private. We promise to:

• Encrypt your health data on your device, before it is stored. Dates and times are the exception, the app needs them to order your history.
• Never read your health data. Unless you choose Maximum privacy, a sealed spare copy of your key exists that we could in principle open. An automated step does so only when you reset your password and prove it is you.
• Never sell your health data.
• Collect only the technical information needed to keep Uriya secure and reliable.
• Be transparent about what we collect and why.

Questions, plainly answered

Can Uriya read my glucose data?

Your glucose, insulin, meals and notes are encrypted on your device before they are stored, so what sits on our servers cannot be read without your key. This applies to everything saved since encryption launched, and to older entries once you run "Encrypt older records" in Settings (see the note above if that still applies to you). Two honest caveats even then. First, some things are stored in the clear: your email address, your profile and settings (pump, sensor and insulin type, gender, units, glucose targets, language, country, month and year of birth, and the emergency contact's name and phone number if you added one), the dates and times of your entries, where each one came from (for example your pump, your sensor or you), and the type of many entries, such as whether a dose was a correction, sleep, or a cannula change with its reason and body location. Second, unless you chose Maximum privacy we hold a sealed spare copy of your key that only we could open (an automated step opens it only when you reset your password and prove it is you, and the key that opens it is held in Google's key service, which records every use). With Maximum privacy no such copy exists at all.

Can Uriya's team see my readings when I ask for help?

Only what you send us. If you send an export of your data or a screenshot, we see what is in it, and nothing else. We do not browse accounts or look through anyone's records.

Who owns my data?

You do. Your health data always belongs to you.

Do you sell my data?

No. We don't sell your health data.

What happens if Uriya is hacked?

For entries covered by encryption (see the note above if you still have older ones pending), a breach would not expose your glucose, insulin, meals or notes. Those cannot be read without your key, which stays on your device (or, unless you chose Maximum privacy, in the sealed spare copy described above). It would expose what is not encrypted: your email address, your profile and settings (pump, sensor and insulin type, gender, units, glucose targets, language, country, month and year of birth, and the emergency contact's name and phone number if you added one), the dates and times of your entries, where each one came from (for example your pump, your sensor or you), and the type of many entries, such as whether a dose was a correction, sleep, or a cannula change with its reason and body location.

Can I use Uriya for someone I care for?

Only where Uriya offers a caregiver account. The account holder must be an adult, and says so, and the person in their care never uses the app. The caregiver must be that person's parent or legal guardian, or act in that person's name with their permission or the permission of their parent or legal guardian. We then hold that person's health information on the caregiver's account, in the same way as any other account, and only to show the caregiver that person's own history. The caregiver can delete the account and the data at any time. Uriya is not available to people who live in Washington State, USA.

What do you keep about the person I care for?

On a caregiver account we keep, on the account, their first name or a nickname, their month and year of birth and their sex. Uriya uses them only to show what fits, for example no findings about a period for a young child. If you wish, you can also add their medical history, medicines, whether they are active, any disability, their diet and their allergies. All of that is optional, is shown only in Settings, and Uriya gives no advice from it. You can change or remove any of it at any time, or delete the account.

If you add a picture of the person you look after, it is kept in private storage on your account, without location details, shown only to you and the carers you approve, and deleted with the account.

On a child's account, what do the people looking after the child see about each other?

People on the same child's account see each other's first names or roles (for example Dad, or Nursery Tina), the notes, replies and emoji they leave, and who has read them.

Parents on a child's account can see when each carer with their own login last opened Uriya. Our server records only the time of the last opening.

"Hide for me" hides a note only on that person's screens. The others still see it.

Family notes, replies, ticks and emoji cannot be changed or deleted from the app once written, by anyone. A mistake is put right by adding a correction. They are deleted with the account, and you can ask privacy@uriya.app to correct or delete a specific note.

When one carer changes or removes an entry written by another, we keep the earlier version and who made the change, so the family can always see what the record said before. Earlier versions of glucose days that a parent's phone or the child's phone overwrote are kept for 60 days. These copies are encrypted the same way as the rest of the record and are deleted when the account is deleted.

If the account that holds a child's record is deleted, the other parents and carers on it are told, in the app, that the account was deleted, by its owner or by Uriya, and when. The notice holds the child's first name and the date. It is deleted after 30 days, when the person taps "Got it", or when their own account is deleted.

When a parent sets up the child's phone, the phone gets its own login. No parent's email address or password is ever entered on it.

Our server keeps the following:

• The phone's own login (a made-up email address that cannot receive email).
• Which child's account the phone belongs to.
• Which parent created the joining code and which parent approved it.
• When the code was created and when it was approved.
• Whether the phone's access has been switched off.
• When the phone last sent data.

So that the family's phones can take turns fetching data, the server also keeps which phone is fetching at the moment. This is kept as a random number the app makes, not the phone's real number or the device's name.

The joining code itself is never stored on the server, only a scrambled, one-way value used to check it. The code expires after 15 minutes.

When a parent sends the insulin pump and sensor logins to the child's phone, they are encrypted on the parent's phone so that only the child's phone can decrypt them. Our server only passes them on, without being able to read them, and deletes them as soon as the child's phone has received them, or after 24 hours at the latest.

The screen on the child's phone shows the last 24 hours. The phone's own login can read the child's whole history while it is switched on. A parent can switch it off at any time; from then on the server stops giving it data and its login is deleted. Information the phone had already received stays on that phone until the app is removed.

Can Uriya see my password?

No. Your password is never stored in readable form.

Why do you ask for my month and year of birth?

Uriya is for people aged 18 and over, and the AI food helpers work only for an account that says it is an adult, because Google's terms do not allow its AI in an app likely to be used by under-18s. We keep only the month and year, on your account. We do not check it, and we never ask for your full date of birth. If you say you are under 18, your account is deleted.

Why do you ask which country I live in?

When you create an account we ask which country you live in (chosen from a list of countries) and store your answer with your account settings. We use it to apply the rules and the days that fit your market, for example the days we do not send you messages. It is not your location and it is not checked.

Can I delete my account?

Yes. Settings → "Delete my account & data" removes everything permanently, except a short record of your consent choices (a random account number, which consent, yes or no, the date, and a fingerprint of the wording) that we keep for up to 6 years to be able to show what you agreed to if a legal claim is ever made. It holds no health data and not your email address. For your security, it first asks you to confirm it is you, with your password or a code sent to your email. Deletion is immediate in the app; automated backups may keep a copy for up to ~7 days before they're overwritten.

If your account is the one that holds a shared record (your child's, for example), deleting it deletes that record for the other parents and carers who share it, not only for you.

If your phone cannot reach our server when you delete your account, it removes what it can on the phone at once and tells you what is still to be removed on our side. We do not say everything is deleted until it is.

If I tidy up my history, what do you keep?

If "Check and tidy my history" is in your Settings and you use it, Uriya keeps a copy of each day it changes, exactly as it was and encrypted in the same way, and a list of the doses it marked as automatic with what they were marked before. They are kept for 30 days so you can undo the tidy-up, and then deleted. Deleting your account deletes them at once.

Can my doctor see my data?

Nothing is sent to anyone automatically. On a child's account, carers the parent approves can see its history. You can generate a Medical team report (Settings → Support → Medical team report) and download it as a PDF to bring to an appointment or send yourself.

Do you use AI, and where does my data go?

Only for logging, and only when you use it, up to a daily allowance: reading a food photo, estimating a food you typed, and understanding meals or activities you dictate (watch, Siri or the Android voice shortcut). That photo or text is sent securely to a third-party AI service (currently Google Gemini). Uriya does not store the photo in its own database or storage; only the text estimate is kept. Uriya does not use your data to train any model. Google may keep a temporary copy of the request for a short time under its own terms; what else it does with it under its own service terms is still being confirmed. Your findings never use AI. It is off until you turn on Settings → AI helpers in logging (or tick the option when you first agree); turn it off and nothing you log is sent to any AI.

What happens when I switch on reading my sensor over Bluetooth?

It is off until you switch it on in Settings. Uriya then listens to the Bluetooth messages of your Dexcom G7, ONE+ or Stelo sensor, alongside the Dexcom app, which must stay installed and signed in on the same phone. Uriya only listens: it sends the sensor no commands, does not change it, never touches your pump and sends nothing to Dexcom. A sensor the Dexcom app has not paired with this phone is left alone. No login or password is involved.

From each message Uriya takes the glucose value, when it was taken, the trend arrow and a code for the sensor, so the same reading is never added twice. The readings are stored in your account, encrypted like any other glucose reading.

While they wait to be stored, and for the screen shown without internet, two short copies are kept on your phone, in the app's own private storage, not encrypted by Uriya: a waiting list (at most three days or 1,000 readings, emptied once the readings are stored) and the last six hours of readings (at most 100), removed when you switch Bluetooth reading off. They are not sent anywhere.

When you connect directly, Uriya also keeps the sensor's pairing key for this sensor on your phone only, in the app's private storage, so it can reconnect without the code each time; it is removed when the sensor's session ends or when you forget the sensor.

It uses your phone's Bluetooth permission. On iPhone, Uriya keeps listening in the background, and on Android a notification shows while it listens. Uriya gives no alerts and is not for treatment decisions.

Does Uriya read my periods, and where do they go?

Only if you choose, in Settings, from Apple Health on iPhone or Health Connect on Android. Uriya reads only the days of your period (menstrual flow), never writes to your health app, and uses them only to show your glucose around them. They are stored in your account like your other health data: the kind of entry and the note are encrypted, but the dates stay readable, like the dates of all entries, so someone with access to our servers could see that something was logged on those days, though not what. Uriya does not predict your next period and gives no advice. You can stop reading at any time in Settings, and deleting your account removes what is stored.

What does Uriya show when I have no internet?

If you have switched on reading your sensor over Bluetooth, the app can show your latest reading and a small trend from the last six hours on a simple screen stored in the app, when it cannot reach Uriya's servers. It comes from the short copy on your phone described above, is not sent anywhere, and the screen returns to normal by itself when the connection is back. It can be late or missing, it gives no alerts, and the Dexcom app is the one to rely on. Without Bluetooth reading, the screen only says that Uriya cannot be reached.

What does Uriya show on my phone's lock screen?

On your phone. So that the lock screen can show your latest reading, a copy of it is kept in the app's own storage on your phone. It is not sent anywhere, and nothing extra is sent to us. Uriya does not encrypt it, so it is protected only by your phone's own security. Switching the display off stops the number being shown. The copy is removed when you sign out.

Who can see it. Anyone who can see your locked phone can see the number on the lock screen. That is why the display is off until you choose it, and why the iPhone Lock Screen widget is there only if you add it. You can switch the display off in Settings whenever you like.

If something goes wrong, what do you receive?

Technical information only. App version, device/browser, and where the error happened. Glucose and other health values are automatically stripped from error reports before they reach us. If we ever need your actual data to investigate, we'll ask your permission first.

If you send a report, Uriya uses the email address of your account only to reply to you about it.

Do you keep a security log?

Yes, a small one, to notice a login that may be shared or stolen. When Uriya opens while you are signed in (at most once every six hours on each device), our server notes your account, the time, a random code the app made for that device, and the two-letter country the request came from. It does not keep your IP address, your browser details or any health value. If one account is open in two countries, or on three or four devices, within a day, Uriya shows you a warning and we note it. If it is open on five or more devices, or in three or more countries, within a day, the account is signed out everywhere and you sign in again with your password and a second step: the code from your authenticator app (Settings, Extra protection), or, if you have not set one up, a code sent to your email. That is the only action it takes: nobody is suspended, and a normal one or two devices never trigger anything. A few doors on our server exist only to be tried by someone who is not using the app. If one is tried we note the time, which door, the country and, if the request carried a sign-in, the account. Entries are deleted after 90 days, and together with your account.

To stop abuse we count requests from each internet address in short time windows (a minute, an hour or a day). The address and the count are deleted within three days.

Where are my device-account logins kept?

It depends on the service.

Medtronic CareLink: you sign in on Medtronic's own page, so Uriya never sees your password. What Medtronic gives back to keep you signed in stays on your device, and signing out of Uriya removes it from that device. Strava and Polar: you sign in on their own site, and Uriya keeps only the access tokens that result, on your device. Nightscout: only the address and token you enter, encrypted with your own key on your device, never sent through our servers. Signing out of Uriya removes them from that device.

Dexcom, Tandem, Glooko, FreeStyle Libre and Tidepool: you type your login into Uriya. It stays on your own device, encrypted with your own key, and on a phone it is also copied into the system keychain so it survives reinstalling the app. Signing out removes it from that device. If you turn on "Watch works without your phone" for Dexcom, a copy is kept on your Apple Watch the same way. Whenever it is used to connect or sync, it passes securely through our servers to sign you in with that service. Uriya does not save it in its database, and Uriya's own code does not log it.

When you connect Dexcom, Tandem, Glooko, FreeStyle Libre or Tidepool, your readings and doses travel from that service to your phone through our servers. They are passed along, and our own code does not keep them there. What is stored is the encrypted copy your phone makes.

Uriya's connections retrieve your data from these services. Uriya's connector code does not send commands to your pump or sensor, and calls no endpoint that delivers insulin, changes settings or issues device commands.

What happens when I connect a wearable, or switch on the CamAPS FX reader?

These connections are optional, and off until you switch them on in Settings, where Uriya offers them. The wearables are Oura, Polar, WHOOP and Fitbit (through your Google account). You sign in on the brand's own page, with your own account, so Uriya never sees your password.

Uriya reads what each brand provides and you allow: for example sleep, recovery, activity, heart rate, skin or body temperature, blood oxygen and workouts. It only reads. It never changes anything at the brand.

What it reads is stored on your account. The daily figures are encrypted on your device with your data key, like your other health data, and only the date of each day stays readable by us. Workouts are stored like your other activities: their date, time and type stay readable by us, and the numbers are encrypted. Your sign-in with the brand stays on your phone. It passes through our servers only to connect and to refresh, and is not kept there. Your readings travel from the brand to your phone through our servers: they are passed along, and our own code does not keep them there.

Nothing is sold or shared. You can disconnect at any time in Settings, under Wearables. “Disconnect and delete” removes what Uriya stored from that brand and tells the brand to end Uriya’s access. “Disconnect, keep my history” keeps what was stored. Deleting your account deletes it too. What the brand itself holds stays with the brand: delete that with them.

CamAPS FX reader (Android only). If you switch it on, Android asks you to give Uriya notification access. Uriya then reads only the glucose number in the CamAPS FX notification, and ignores every other notification and everything else on your phone. The reading is stored in your account like any other glucose reading, encrypted. On your phone, a short waiting list (at most three days or 1,000 readings) and a list of the last 30 CamAPS FX notifications Uriya looked at (“What Uriya saw”) are kept in the app’s own private storage, not encrypted by Uriya and never sent anywhere. You can clear that list, and switch the reader off in Settings or in Android’s notification access.

Figures from wearables and from the CamAPS FX reader are the brand's own. They can be late or missing, and they are not for treatment decisions.

If the company behind a connected service (a wearable brand, CamDiab or any other third party) makes a change, Uriya is not responsible, and the reading may stop in Uriya.

What happens to the details I send when I ask to join the beta?

The form on our website asks for your first name, email, country, phone, pump and sensor, and an optional note. Nothing about your health. We keep these details only to write to you about the beta, and delete them when it ends or when you ask. They are kept in our database in London, and the request reaches us by email.

Does the website count visitors?

Yes, only as numbers. When someone opens uriya.app, opens a card or taps to send one, the site adds one to a daily count, with the language and a group for where the person came from, such as Facebook or LinkedIn, and the tag of the link used. We also use Umami, an analytics service with servers in the European Union, to see which pages are read and from which countries. It sets no cookie, uses your connection only to tell the country, and does not keep your address or device details. A browser that asks not to be tracked is not counted. We use the numbers only to see whether the website reaches people. A request to join the beta also keeps the same short note about how the person came in.

What happens to a message I send to support from the website?

The form asks for your email, an optional first name, a topic and your message. It reaches us by email so we can answer you. Please do not put glucose readings, passwords or logins in it. We use it only to answer you and to fix what you describe.

How do I ask about my data?

Write to privacy@uriya.app and say what you need: a copy of your data, a correction, or deletion. You can also delete your account and all your data yourself in Settings.

This page explains our approach in plain English. The full legal text is in our Terms of Use, Privacy Policy and our Medical Disclaimer.

Uriya is operated by Uriya Ltd, a company incorporated in England and Wales (Company No. 17565965), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

For questions, support requests or concerns, please contact us at help@uriya.app.

Prefer not to email? Contact us.

Last updated: 15 November 2026.