Legal

Terms of Use

The important things to know

The full legal version:

Uriya. Terms of Use

By using Uriya, you acknowledge and agree to the following:

1. Not a Medical Device

Uriya is a personal data viewer and food logger for informational purposes only.

Uriya does not provide medical advice, glucose predictions, insulin dosing recommendations, or treatment suggestions.

Uriya does not claim to improve, guarantee, or influence your diabetes management outcomes.

Uriya does not alert, alarm or notify you about a high or low glucose reading. It has no alarms of any kind for your glucose level. Your CGM and the app supplied with it are what alarm, and they are cleared to do so. Uriya is not a substitute for either, and must not be relied on to tell you about anything as it happens.

Uriya can also show your latest reading on your lock screen, if you switch that on or, on iPhone, add a Uriya widget there. It is only a display of the past, never an alarm.

Always consult with your healthcare provider before making any changes to your diabetes management. Never rely solely on this app for treatment decisions.

2. Data Storage & Privacy

Your health data (glucose, insulin, meals, notes) is encrypted on your device before it is stored, so what sits on our servers cannot be read without your key. This covers everything saved since encryption launched (2 August 2026); entries from before that are converted the same way as you use the app, or immediately if you run "Encrypt older records" in Settings. Some things stay readable even once converted: your email address; your profile and settings (pump, sensor and insulin type, gender, units, glucose targets, language, month and year of birth, and the emergency contact's name and phone number if you added one); the dates and times of your entries, which the app needs to order your history; and the type of some entries, such as sleep, or a cannula change with its reason and body location. And, unless you chose Maximum privacy, a sealed spare copy of your key exists, which only we could open (an automated step opens it only when you reset your password and prove it is you).

Your health data always belongs to you. You can permanently delete your account and all your health data at any time from Settings. Deletion is immediate in the app; automated backups may keep a copy for a short period (up to ~7 days) before they are overwritten, after which no copy remains.

AI helpers for logging send your photo, or the text of a food you type or dictate, securely to a third-party AI provider (currently Google Gemini) to estimate nutrition or understand what you logged. Uriya does not store the photo in its own database or storage, only the text estimate is kept, and Uriya does not use any of it to train a model. Google may keep a temporary copy (a cache) of the request for a short time under its own terms, which Uriya cannot delete earlier. What else Google does with the data under its Vertex AI service terms is outside what Uriya's code can verify, and is still being confirmed. AI helpers are off until you turn them on, and you can turn them off again in Settings. They are subject to a daily allowance.

We do not sell or share your health data with any third party for their own use.

If you switch on reading your sensor over Bluetooth, two short copies of the readings Uriya hears are kept on your phone, in the app's own private storage. The first is a waiting list: readings heard while Uriya was closed wait there until Uriya has stored them in your encrypted records, for at most three days (at most 1,000 readings). The second is the last six hours of readings (at most 100), kept only so Uriya can show your latest reading when there is no internet, and removed when you switch Bluetooth reading off. Uriya does not encrypt these two copies itself, so they are protected only by your phone's own security, its lock and its storage protection. The copies stay on your phone and are not sent anywhere.

When you connect directly, Uriya also keeps the sensor's pairing key for this sensor on your phone only, in the app's private storage, so it can reconnect without the code each time; it is removed when the sensor's session ends or when you forget the sensor.

If you choose to let Uriya read your periods from Apple Health or Health Connect, Uriya reads only the days of your period (menstrual flow) and never writes to your health app. They are stored like your other health data: the kind of entry and any note are encrypted, but the dates stay readable, like the dates of all your entries, so someone with access to our servers could see that something was logged on those days, though not what. You can stop reading at any time in Settings. Deleting your account removes everything Uriya has stored.

We keep limited technical logs (app version, device/browser, error details) to keep the app working. Glucose and other health values are automatically stripped from these logs before they are stored. A separate security log, described on the Privacy page, records when your account is opened on a device, so we can protect it.

Settings has a choice called "Help Uriya learn". Saying yes records your permission for your data to contribute to insights drawn from many people, with nothing that identifies you. Nothing is pooled today, and the feature will not start until far more people have opted in. If that changes, we will ask you again rather than rely on an answer you gave long before. You can change the answer at any time, and either answer leaves everything else about your own insights exactly as it is.

We also keep a record of what you agreed to and when: the wording you saw, its language, the version of the app, and which boxes you ticked. It is stored so that your choices can be shown. If you delete your account, this record is the one thing we keep: only a random account number, which consent, yes or no, the date, and a fingerprint of the wording, for up to 6 years, solely so we can show what you agreed to if a legal claim is ever made (UK GDPR Article 17(3)(e)). It holds no health data and not your email address, and it is deleted after 6 years.

The date and time on each consent record are set by our server, not by your phone.

3. Third-Party Connections

Uriya can connect to third-party CGM, insulin pump and fitness services (currently Dexcom Share, FreeStyle Libre via LibreLinkUp, Medtronic Guardian/CareLink, Tandem Source, Glooko, Nightscout, Tidepool, Polar and Strava. See Help & Support for the current full list) to pull your data. These connections use your own accounts and are subject to those services' own terms and privacy policies.

How your logins are handled depends on the service. For Medtronic CareLink, Strava and Polar you sign in on the service's own page, so Uriya never sees your password and keeps only the access tokens that result, on your device. For Nightscout, only the address and token you enter are kept, on your device. For Dexcom, Tandem, Glooko, FreeStyle Libre and Tidepool you type your login into Uriya, and it is stored only on your own devices, in the app's own storage on that device, and on a phone also copied into the system keychain so it survives reinstalling the app. On your Apple Watch too, if you turn on standalone watch sync for Dexcom. When you connect or sync, it is transmitted securely through our systems to sign you in with that service, and is not saved in Uriya's database, and Uriya's own code does not log it. Uriya's connections retrieve your data from these services. Uriya's connector code does not send commands to your pump or sensor, and calls no endpoint that delivers insulin, changes settings or issues device commands.

Reading your sensor over Bluetooth works with the Dexcom G7, ONE+ and Stelo, in the versions of the app that have it. It is off until you switch it on in Settings, and it needs the Dexcom app to stay installed and signed in on the same phone. Uriya only listens: it does not send your sensor any command, does not change its settings, does not connect to your pump and sends nothing to Dexcom. A sensor that the Dexcom app has not paired with this phone is left alone. Uriya asks for your phone's Bluetooth permission for this. On iPhone it keeps listening in the background, and on Android it shows a notification while it listens. When Uriya misses a reading, your other connections fill the gap. Uriya is independent and is not made, endorsed or supported by Dexcom.

Connecting your sensor directly over Bluetooth is a separate, optional choice, made by you alone and at your own responsibility. It is off until you switch it on in Settings, for the Dexcom G7, ONE+ and Stelo, in the versions of the app that have it.

Unlike reading alongside the Dexcom app, here Uriya connects to the sensor itself: you enter the 4-digit code printed on the sensor applicator, and Uriya sends the sensor the standard commands to pair with it and to read its glucose values and recent history.

Because a sensor talks to one phone app of this kind at a time, the Dexcom app must be removed (or its Bluetooth turned off) on this phone before Uriya can connect, and the sensor may take about fifteen minutes to become free.

Your insulin pump is not affected: it reads the sensor on a separate channel and keeps working as before, and Uriya never connects to your pump.

Uriya does not change any setting on the sensor.

Uriya gives no alerts and is not for treatment decisions; with the Dexcom app removed, you no longer have its alerts, so rely on your pump and your own checks.

Readings may be missed, and your other connections fill the gap.

Uriya asks for your phone's Bluetooth permission for this.

Uriya is independent and is not made, endorsed or supported by Dexcom, and reading a sensor this way may be outside Dexcom's own terms; you choose to use it, at your own responsibility.

Apple Health and Health Connect are read-only connections. Uriya reads what you allow (for example workouts, sleep, heart rate, weight and, if you choose, the days of your period) and never writes anything back.

Where Uriya offers them, you can also connect Oura, Polar, WHOOP and Fitbit (through your Google account). You sign in on the brand’s own page, so Uriya never sees your password, and keeps only the access tokens that result, on your device. Uriya reads only what the brand provides and you allow (for example sleep, recovery, activity, heart rate, skin or body temperature, blood oxygen and workouts), stores it encrypted on your account, and never writes anything back to the brand. In Settings, under Wearables, you can disconnect at any time and choose to keep or delete what Uriya stored. On Android, you can switch on a reader for the CamAPS FX app. With your permission (notification access) it reads only the glucose number in the CamAPS FX notification, and nothing else on your phone. Uriya is independent and is not made, endorsed or supported by CamDiab, Oura, Polar, WHOOP, Google or Fitbit.

4. AI Helpers for Logging

AI helpers for logging (reading a food photo, estimating a food you type when you ask for an AI estimate, and understanding meals or activities you dictate (watch, Siri or the Android voice shortcut)) give nutritional values that are estimates only and may be inaccurate. AI helpers only help you log: they do not analyse your glucose data, create Uriya's findings or give treatment advice. How your photo or text is handled is described in section 2. AI helpers are off until you turn them on, and you can turn them off again in Settings.

You are responsible for reviewing and correcting any values before saving. Uriya is not responsible for incorrect nutritional estimates.

5. Accuracy & Reliability

Uriya displays data as received from your connected devices and services. We do not guarantee the accuracy, completeness, or reliability of this data.

Figures from wearables and from the CamAPS FX reader are the brand's own. They can be late or missing, and they are not for treatment decisions.

Patterns, insights, and statistics shown in the app are based on the data available and are for informational and educational purposes only. They should not be interpreted as medical advice.

6. Your Responsibility

You are solely responsible for your diabetes management decisions.

You understand that Uriya is an early-stage (beta) application and may contain bugs or errors.

You agree to report any issues or errors you encounter to help improve the app.

7. Ownership of the App

Uriya (including its software, design, wording, and the methods it uses to analyse data) is the property of its creator and is protected by copyright. Using the app does not transfer any ownership to you.

You may not copy, modify, translate, sell, republish, or create derivative works from the app or any part of it.

You may not reverse engineer, decompile, disassemble, or attempt to extract the source code, algorithms, or analytical methods from the app, except where that right cannot be excluded by law.

You may not use automated means to scrape, download, or systematically extract the app or its content.

Your own data is yours and is unaffected by this section. You can export or delete it at any time from Settings.

8. Limitation of Liability

Uriya and its creators are not liable for any health outcomes, injuries, or damages arising from the use of this application.

To the maximum extent permitted by applicable law, Uriya and its creators disclaim liability for any direct, indirect, incidental, or consequential loss or damage arising from the use of the app or reliance on its information.

Nothing in these terms excludes or limits liability where it would be unlawful to do so, including for fraud, or for death or personal injury caused by negligence.

By using this app, you agree that you use it at your own risk and acknowledge its limitations.

9. Service Availability

We aim to keep Uriya available and reliable, but we do not guarantee uninterrupted service.

Synchronisation with connected devices and third-party services may be delayed or unavailable due to outages, maintenance, or changes made by those providers.

We may also restrict, suspend, or withdraw access to Uriya, in whole or in part, where required for safety, legal, regulatory, platform, or compliance reasons. Where technically and legally permitted, you will keep access to your existing data and export capabilities even when the service or a specific feature is suspended.

When there is no internet, Uriya can show your latest readings heard over Bluetooth on a simple screen stored in the app. That screen is only a convenience: it can be late or missing, it gives no alerts, and your Dexcom app and sensor remain the numbers to rely on.

10. Third-Party Services

Uriya is not responsible for changes, outages, inaccuracies, or discontinued services provided by third-party platforms, including Dexcom, Tandem, Medtronic CareLink, Tidepool, Apple Health, Google Health Connect, Garmin, Polar, or other connected services.

These services are governed by their own terms and privacy policies.

Reading your sensor over Bluetooth depends on how Dexcom's sensors talk to the Dexcom app, which Dexcom can change at any time without telling us. If that happens, Bluetooth reading may stop working, or show a late, missing or different value, until Uriya is updated. The Dexcom app and your sensor's own screen are always the current numbers.

Reading the CamAPS FX notification depends on how CamAPS FX writes that notification, which CamDiab can change at any time without telling us. If that happens, the reading may stop, or show a late, missing or different value, until Uriya is updated. The CamAPS FX app is always the current number.

If the company behind a connected service (a wearable brand, CamDiab or any other third party) makes a change, Uriya is not responsible, and the reading may stop in Uriya.

If a third-party service changes or stops sharing data, the affected connection may stop working and some data may no longer update. This is outside our control and is not a fault of Uriya. In that case:

• The data already stored in Uriya remains yours and stays available to you.

• You can switch to another supported source, or add your data by manual import (CSV/PDF) or by logging it yourself.

• We do not guarantee that any particular connection or feature will remain available, and continued availability of a paid feature that depends on a third party cannot be guaranteed.

• If this affects a feature you are paying for, we will pause billing for the affected period, tell you plainly what happened, and work on a fix, even though the cause is outside our control, we are not going to charge you for a service that is not working.

11. How Long We Keep Your Data

We keep your health data for as long as your account is active. There is no automatic expiry, since a big part of Uriya's value is comparing today against months or years of your own history.

If you delete your account, your data is removed immediately from the app. Automated backups may retain a copy for up to about 7 days before being overwritten, after which nothing remains, apart from the short record of your consent choices described in section 2.

12. Who Can Use Uriya

Uriya is for people aged 18 and over. A version for younger people is being planned and is not available yet.

By accepting these terms you confirm that you are 18 or over. We do not verify ages. An adult who is 18 or over may use a caregiver account to look back at the information of a person in their care, such as their child, but only where Uriya offers that choice, and only if they act in that person's name and with their permission (or the permission of their parent or legal guardian), or as that person's parent or legal guardian. The person in your care does not use the app. In any other case, please do not set Uriya up for someone else.

Uriya is not available to people who live in Washington State, USA. If you live there, please do not create an account.

To apply this rule we ask for your month and year of birth when you start using Uriya. It is stored on your account and we do not verify it. If you tell us you are under 18, we delete your account.

13. Where Your Data Is Stored

Uriya's database is hosted in London, United Kingdom. Some requests handled by Uriya's server-side functions may pass through infrastructure outside the UK. Uriya's own code does not save the logins or request contents described here in its database or application logs. AI requests go to Google's Vertex AI in the UK (London, europe-west2) or in the EU, depending on the AI model in use; Google's processing in that region depends on Google's own configuration and has not been independently verified by Uriya. See Section 4.

If you are in the EU, this transfer is covered by the European Commission's adequacy decision for the United Kingdom, so no additional safeguard is needed. If you are in Israel, it is permitted under a 2020 opinion from the Israeli Privacy Protection Authority.

The emails Uriya sends you for signing in and resetting your password go through Resend, an email service. They contain only your email address and a link or code, never health data. Resend keeps records of sent messages in the United States, under the standard contractual clauses.

When the app crashes, a technical report is sent to Sentry, an error-monitoring service, whose servers for this data are in Frankfurt, Germany. The report contains what went wrong and where in the code, never your glucose, meals, insulin or notes, which are removed before it is sent. It identifies you only by your account ID.

If you choose to attach a picture to a report, that picture is stored with it and is readable by us. A screenshot of Uriya shows your own data, so nothing is attached unless you attach it, and the app never takes a picture of your screen by itself.

14. Contact

Uriya is operated by Uriya Ltd, a company incorporated in England and Wales (Company No. 17565965), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

For questions, support requests or concerns, please contact us at help@uriya.app.

Questions about your privacy or your data, including a request for a copy, a correction or deletion: privacy@uriya.app.

Anything else, including help with the app: help@uriya.app.

Prefer not to email? Contact us.

Last updated: 15 November 2026. These terms may be updated periodically.