Steady Sugar privacy

Steady Sugar is made by Thistle Dew LLC. Questions: privacy@thistledew.app.

Steady Sugar is not a medical device. It does not replace your pump, the Control-IQ algorithm, or your clinician, and it never writes to the pump. Discuss every suggested number with your diabetes care team before programming any change.

Steady Sugar is not affiliated with or endorsed by Tandem Diabetes Care, Inc. or Dexcom, Inc. Those names are trademarks of their owners.

What stays on the phone

Health data stays on the device. Steady Sugar does not run a backend, does not use iCloud or CloudKit, does not track you, and does not link health data to an identity for advertising. The workshop file lives in Application Support, is excluded from backup, and uses complete file protection.

If you allow it, Steady Sugar reads blood glucose, insulin delivery, carbohydrates, sleep, workouts, and body mass. It does not write to Health. Workouts are used on the device so lows during movement do not weaken the rest of the day. Sleep is used on the device to suggest Sleep Activity hours.

What leaves the phone

Nothing leaves the phone unless you turn on Unofficial connections and sign in. That switch is off until you turn it on. When you do, Steady Sugar sends the request you asked for to Tandem Source, Dexcom Share, or the Nightscout site you entered. The email address you type is stored on this phone and is sent only as part of that sign-in. The password is used for that sign-in and then discarded. Session tokens stay in the Keychain on this device.

Nightscout must be an https address that resolves to a public network. Steady Sugar does not follow redirects and does not contact private addresses.

How long it is kept, and how to delete it

The workshop, imported files, and Keychain tokens stay on this phone until you delete them. In Data, Delete all data removes the saved workshop, the Tandem, Dexcom, and Nightscout Keychain items, and the copy in memory, and turns unofficial connections off. Deleting the app removes the rest. Steady Sugar has no server copy to erase.