Privacy Policy

Last updated: July 13, 2026 · Applies to t1d.guru (and t1d.live, which redirects here)

Spike is a free educational app for kids with Type 1 Diabetes, built by a T1D parent. Because it's made for children, it is designed around one idea: collect as little as possible. This page explains, in plain language, exactly what that means.

What stays on your device only

Most of what Spike remembers lives in your browser's local storage, on your device, and is never uploaded: earned badges, your chosen community nickname, your recent carb-estimate feedback, a small log of your recent Carb Cam meals, your remaining daily scan count, and a random device identifier (a string of letters and numbers that identifies the browser, not the person). Clearing your browser data removes all of it.

What our servers process

• Chat messages are sent to Anthropic (the AI provider) to generate Spike's reply. We do not store chat conversations on our servers.
• Carb Cam photos are sent to Anthropic to estimate carbs, then discarded. We never store photos.
• Fair-use counters. To keep the free tier free, we count daily scans and chats per device using the random device identifier above (or, when it's absent, a scrambled, one-way-hashed version of the network address). These counters exist only to enforce daily limits and prevent abuse — never for tracking, profiling, or marketing.
• Community posts — your nickname and what you post — are public by design. Please never include real names or personal details.
• Anonymous feedback — carb-estimate accuracy numbers and app thumbs-up/down comments — is stored without anything identifying.
• Email address — only if you opt in to updates or the Spike Family waitlist. We store the address, the consent, and which form you used. Unsubscribe or ask for deletion at any time via the feedback form in the app.

Cookies & analytics

Spike sets no cookies. We use Vercel Web Analytics, which is cookie-free and shows us anonymous, aggregate page statistics. There are no advertising networks, no social-media pixels, and no cross-site trackers — which is also why you don't see a cookie banner here: there's nothing to consent to.

Children's privacy

Spike is made for kids, so we hold ourselves to a stricter standard: no account requirement, no ads, minimal collection, and public spaces that discourage sharing personal details. The email signup asks anyone under 13 to get a parent or guardian first. Before Spike ever stores real health data (like connected glucose readings) or takes payments, we will ship parent-controlled accounts with verifiable parental consent — that work is planned and committed. If you're a parent and want anything associated with your child removed, use the in-app feedback form and we will make it happen.

The glucose "Practice Data" demo

The Practice Data mode connects to Dexcom's developer sandbox — simulated glucose from simulated people. No real glucose data flows through Spike today, and the app is deliberately built so it can't until the protections above exist.

Service providers

Spike runs on a small set of infrastructure providers that process data on our behalf: Anthropic (AI responses; API inputs are not used to train their models by default), Vercel (hosting and cookie-free analytics), Turso (database for the items listed above), and — in the practice demo only — Dexcom's sandbox. None of them may use your data for their own purposes.

Deletion & questions

Ask us anything, or request deletion of your email, community posts, or anything else, through the feedback form inside the app — a real person (a T1D dad) reads every message. On-device data is yours to clear at any time in your browser settings.

Changes

If this policy changes in any meaningful way, we'll update this page and the date at the top, and announce it in the app. We will never quietly weaken the promises in the box above.