Privacy Policy

PumpDash is made by Hopes Tinkery LLC ("Hopes Tinkery", "we", "us", "our"), a company based in Albuquerque, New Mexico, United States. This policy explains how we handle information in the PumpDash apps for iPhone, Android, Windows and macOS (the "App") and on pumpdash.app (the "Site").

It does not cover services run by other companies, including Tandem Diabetes Care^*, Sugarmate, Apple, Google and Microsoft. Their own privacy policies apply when you use them. PumpDash is an independent app made by Hopes Tinkery LLC. It is not affiliated with, endorsed by, sponsored by or approved by Tandem Diabetes Care, Inc.

The App signs in to the Tandem Source^* account you already have, reads your data from it, and shows it to you on your own device. That data never passes through Hopes Tinkery or any server we operate.

To work, the App handles the following on your device only:

• Glucose data from Tandem Source^*: the continuous glucose readings your pump receives from its paired CGM and uploads to Tandem Source^*, their trend and the time each was taken.
• Pump data from Tandem Source^*: insulin on board, boluses (amount, time and any carbohydrates entered), basal rates and delivery, suspensions, insulin remaining, battery level, site and sensor changes, Control-IQ activity modes and upload times.
• Sign-in information: on Windows and macOS, your Tandem Source^* email and password; on iPhone and Android, the sign-in tokens and session that Tandem^* issues after you sign in on Tandem's^* own page. On mobile, PumpDash never sees your Tandem^* password. PumpDash connects to no other account.
• Settings: your choices such as theme, units, chart range and card order.
• Diagnostic log (Windows and macOS only): a local technical log for troubleshooting, with passwords, tokens and session identifiers removed before anything is written. It is never sent anywhere.

The App does not access your location, contacts, photos, camera, microphone, calendar, advertising identifier or Apple Health (HealthKit). On iPhone it asks for no special permissions; on Android it asks only for internet and network-status access.

The App uses the information above only to sign in to your Tandem Source^* account, fetch your data, calculate values such as trend, time in range and between-upload estimates, and display them on that device.

Health data handled by PumpDash is never used for advertising, marketing, data mining, profiling, research, training of machine-learning models, or decisions about credit, insurance or employment, and is never sold or disclosed to anyone.

Everything stays on the device running PumpDash:

The App keeps only the recent history it needs to draw charts and estimates, roughly the last two weeks, and replaces it as new data arrives.

Only encrypted (HTTPS) requests to Tandem's^* services, made with your own sign-in, to fetch your data. Nothing is sent to Hopes Tinkery. The mobile apps contain no analytics, crash-reporting or advertising software, and the iPhone app's privacy manifest declares no tracking and no collected data.

PumpDash is read-only. It never sends commands to your pump, never changes pump or account settings, and never writes anything to Tandem^*.

• Tandem Diabetes Care^*. When the App requests your data, Tandem^* receives the request as it would from its own apps, including your sign-in and your device's IP address. Its privacy policy governs how it handles that information.
• Sugarmate. Sugarmate is a separate app made by Tandem Diabetes Care^*. If you use it, PumpDash does not exchange any data with it; its own privacy policy applies.
• Apple, Google and Microsoft. When you get the App from the App Store, Google Play or the Microsoft Store, that company processes your download under its own privacy policy. They may give us aggregated statistics, such as install counts, and crash reports from people who chose to share them with developers. These do not identify you to us.
• TestFlight beta. If you join the iPhone beta through TestFlight, Apple shares with us the details you use to join, plus any feedback, screenshots and crash reports you choose to send. We use them only to run the beta and fix problems, and delete them when they are no longer needed.

We do not share user data with any third party. If that ever changes, for example by adding a service provider, we will update this policy first, and we will require that third party to provide the same or equal protection of user data as described in this policy and required by the App Store and Google Play.

pumpdash.app has no accounts, no cookies, no analytics and no advertising.

• Hosting. The Site is served by Cloudflare. Like any web host, Cloudflare processes technical request data such as IP address, browser type and the pages requested, to deliver the Site and protect it from abuse.
• Fonts. Fonts load from Google Fonts, so your browser sends a standard request, including your IP address, to Google.

Because the Site doesn't track you, there is nothing to opt out of; Do Not Track and Global Privacy Control signals need no further action.

If you email us, we receive your email address and whatever you choose to include. We use it only to respond and help, and keep it for up to 24 months after our last exchange unless the law requires longer. Please don't send passwords, tokens or medical records; if a screenshot would help, Demo Mode shows simulated data instead of real readings.

Data handled by the App stays on your device until you sign out, disconnect your accounts or delete the App. There is no PumpDash account, so there is nothing for us to delete on our side. You are in control:

• iPhone and Android: Settings > Delete all data signs you out and erases everything PumpDash stored on the device. Signing out removes that account's sign-in information and cached data. Deleting the App removes its data; on iPhone, iOS can keep the saved Tandem^* sign-in in the Keychain after the App is deleted. It is never used, and PumpDash erases it the next time it is installed. To remove it straight away, use Delete all data before deleting the App.
• Windows and macOS: use Settings > Disconnect accounts to remove your saved sign-ins from the system credential store. Uninstall the App and delete the PumpDash data folder to remove everything else.
• Withdraw access entirely: changing your Tandem Source^* password stops any saved sign-in from working. Data held by Tandem^* on its own servers is controlled by Tandem^*; contact it to delete that data.

PumpDash is intended for adults, including parents and caregivers who use it to view a child's pump and glucose data. A child may use the App only with the involvement and permission of a parent or legal guardian. Because the App's data stays on the device, Hopes Tinkery never receives a child's information through it.

We do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has sent us personal information, for example by email, contact us and we will delete it.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, and to correct or delete it, and to object to or restrict its use. Because the App does not send us your information, in practice this usually means only an email you sent us.

• California and other US states: we do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information for any purpose other than providing what you asked for. We will not discriminate against you for exercising your rights.
• Consumer health data laws (such as Washington's My Health My Data Act): we do not collect, share or sell consumer health data.
• European Economic Area, United Kingdom and Switzerland: for emails you send us, Hopes Tinkery is the controller and our legal basis is our legitimate interest in responding to you. You may complain to your local data protection authority.

To make a request, email hopes@hopestinkery.com with "Privacy request" in the subject. We respond within 30 days (45 days where California law allows) and may need to confirm your identity. You may use an authorized agent.

Sign-in information is kept in each operating system's secure storage, cached data is encrypted on mobile, all connections to Tandem^* use TLS (on iPhone, App Transport Security blocks unencrypted connections), and the desktop App's local service requires a random per-launch key and refuses requests from web pages. No method of storage or transmission is completely secure, so we can't guarantee absolute security. To report a security issue, email hopes@hopestinkery.com.

The App's data stays on your device wherever you are. The Site is delivered through Cloudflare's global network, and emails you send us are handled in the United States.

We will post any change on this page and update the effective date above. For material changes, we will also note them on the Site and in the App's release notes before they take effect. If a future version of PumpDash ever needs to send data anywhere other than Tandem^*, we will say so here and ask for your consent in the App first.

Hopes Tinkery LLC, Albuquerque, New Mexico, United States. Email hopes@hopestinkery.com, or visit support.