Privacy

In short

Everything you write down stays in the app on your phone. Ronin has no account, no login and no server that holds your diary. The app sends two things on its own, and neither can contain anything you wrote: once a day it tells us that an installation exists, and if it crashes it sends a technical crash report. There is a third thing you can switch on: the photo estimate, which sends a photo of your plate to be read when you ask it to. It is off until you turn it on. All three are described below. A watch of your own is not on that list: what you type on it travels to your phone over the phone’s own link to the watch, and the watch keeps it only until the phone has it. The rest of this page is the detail: your phone’s own backup, the file you export, this website, and the e-mail you send us if you have a question.

Who is responsible

Ronin is published by Venueve AB, the company behind DiabetesNinja, and Venueve AB is the controller for the little personal data that does reach us. That is the anonymous statistics and the crash reports described below, the e-mail you send to support, and this website’s visitor statistics and ordinary server log. Your diary is not part of it, because it never reaches us. The full details are at the foot of this page.

What is stored on your phone

The diary is kept in the app’s own database on your phone. It holds what you typed, and nothing more:

• the time and the type of each entry,
• glucose in mmol/L, insulin in units, carbs in grams and ketones in mmol/L,
• the note you wrote,
• what a meal was made of, when you build a plate,
• foods you added yourself, so you can pick them again,
• your settings: language, appearance, glucose unit, target range, the names you gave your insulins, and whether ketones are shown.

What never leaves your phone

Your diary. Ronin has no account and no login, so there is nothing to sign up for. The app asks for no name, no e-mail address and no advertising id, and it has no advertising and no third-party analytics. The two messages the app sends on its own are described in the next two sections, and neither can carry a glucose value, a dose, a note or a meal. The one thing that can leave your phone with your content in it is a photo of a plate, and only if you switch the photo estimate on and ask for one: that section is below. We share your diary with nobody, for the simple reason that it never reaches us.

Anonymous usage statistics

At most once a day the app sends a small message to our server saying that this installation exists. It contains six things: a random number the app makes up for itself the first time it starts, the app version, the type of phone, the operating system version, the country code you have set on the phone yourself, and the word “ronin” so the count is kept apart from our other app. The number is random and cannot be linked to you or your diary, we do not look at where you connect from, and nothing you have logged is included. We use the count only to know how many people use the app and which versions are in use. An installation that has not been heard from for twelve months is removed. The message is sent from every installation and cannot be switched off in the app: the six items above are its entire contents.

Crash reports

If the app crashes, a technical report is sent to Sentry (Functional Software, Inc.), the error-reporting service we use. It contains the device model, the operating system, the app version and the technical trace of the error. The app also sends performance measurements. A report never contains your diary. We use the reports to find and fix the fault, nothing else.

Backups

If your phone makes backups, the app’s data is included in them, the same way your other apps’ data is. On Android that means Google’s app backup and the transfer that runs when you move to a new phone. On iPhone it means the iCloud or computer backup. Those copies are handled by Google or Apple under their own terms, not ours, and we cannot read them. If you would rather the diary was not included, you can turn app backup off in your phone’s settings.

The file you export

An export writes a CSV file into the app’s temporary storage on the phone and hands it to the phone’s own share sheet. You decide where it goes. Ronin never uploads it and keeps no copy anywhere else. Once you have sent it to your care team or another app, it is out of Ronin’s hands. The file itself stays in that temporary storage until your phone clears it or you remove the app: tapping Delete all data under Settings does not remove it.

Photos of a meal

If you take or pick a photo of a plate, it is held in the app only while you are writing the entry. It is not saved to the diary and not written to disk. The carb estimate is off until you turn it on in Settings and agree to it in the app. When you then ask for an estimate, the phone first shrinks the photo and strips out location and other hidden data, and sends it, with no name and no id attached, to an AI service that Microsoft (Azure OpenAI) runs inside the EU. The service suggests what the meal contains and the photo is discarded: we never store it, and Microsoft can keep it for up to thirty days to check for misuse of the service before it is deleted. What comes back is a suggestion you check and change yourself. It is never a measurement, and it is never advice about a dose. Turn the estimate off in Settings and no photo ever leaves the phone.

Your watch

If you use an Apple Watch or a Wear OS watch with Ronin, what you type on the watch is sent to your phone over the phone’s own connection to the watch, and nowhere else. On Android the app sends only to a watch that is directly connected; when the two are apart, the entry waits on the watch. The watch keeps only the entries that have not reached the phone yet, and the settings the phone sends it: your glucose unit, the names you gave your insulins, and the language. It never holds a copy of the diary and shows nothing from it. When an entry has reached the phone it is deleted from the watch. The watch itself sends nothing to the internet.

If you write to us

This is the one place where we do handle personal data. When you e-mail support we get your address and whatever you put in the message, and we keep the exchange while the question is open and for a while after, so we can pick it up again if you come back. The legal basis is our legitimate interest in answering you, article 6(1)(f) of the GDPR. Please send no more about your health than you need to: we do not need your diary to answer a question about the app.

This website

This section is about the website, not the app. The site counts visits with Google Analytics, described in the next section, and that is the only thing it loads from anyone else. Like any web server, the host also records the ordinary request log it needs to serve the pages and keep them up: the address asked for, the time, and the IP address it was asked from. That log is short-lived and is not used to build a picture of you. If you switch language, your choice is remembered in your browser under the name “ronin-site-lang” so the site opens in the language you picked. Clearing site data in the browser removes it.

Cookies and visitor statistics

We use Google Analytics to count visits to this website. It runs on every page, in both languages, and it sets cookies in your browser: one called “_ga” and one starting with “_ga_”. A random number in the cookie is what makes a return visit from the same browser recognisable. What Google gets is your IP address, which pages you read and when, roughly where you are (country or region), your language, the page you came from, and technical facts about your browser and device. We use it to see how many people find the site and which pages get read. Advertising features, Google Signals and ad personalisation are switched off, so the statistics are never used for advertising or profiling. Google is an American company, so the data may be processed in the United States. The legal basis is our legitimate interest in knowing how the site is used, article 6(1)(f) of the GDPR. The cookies are deleted after 13 months. None of this touches your diary: that stays in the app on your phone and never reaches the website. The app itself contains no Google Analytics and sets no cookies at all. If you would rather not be counted, block cookies for this site in your browser, or install Google’s browser add-on that turns Google Analytics off everywhere you go.

What the App Store and Google Play see

Apple and Google run the stores, so they see the download itself and tell us how many there have been. If you let your phone share diagnostics with Apple or Google, a crash in Ronin can also reach us that way, through App Store Connect or Play Console. That happens at the operating-system level and is separate from the crash reports described above. What we get is counts and stack traces, never your diary and never anything that identifies you. What Apple and Google collect is covered by their own privacy policies, and you can turn diagnostics sharing off in your phone’s settings.

How long it is kept, and how to delete it

Your entries stay until you delete them. Delete a single entry from the entry itself. Tap Delete all data under Settings, which permanently removes every entry, every plate and every food you added on that phone. Removing the app removes the database with it. Two things “delete all” does not touch: your settings, and any CSV you have already exported. Uninstalling removes both. We hold no copy of any of it, so there is nothing for us to delete at our end.

Your rights

Your diary is on your phone and we keep no copy, so there is nothing at our end for us to hand out, correct or erase. These rights apply to the small amount that does reach us: the e-mail you send to support, this website’s visitor statistics and server log, and the crash reports and anonymous statistics described above. For those you have the right to:

• see what we hold about you and get a copy,
• have it corrected,
• have it deleted,
• receive it in a portable form,
• object to how we use it.