Privacy Policy

Effective date: March 28, 2026

1. Who we are

SULI is a product of New Power Industry, an early-stage technology company based in San Francisco, California. If you have questions about this policy or your data, contact us at eli@newpowerindustry.com.

2. What data we collect

When you use SULI, we collect the following:

• Account information: your email address and diabetes type (e.g., Type 1, Type 2, prediabetes).
• Glucose data: readings fetched from Dexcom on your behalf via their secure OAuth integration. We never see or store your Dexcom username or password.
• Usage data: standard analytics such as page views and feature usage. This data does not include personal identifiers and is never sold.

3. How we use your data

We use your data to:

• Display your glucose readings in the SULI app.
• Generate personalized AI coaching insights via the Anthropic Claude API.
• Send transactional emails — things like account setup confirmations and weekly summaries. We will never send marketing emails without your explicit consent.

4. What we do not do

This is important, so we want to be direct:

• We do not sell your data to third parties. Ever.
• We do not store your Dexcom username or password.
• We do not use your health data for advertising.

5. Dexcom data specifically

We access your Dexcom data only after you grant explicit permission through Dexcom's OAuth authorization flow. You can revoke SULI's access at any time through your Dexcom account at dexcom.com. Your glucose data is stored in our secure database and used only to provide SULI's coaching features — nothing else.

6. Third-party services we use

SULI relies on a small number of trusted services to operate:

• Dexcom API — the source of your glucose data.
• Anthropic Claude API — our AI coaching engine. When we send data to Claude for coaching, we send only anonymized glucose readings and your diabetes type. We never send your name or email address.
• Supabase — our database and authentication provider.
• Vercel — our hosting provider.

7. Data retention

We retain your data for as long as your account is active. If you'd like to delete your account and all associated data, email us at eli@newpowerindustry.com and we'll take care of it.

8. Security

Your data is encrypted in transit (HTTPS) and at rest. OAuth tokens are stored securely on the server side and are never exposed to the client.

9. Children

SULI is intended for users 18 and older. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

If we make material changes to this policy, we'll notify you by email before the changes take effect.

11. Contact

Questions or concerns? Reach us at eli@newpowerindustry.com.