Go back
Legal

Bridge Privacy Policy

Version 18.0.0 • Last updated June 4, 2026

Terms of ServicePrivacy PolicyDisclaimerBridge Privacy Policy

365CGM Bridge — Privacy Policy

Last updated: June 4, 2026

1. Overview

This Privacy Policy explains how the 365CGM Bridge mobile application and its optional Wear OS watch component (together, "the app") collect, use, store, and share information.

365CGM Bridge is a Bluetooth and NFC data transfer utility for users of 365cgm.com, a companion service for Eversense CGM. Accounts on 365cgm.com and eversensedms.com, along with a device token, are required to use this app; providing those Eversense credentials is the authorization step that permits the app to retrieve and transfer the corresponding data. It acts as a collector for records retrieved from devices users have approved and operate, and uploads them to an authorized 365cgm.com account and, optionally, to a desired Nightscout server. Data provided from pens & BGMs is captured and automatically uploaded in the background, with a sound and a notification to confirm. The user can also choose a Review mode to approve each record before it is uploaded. Eversense CGM data is automatically transferred as authorized and defined by the user owner of that data.

If the user has a Wear OS-compatible watch, the app can optionally display their current glucose value and trend on the watch face and in the watch app. The watch receives data from this phone app and does not need its own internet connection.

2. What the app reads from devices

Connecting to any device requires a user-performed authorization step: a Bluetooth device must be paired, and an NFC device must be physically aligned/tapped by the user. The app cannot access any Bluetooth or NFC device without the user performing this step.

With the user's action and approval, the app connects to devices they operate and reads records from them:

  • insulin dose records from NovoPen pens (via NFC) and Medtronic InPen pens (via Bluetooth);
  • blood glucose readings from Ascensia CONTOUR NEXT ONE and Keto-Mojo GK+ meters (via Bluetooth); and
  • glucose values, trends, and related event data associated with the Eversense CGM connection that the owner has approved on their 365cgm.com account.

These records may include device identifiers or serial numbers, timestamps, measurement values, insulin amounts, and battery status.

Optional companion mode (Eversense). If the user enables companion mode in Settings and grants Android "Notification access," the app reads the current glucose value and trend from the Eversense CGM app's own on-device notification, so the value can be displayed without a network round-trip. This mode is off by default, requires the user's explicit grant, and reads only the Eversense glucose notification.

3. How the app uses that data

The app uploads these records to an authorized 365cgm.com account and, if chosen, to a specified Nightscout server. Data is transmitted over encrypted connections (HTTPS).

Records are uploaded in one of two modes:

  • automatic mode — new records upload in the background; or
  • review mode — the user approves each record before it is uploaded.

The app captures the device's supplied records and delivers them to the destinations the user has chosen. It does not use the data for advertising, profiling, or any unrelated purpose.

4. Data stored on the user's device

To authenticate an account, the app stores a device token in the device's operating system's encrypted storage. This token is the only credential the app holds at rest. It is created from the user's 365cgm.com account and can be revoked at any time from that account. Removing the app from a device also removes the device token stored on that device.

5. Background operation

To capture readings while the app is not in the foreground, the app may run a foreground service that maintains a Bluetooth or NFC connection to the user's devices. Android displays a notification while this service is active. The user can stop background capture at any time. If the user has opted at least one device into background capture, the app may also restart this service after the device reboots so capture continues without re-launching the app.

6. Wear OS component

If the user has a watch that supports Wear OS, the app can relay the current glucose value and trend to the watch, and let the user enter or log a dose from the watch, over the local wireless connection between their phone and watch — for display in a watch face complication or watch app. The watch component communicates with the user's phone for this purpose; it does not sell or share this information, and the watch does not independently collect data from external sources beyond what the phone relays and what the user enters on the watch. To act on the user's behalf, the watch stores a device token using the operating system's encrypted storage, which can be revoked from the user's 365cgm.com account.

7. Permissions the app uses

The app requests only the permissions needed for the functions above:

  • Bluetooth (scan and connect) — to connect to paired pens and meters. Bluetooth scanning is declared with Android's neverForLocation flag; the app does not derive or use location from it.
  • NFC — to read NovoPen pens by tap.
  • Notifications — to display the required notice while the foreground capture service is running.
  • Network access — to upload records to the user's 365cgm.com account and any Nightscout server configured.
  • Foreground service / connected device — to maintain a device connection while capturing in the background.
  • Run at startup — only to restart background capture after a reboot when the user has opted a device into it.
  • Notification access (optional) — only if the user enables companion mode, to read the Eversense CGM app's glucose notification as described in Section 2.

The app does not request or use location, contacts, photos, or the microphone, and it does not use an advertising identifier.

8. Connected services

The app sends data only to destinations the user chooses: their 365cgm.com account and, optionally, a defined Nightscout server. Use of 365CGM.com is governed by the separate 365CGM.com Privacy Policy. The Eversense/Senseonics, Nightscout, and device-manufacturer systems that the user connects operate under their own terms and privacy practices, and we are not responsible for their independent privacy or security practices. Senseonics' Privacy Notice is at https://www.eversensecgm.com/senseonics-privacy-notice and its Conditions of Use at https://www.eversensecgm.com/conditions-of-use. Those systems may change, fail, be unavailable, rate-limit requests, return incomplete information, or behave in ways that affect the data. We do not control those systems and cannot guarantee their performance.

Compatibility note: NovoPen, InPen, Ascensia, CONTOUR, Eversense, Keto-Mojo, and Wear OS are trademarks of their respective owners. This app is an independent utility and is not affiliated with, endorsed by, or sponsored by those companies.

9. Sharing

The data the app handles is uploaded only to the user's own 365cgm.com account and, at their option, to a Nightscout server they control. It is not sold and is not shared with advertising networks or analytics providers. The app contains no advertising and does not use an advertising identifier.

10. Security

We use reasonable technical and organizational measures to protect the app and the information it transmits, including encrypted connections (HTTPS) and the operating system's encrypted storage for the device token. However, no system can guarantee perfect security, and use of this app is conditional on that understanding.

11. Retention and deletion

The app does not maintain its own cloud store of records; it transmits them to the destinations chosen. Uploaded records are retained in the user's 365cgm.com account as described in the 365CGM.com Privacy Policy, and the user can request deletion of account data through that service's account controls. Removing the app from the device removes the device token stored on it.

12. Children

The app is not intended for children unless its use is managed by an authorized adult or guardian in compliance with applicable law and the user's care context.

13. HIPAA and regulated healthcare status

These apps and 365CGM.com have no understanding of, and make no claim to the accuracy of, the data they transfer. They do not and cannot provide medical advice, diagnosis, or treatment. Always rely on your own device readings and your healthcare provider for medical decisions. The app may handle sensitive health-related information, but as a transfer utility, it is not represented as a HIPAA-covered entity, business associate, or provider of Business Associate Agreements. Do not assume HIPAA rights, regulated healthcare obligations, or clinical service guarantees apply unless we expressly say so in a separate written agreement.

14. International use

If you use the app from outside the jurisdiction where the service is operated, you understand that information transmitted through it may be processed in other jurisdictions where privacy protections may differ.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we publish a new version, you may be required to review and accept it before continuing to use the app.

16. Contact

If you have privacy questions, concerns, or requests, contact support@365CGM.com.