HIPAA & Medical Disclaimer

T1D Ready™ is not a medical device and does not provide medical advice. The glucose readings, care logs, alerts, and other information displayed in this platform are for informational and coordination purposes only.

All medical decisions — including insulin dosing, carbohydrate counting, hypoglycemia treatment, and emergency response — must be made by qualified healthcare professionals, the student's diabetes care team, and parents/guardians in accordance with the student's individualized Diabetes Medical Management Plan (DMMP) or Section 504 plan.

T1D Ready does not replace the judgment of a school nurse, physician, or other licensed medical professional. In a medical emergency, call 911 immediately.

T1D Ready™ is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA) and the Family Educational Rights and Privacy Act (FERPA) in handling student health information.

Access controls: Role-based permissions ensure that each user only sees the data they are authorized to view. Parents see only their own child's data. Nurses see students within their assigned school. District administrators see aggregate and school-level data for their subscribed schools.

Data isolation: Each school's data is isolated by school ID. Schools and districts cannot access another school's student records, care logs, or glucose data.

Business Associate: Schools and districts using T1D Ready are responsible for ensuring appropriate Business Associate Agreements (BAAs) are in place between their institution and T1D Ready as a service provider handling Protected Health Information (PHI).

All data transmitted between the application and our servers is encrypted using TLS (Transport Layer Security). Data at rest is encrypted in the database.

Authentication: All users must authenticate with email and password (or Google OAuth). Access codes are required for school-specific registration to prevent unauthorized sign-ups.

Audit trail: Care logs and glucose readings include timestamps and authorship tracking. Changes to student records are attributable to the user who made them.

Third-party integrations: Continuous Glucose Monitor (CGM) data is fetched from Dexcom Share using parent-provided credentials. These credentials are stored securely and used solely to retrieve glucose readings for the linked student. We do not share PHI with third parties for marketing or advertising purposes.

Student health data is retained for the duration of the school's active subscription. Upon cancellation, data is preserved for 90 days to allow for reactivation, after which it is permanently deleted.

Schools and districts may request expedited deletion of all their data at any time by contacting support through the in-app Support tab.

Account security: Users are responsible for keeping their login credentials confidential and must not share access with unauthorized individuals.

Accurate data entry: School nurses and staff are responsible for the accuracy of care logs, glucose readings, and emergency information entered into the platform.

Parental consent: Parents or guardians must provide informed consent for their child's health data to be shared with school staff through this platform.

T1D Ready™, its developers, and affiliates are not liable for any medical outcomes, decisions, or actions taken based on information displayed in or generated by the platform. The platform is provided "as is" without warranty of any kind.

The platform may experience downtime, data delays, or inaccuracies in CGM data sourced from third-party providers. Users must verify critical values through independent means (e.g., fingerstick blood glucose testing) before making medical decisions.