Your glucose data stays between your Mac and Dexcom.

Data RangeTrace accesses

RangeTrace accesses only the information needed to show the Dexcom Share account you follow and provide the features you enable:

• Dexcom account information. Your account name, password, and selected server region are used to authenticate directly with Dexcom Share. The password is stored in the macOS Keychain. The account name and region are stored in the app’s local preferences.
• Glucose readings. Current and recent readings are retrieved from Dexcom Share and processed on your Mac. A small latest-reading snapshot is stored locally so Current Glucose can work in Shortcuts and Spotlight without another network request.
• App preferences. Display choices, target ranges, alert settings, quiet hours, and related preferences are stored locally on your Mac.
• Notification permission. If you enable alerts, RangeTrace asks macOS for permission to deliver local notifications. RangeTrace does not use a remote push-notification service.
• Bug reports and support messages. If you choose Report a Bug or Contact Support in Settings, RangeTrace opens a draft email to support@rangetrace.app in your mail app. The draft lists the app version and edition, the macOS version, the type of Mac processor, whether RangeTrace is connected to Dexcom, and whether alerts and notifications are on. It never includes a reading or your Dexcom account details, and nothing is sent unless you send the email yourself.

Data SKJ Apps collects

From the Mac App Store and Setapp versions, none. They do not send personal information, health data, diagnostics, usage analytics, advertising identifiers, or crash reports to SKJ Apps, and there is no SKJ Apps server or account for them. The Setapp version also has its own privacy policy.

If you buy RangeTrace directly from rangetrace.app, SKJ Apps receives only what is needed to deliver and honor your purchase. None of it is health data, and none of it comes from your Dexcom account:

• Your purchase. Paddle, our reseller and Merchant of Record, processes your payment and passes us your email address and order details so our license server can create your license key. We email the key to you through our email delivery provider, Resend. We never receive or store your card details.
• Confirming your license. When RangeTrace opens, after your Mac wakes, about once a day while it runs, and about once a minute while it is waiting for an answer, the direct version asks the SKJ Apps license server to confirm your license for this Mac. RangeTrace stays locked until the server confirms it, so it needs an internet connection to unlock. Each check sends your license key, the app’s name, a one-time random code, and a privacy-preserving hardware label: a one-way hash of a stable hardware identifier, used only to tell your Macs apart for the three-Mac limit. It is not your Mac’s name or your user name, and the raw identifier never leaves your Mac. Like any internet request, a check also carries the app’s build number, your Mac’s system version, and your preferred languages, and it reveals your IP address to the server. Your license key is stored in your Mac’s Keychain.
• Checking for updates. About once a day, unless you turn this off in Settings, and whenever you choose Check Now…, the direct version uses the open-source Sparkle framework to read a small update list from rangetrace.app. The request carries the app’s name and version, the Sparkle version, and your preferred languages, and it reveals your IP address to the server hosting the site. It does not send a system profile.

Our license server keeps your license record (your key, your email address, and your order details) and one activation record for each Mac that uses it (the hashed label and when it was first and last checked). These records are never sold or shared with advertisers or data brokers.

Services RangeTrace communicates with

RangeTrace communicates with Dexcom Share to authenticate and fetch follower readings. Dexcom processes those requests under its own terms and privacy practices. Apple processes your Mac App Store purchase and any information associated with your Apple Account under Apple’s privacy practices. RangeTrace does not sell or share your data with advertisers or data brokers.

The direct version also communicates with the SKJ Apps license server and with rangetrace.app, both hosted on Cloudflare, as described above. A direct purchase is processed by Paddle under Paddle’s privacy policy. Cloudflare, Paddle, and Resend may process this limited data in the United States. Where that involves personal data of people in the EU, EEA, or UK, we and these providers rely on appropriate safeguards, such as Standard Contractual Clauses, under their data-processing terms.

Retention, deletion, and your choices

Signing out removes the stored Dexcom credentials and latest-reading snapshot from RangeTrace. Display and alert preferences remain local until the app’s data is removed. To remove app-held information, sign out before uninstalling RangeTrace; macOS may otherwise retain Keychain items after an app is removed. You can revoke notification permission at any time in macOS System Settings.

SKJ Apps holds no Dexcom credentials, glucose readings, or account for any version of RangeTrace, so there is nothing of that kind to retrieve or delete.

For the direct version, we keep your license and activation records for as long as needed to honor your purchase and enforce the three-Mac limit. Choosing Deactivate… in Settings, under License, deletes that Mac’s activation record. If you are in the EU, EEA, UK, or California, you may ask for access to, correction of, or deletion of these records, or object to or restrict their use, by emailing support@rangetrace.app. We may need to keep the records required to honor an active purchase or to comply with law. EU, EEA, and UK users may also complain to their local data-protection authority.

Security

The Mac App Store build runs in Apple’s App Sandbox, uses the macOS Keychain for your Dexcom password, and requests outbound network access only to retrieve Dexcom Share data. The direct version is signed with the SKJ Apps Developer ID and notarized by Apple, accepts a license answer only when the license server has signed it, and installs an update only when it carries the SKJ Apps signature. No security measure can guarantee absolute protection, so keep your Mac and Dexcom account secured with the protections available to you.

Medical and Dexcom notice

RangeTrace is an informational companion, not a medical device. Do not use it to make treatment decisions. Always confirm readings in your primary Dexcom app or with a blood glucose meter before acting.

RangeTrace is independent and is not affiliated with, endorsed by, or sponsored by Dexcom, Inc. Dexcom and its related product and service names are trademarks or registered trademarks of Dexcom, Inc. in the United States and/or other countries.

Changes and contact

This policy may be updated if RangeTrace’s features or data practices change. The effective date above will be revised when that happens. Questions can be sent to support@rangetrace.app.