iPump-mini

[!WARNING] Not a medical device. Not for treatment decisions. Values may be wrong, late or missing. The pump's displays and alarms are always authoritative – keep them on. Not affiliated with or endorsed by Medtronic. Use at your own risk.

Features

• Live values every 5 minutes, also in the background: sensor glucose with trend, active insulin, reservoir, pump battery, SmartGuard state, basal, time in range, sensor status and expiry.
• Pump history: boluses, SmartGuard auto corrections, auto basal, carbs, BG and calibrations, suspend/resume. Gaps in the sensor curve are filled from the pump.
• Graph (3/6/12/24 h) with treatments and an insulin band. Tap or slide along it for details (time, value, IOB, insulin in that window).
• Alarms: urgent low, low, high, rapid changes, pump alerts, “no data”, with snooze and presets.
• Widgets for the Home and Lock Screen, Live Activity / Dynamic Island.
• Nightscout upload (optional) and a local Nightscout-compatible API on port 17580 (incl. /pebble).
• German and English, light/dark, mg/dL or mmol/L, your own target range.
• First-run setup with terms of use, a checklist and an in-app guide.
• Android app (beta, not yet tested with a pump): docs/en/android.md.

Read-only by design

The app never sends commands that change therapy, settings or the state of the pump. Every write to the pump goes through one function and an allowlist of report requests (ReadOnlyPolicy.swift); everything else is blocked and logged. It cannot deliver insulin or clear alarms.

Get it

iPhone	App Store
Android (beta)	APK from GitHub – not yet tested with a real pump; the app tells you about new versions; Play Store version coming. Details: docs/de/android.md
Build it yourself	Mac, Xcode and a free Apple ID: docs/en/building.md

Then follow Get started: accept the terms, load the key database, allow notifications, pair the pump.

Architecture

Source: docs/architecture.mmd (Mermaid)

How it works

The pump is the Bluetooth central, the iPhone the peripheral. After pairing, the pump connects to the app and both negotiate an encrypted session (Medtronic's “SAKE” protocol). Over the same link the app reads the standard Bluetooth services of the pump (Insulin Delivery Service, CGM Service) and their Medtronic extensions. The session is stored, so the app survives updates and restarts without pairing again.

The protocol knowledge comes from OpenMinimed (GPL-3.0). The SAKE implementation in core/MiniMedKit is a Swift port of their PythonSake/JavaSake and is tested against a real 780G capture. The SAKE key database is not part of this repository or the app; the app loads it from the public OpenMinimed documentation on request.

Part	Where	What it does
Protocol library (Swift)	core/MiniMedKit/	SAKE session, parsers, read-only allowlist, Nightscout format, tests against a real capture
Protocol library (Kotlin)	core/MiniMedKitKotlin/	port for Android with the same tests
iPhone app	apps/ios/	SwiftUI app, widgets, Live Activity, alarms, local API (XcodeGen: project.yml)
Android app	apps/android/	Kotlin / Compose app (beta)
Docs	docs/	en/ and de/ guides and API · internal/ working notes (German)
Research	research/	own analysis scripts

More: Documentation · Architecture · API · Translating · Working notes (German: lab notebook, research, decisions)

Limitations

• iOS suspends the app between pump updates; the local API does not answer then. For watches, the Nightscout upload is more reliable.
• If the app is swiped away, no more data arrives. A notification reminds you to open it.
• Alarms are time-sensitive notifications; critical alerts (through the silent switch) would need a special Apple entitlement. Allow the app in your Sleep Focus.
• iOS ends a Live Activity after 8 hours. The app starts a new one whenever you open it and can remind you (with quiet hours).
• Tested with one 780G (firmware 6.23W) and Simplera Sync.

Status & roadmap

• Live: iOS 1.0.1 on the App Store, 1.1.0 in review · Android beta 1.0.0 as APK
• Next: hardware test of the Android app (#1), UI polish (#2), Play Store
• Ideas and bugs are welcome as issues.

Legal

Reverse engineering only to achieve interoperability with one's own device (Art. 6 Directive 2009/24/EC, § 69e UrhG) and data access under the EU Data Act (Regulation (EU) 2023/2854). The repository contains only own code and own descriptions (clean room) – no code, keys or assets of the manufacturer. MiniMed, SmartGuard, Guardian, Simplera and CareLink are trademarks of their owners.

License and credits

GPL-3.0, see LICENSE. Thanks to OpenMinimed, Nightscout and xDrip+.

Made by Simon Gutjahr · Imprint