Consumer Health Data Privacy Notice

Last updated: October 4, 2026

About this notice

Allergen Maps LLC (the "Company") provides the AllergenMeds mobile app. This notice describes how we handle "consumer health data" as defined by applicable state laws, and supplements our general Privacy Policy.

1. Consumer health data we collect

The allergens, diets, and exclusions you select (your "allergen profile"), and your preferred pharmacy if you choose one, stored as that pharmacy’s public NPI identifier, never a prescription, a fill, or anything about what you pick up there. For a person you manage, we store their allergen selections under an anonymous identifier only; their name and relationship stay on your device.

A record of each medication you check, linked to your account: the product code, the result, and whether the check was for you or for someone you manage. Usage analytics also record whether a check found something that matches your selections, but never which medication.

2. How we use it

To check medications you scan or enter against your selections and return a result, to enforce plan limits, and to prevent abuse.

To understand, as combined totals across users, which medications are checked and against which kinds of selections, so we can improve the Service.

If you have chosen a preferred pharmacy, we display it on your medication hand-off screen. We may also contact pharmacies about AllergenMeds based on how many users chose them; we never tell a pharmacy who you are or what you selected.

When the app’s News feed is available, your selections are also used on your device to filter a general health-news list to the topics that match your profile; that filtering happens on your device and your selections are not sent to us for it.

When formulation alerts are available, the app downloads a general list of confirmed medication formulation changes (the same list for every user) and compares it on your device against the medications you have saved or checked; that comparison, the resulting flags, and any notification all happen on your device, and your medication list and check history are not sent to us for it.

We do not use your data for advertising or profiling, and we do not sell it.

3. How we collect it (consent)

You provide it directly when you set up or edit an allergen profile. We collect and process it with your consent, which you give by affirmatively agreeing to our terms at sign-up and by entering a profile. You may withdraw consent at any time by deleting the profile or your account, or by contacting us.

4. Who we share it with

We do NOT sell consumer health data and do NOT share it with third parties for their own purposes or for advertising. We use service providers who process it on our behalf only: Supabase (database and authentication) and Vercel (hosting).

5. What stays on your device

Your medication list, the check history list in the app, reminders, scanned barcode details (lot, serial, expiration), and the names of people you manage stay on your device and are never sent to us. Each check is still recorded on our servers, as described in section 1.

6. Your rights

You may request to access, delete, or withdraw consent for your consumer health data, and you will not be discriminated against for exercising these rights. You can delete your account and its data in the app (Profile > Delete account), or contact us to exercise any right.

7. Data retention and security

We retain your server-side profile (your allergen selections, those of people you manage, and, if set, your preferred pharmacy) while your account is active and delete it on request or account deletion. Records of medication checks are kept for up to 12 months; when you delete your account they lose their link to you and their IP address and device details are removed. Data is encrypted in transit and at rest with our providers’ standard protections.

8. Contact

Allergen Maps LLC, legal@allergenmaps.org. We aim to respond within the timeframe required by applicable law.