Privacy Policy

1. Introduction

Allergen Maps LLC ("we," "us," "our") operates the AllergenMeds mobile app (the "Service"). This Privacy Policy explains what information the app handles, where it is stored, and your choices. It is adapted from our website policy for the app specifically.

2. Information Stored on Our Servers

To run the Service, a limited amount of information is stored on our servers:

• Account: your name, email address, and a salted password hash (or your Apple or Google sign-in, if you use one), via our authentication provider (Supabase Auth).
• Allergen profile: the allergens, diets, and exclusions you select. These are health-related data, which we collect and process with your consent to check medications against your selections. (Unlike our website, where preferences stay only in the browser, the app keeps your profile on our servers so it works across sessions and powers each check.)
• Preferred pharmacy: if you choose one, we store the pharmacy’s public NPI identifier on your profile so the app can show it on your medication hand-off. We never store a prescription, a fill, or anything about what you pick up there.
• People you manage (caregiver mode): each managed person’s allergen selections are stored on our servers under an anonymous identifier only. Their name and relationship are never sent to our servers.
• Medication checks: when you scan or enter a medication, the barcode or NDC is sent to our servers to return a result. We keep a record of each check, linked to your account: the product code, the result, whether the check was for you or for someone you manage, and the IP address and device type of the request. We use these records to run the Service, enforce plan limits, prevent abuse, and understand which medications are checked. See Data Retention below for how long we keep them.
• Usage analytics: which screens you open and how many checks, scans, and alternatives lookups you make, whether each check found something that matches your selections and how strongly, along with your app version and device type, so we can see how the app is used and improve it. This goes only to our own servers (we use no third-party analytics service) and never includes medication names, barcodes, or NDCs.
• Crash and performance diagnostics: when the app errors we send a scrubbed diagnostic report (see Sharing and Disclosure below), plus a small sample of performance traces. These never include medication names, NDCs, barcodes, or your email address.

3. Information Stored Only on Your Device

The following never leaves your device and is never sent to us:

• Your medication list and the details you add (strength, how you take it, what it’s for, notes)
• The check history list in the app, and your refill reminders (each check is also recorded on our servers, as described in section 2)
• Details read from a scanned barcode such as lot, serial, and expiration
• The names and relationships of the people you manage

4. Camera

The Service uses your device camera only to read a medication barcode or a printed NDC. Frames are processed on your device. To read a printed NDC, the app takes a still image, reads the text on your device, and then deletes it. No image is stored or uploaded.

5. Information We Do NOT Collect

• Prescriptions or medical records beyond the products you choose to check
• Payment or financial information
• Biometric data
• Precise location
• Advertising identifiers or third-party tracking

6. How We Use Information

• Providing the Service: authenticating your account and returning medication checks
• Enforcing free-plan check limits
• Understanding how the app is used (screen visits, check and scan counts) so we can improve it
• Understanding, as combined totals across users, which medications are checked and against which kinds of selections, so we can decide which products and data to improve first
• Contacting pharmacies about AllergenMeds, using how many users chose each pharmacy. We never tell a pharmacy who you are or what you selected.
• Security: rate limiting and abuse prevention
• Responding to your support requests
• Legal compliance

7. Sharing and Disclosure

We do not sell your personal information and we do not share it with advertisers. We share information only with service providers who process it on our behalf (Supabase for database and authentication; Vercel for hosting; Upstash for rate limiting; Google for sending account emails; RevenueCat for handling subscription upgrades and subscription status if you use the upgrade flow; Sentry for error and crash monitoring, both on our servers and in the app itself), when required by law, or in connection with a business transfer (with notice). Payment itself is handled by the app store (Google Play or the Apple App Store); we never receive your card details.

About crash reports: when the app hits an error we send a diagnostic report to Sentry so we can fix it. These reports are scrubbed before they leave your device - no medication names, NDCs or barcodes, no email address, username or IP address, and no console logs. They carry the error itself, the app version and device type, and a small amount of technical context about what the app was doing.

8. Data Retention

Your account and server-side profile (your allergen selections, those of people you manage, and, if you have set one, your preferred pharmacy) are retained while your account is active and deleted on request or when you delete your account.

Records of medication checks are kept for up to 12 months. When you delete your account, they lose their link to you and their IP address and device details are removed. Usage analytics are kept for up to 90 days and are deleted with your account. A copy of each check result is kept for 24 hours so that a retried request is not charged twice.

Information stored on your device is removed when you delete it, sign out, or delete the app.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You can delete your account and its data from within the app (Profile → Delete account). To access, correct, or export the information held on our servers, contact legal@allergenmaps.org. California residents (CCPA) and EU/UK residents (GDPR) have additional rights. Residents of Washington, Nevada, and Connecticut have rights under their consumer health data laws, including the right to withdraw consent and to have consumer health data deleted; contact legal@allergenmaps.org. For more on how we handle consumer health data specifically, see our Consumer Health Data Privacy Notice at allergenmeds.com/app/health-data.html.

10. Children

The Service is not directed to children under 13, and you should not create an account for a child. The "people you manage" feature is intended for caregivers acting for those they are authorized to care for; a managed person’s name stays on your device.

11. Security

All connections use TLS/HTTPS. Server data is stored with our providers’ industry-standard encryption at rest. Privileged keys are server-side only.

12. Changes to This Policy

We may update this Policy from time to time. Changes will be reflected by an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

For privacy questions or to exercise your data rights, contact legal@allergenmaps.org. We aim to respond within 30 days.