Privacy Policy

1. Introduction

Allergen Maps LLC ("we," "us," "our") operates the AllergenMeds mobile app (the "Service"). This Privacy Policy explains what information the app handles, where it is stored, and your choices. It is adapted from our website policy for the app specifically.

2. Information Stored on Our Servers

To run the Service, a limited amount of information is stored on our servers:

• Account: your name, email address, and a salted password hash (or your Apple or Google sign-in, if you use one), via our authentication provider (Supabase Auth).
• Allergen profile: the allergens, diets, and exclusions you select. These are health-related data, which we collect and process with your consent to check medications against your selections. (Unlike our website, where preferences stay only in the browser, the app keeps your profile on our servers so it works across sessions and powers each check.)
• Preferred pharmacy: if you choose one, we store the pharmacy’s public NPI identifier on your profile so the app can show it on your medication hand-off. We never store a prescription, a fill, or anything about what you pick up there.
• People you manage (caregiver mode): each managed person’s allergen selections are stored on our servers under an anonymous identifier only. Their name and relationship are never sent to our servers.
• Medication checks: when you scan or enter a medication, the barcode or NDC is sent to our servers to return a result. We keep a record of each check, linked to your account: the product code, the result, whether the check was for you or for someone you manage, and the IP address and device type of the request. We use these records to run the Service, enforce plan limits, prevent abuse, and understand which medications are checked. See Data Retention below for how long we keep them.
• Usage analytics: which screens you open; the checks, scans, and alternatives lookups you make, including which medication each one was for (its NDC and product name); whether each check found something that matches your selections and how strongly; whether a check was for someone you manage; and your app version and device type. These are linked to your account, so we can see how the app is used and what to improve, with one exception: the events that say which medication was checked are stored without your account or visit, so our usage analytics show which medications people check but never who checked them. This goes only to our own servers (we use no third-party analytics service). It never includes barcode lot, serial, or expiration details, the names of people you manage, or anything you type other than the medication you look up.
• How you found us: when you create an account, the app may ask how you heard about AllergenMeds. If your account was created before we asked, or on another device, the app may ask once on this device instead. Answering is optional, and once you skip it, the app does not ask again on that device. On Android, the app also reads the Google Play install referrer, which names the link or campaign that sent you to the store. The channel (for example, "Instagram" or "A friend or family member") stays on your device. What we receive is a count: one more account from that channel, and, if you subscribe in the app, one more purchase from that channel. These counts are stored without your account, so we know how many people came from each channel but never which account came from where. The campaign name and the link itself never leave your device. We also count app downloads by channel without linking them to any account.
• Crash and performance diagnostics: when the app errors we send a scrubbed diagnostic report (see Sharing and Disclosure below), plus a small sample of performance traces. These never include medication names, NDCs, barcodes, or your email address.

3. Information Stored Only on Your Device

The following never leaves your device and is never sent to us:

• Your medication list and the details you add (strength, how you take it, what it’s for, notes)
• The check history list in the app, and your refill reminders (each check is also recorded on our servers, as described in section 2)
• Details read from a scanned barcode such as lot, serial, and expiration
• The names and relationships of the people you manage

4. Camera

The Service uses your device camera only to read a medication barcode or a printed NDC. Frames are processed on your device. To read a printed NDC, the app takes a still image, reads the text on your device, and then deletes it. No image is stored or uploaded.

5. Information We Do NOT Collect

• Prescriptions or medical records beyond the products you choose to check
• Payment or financial information
• Biometric data
• Precise location
• Advertising identifiers or third-party tracking

6. How We Use Information

• Providing the Service: authenticating your account and returning medication checks
• Enforcing free-plan check limits
• Understanding how the app is used (screen visits, check and scan counts) so we can improve it
• Understanding which outreach brings people to the app and leads to subscriptions, using "How you found us" counts that are not linked to any account. They are never used for advertising.
• Understanding which medications are checked and against which kinds of selections, from check records and usage analytics linked to accounts, so we can decide which products and data to improve first
• Contacting pharmacies about AllergenMeds, using how many users chose each pharmacy. We never tell a pharmacy who you are or what you selected.
• Security: rate limiting and abuse prevention
• Responding to your support requests
• Legal compliance

7. Sharing and Disclosure

We do not sell your personal information and we do not share it with advertisers. "How you found us" counts are never sold, never shared for advertising, and never used to advertise to you. We share information only with service providers who process it on our behalf (Supabase for database and authentication; Vercel for hosting; Upstash for rate limiting; Google for sending account emails; RevenueCat, our subscription processor, for handling subscription upgrades and subscription status if you use the upgrade flow; Sentry for error and crash monitoring, both on our servers and in the app itself), when required by law, or in connection with a business transfer (with notice). Payment itself is handled by the app store (Google Play or the Apple App Store); we never receive your card details.

About crash reports: when the app hits an error we send a diagnostic report to Sentry so we can fix it. These reports are scrubbed before they leave your device - no medication names, NDCs or barcodes, no email address, username or IP address, and no console logs. They carry the error itself, the app version and device type, and a small amount of technical context about what the app was doing.

8. Data Retention

Your account and server-side profile (your allergen selections, those of people you manage, and, if you have set one, your preferred pharmacy) are retained while your account is active and deleted on request or when you delete your account.

"How you found us" counts are not linked to any account, so there is nothing of yours in them to delete. The channel itself stays on your device until you delete the app. Earlier versions of the app (1.3.6 and 1.3.7) could send the channel to RevenueCat; this version removes it there when you sign in, and when you delete your account.

Records of medication checks are kept for up to 12 months. When you delete your account, they lose their link to you and their IP address and device details are removed. Usage analytics are kept for up to 90 days and are deleted with your account. A copy of each check result is kept for 24 hours so that a retried request is not charged twice.

Information stored on your device is removed when you delete it, sign out, or delete the app.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You can delete your account and its data from within the app (Profile → Delete account). To access, correct, or export the information held on our servers, contact legal@allergenmaps.org. California residents (CCPA) and EU/UK residents (GDPR) have additional rights. Residents of Washington, Nevada, and Connecticut have rights under their consumer health data laws, including the right to withdraw consent and to have consumer health data deleted; contact legal@allergenmaps.org. For more on how we handle consumer health data specifically, see our Consumer Health Data Privacy Notice at allergenmeds.com/app/health-data.html.

10. Children

The Service is not directed to children under 13, and you should not create an account for a child. The "people you manage" feature is intended for caregivers acting for those they are authorized to care for; a managed person’s name stays on your device.

11. Security

All connections use TLS/HTTPS. Server data is stored with our providers’ industry-standard encryption at rest. Privileged keys are server-side only.

12. Changes to This Policy

We may update this Policy from time to time. Changes will be reflected by an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

For privacy questions or to exercise your data rights, contact legal@allergenmaps.org. We aim to respond within 30 days.