Privacy Policy

1. What data we collect

AllergyMemory collects the following personal data:

• Email address and internal user ID (account creation and sign-in)
• Symptom logs, including severity, timing and optional notes
• Food logs, including meals, portions and optional notes
• Medication logs, including name, dosage, effectiveness and optional notes
• Environmental data (pollen, air quality, humidity - location-based)
• Allergen profile (known allergens)
• Location coordinates (used to fetch and store local environmental context)
• Meal photos, when you use photo-based food recognition (processed to identify food items; not stored after processing)
• Subscription and purchase status (plan, purchase and renewal dates), plus a device identifier used to link your subscription to your account

2. Why we collect it

We use your data solely for these purposes:

• Authenticate your account and keep entries linked to your profile
• Enable you to track your allergy symptoms, foods and medications
• Provide AI correlation analysis and short AI explanations that make triggers easier to understand
• Recognize foods from photos you submit
• Generate PDF reports you can share with your doctor
• Send cross-reaction alerts
• Manage your AllergyMemory Premium subscription and purchases

We never use your data for advertising. When AI explanations are enabled, minimized and pseudonymized summaries of your data may be sent to a selected AI processor. Meal photos submitted for food recognition and messages sent through AI Chat are processed by our AI processor to generate a result and are not stored afterwards. Direct identifying information is not sent to the model. TLS/SSL encryption is used during transmission.

3. Where data is stored

All core data is encrypted and stored on European Union servers in Frankfurt, Germany via Supabase infrastructure. Account-linked records are stored using an internal user ID so your entries remain attached to your profile. When AI explanations are enabled, minimized data summaries required to explain your logs may be sent to an external AI processor. Direct identifiers are never sent to the model. Subscription and purchase data is processed through RevenueCat, our subscription management provider, which receives your account identifier and a device identifier to keep your subscription status in sync. TLS/SSL encryption is used in transit.

4. Your GDPR rights

Under the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Download a copy of your data as a PDF report.
• Right to rectification: Edit your profile and logs at any time.
• Right to erasure: Permanently delete your account and all associated data (symptom, food, medication, environment, profile, user-entered notes, and AI insight cache data) via Profile > Delete my account, or visit our account deletion page.
• Right to data portability: Export your data via PDF report.
• Right to object: Turn AI explanations off from the Profile screen and object to data processing at any time.

An external AI processor may apply additional limited security or retention policies.

5. Location data

Your location data is used to retrieve pollen, air quality, and humidity data for your region. Latitude and longitude are stored together with your environmental records so the app can show local context in your history and analysis.

6. Children's privacy

AllergyMemory is not intended for direct use by children under 16. Users under 16 must register with parental consent.

7. Medical disclaimer

AllergyMemory is not a medical device or diagnostic tool. The analyses, correlations, and suggestions provided by the app are for informational purposes only and do not replace professional medical advice.

Always consult a healthcare professional for allergy treatment and diagnosis.

8. Contact us

For privacy-related questions: