Privacy Policy

Overview

Allergy Trail ("we", "our", or "the app") is a personal health tracking tool designed to help families manage Oral Immunotherapy (OIT) treatment for food allergies. We take the privacy and security of your health information very seriously.

Information We Collect

We collect the following types of information to provide our service:

Account Information

• Email address
• Name (optional)
• Profile picture (if provided via authentication)

Health Information

• Child profiles (names, dates of birth)
• OIT protocol details (allergens, dose amounts, schedules)
• Dose logs (times, statuses, notes)
• Reaction information (if you choose to log it)

Technical Information

• Device type and operating system
• App usage timestamps
• Authentication tokens (securely stored)

How We Use Your Information

Your information is used solely to provide the OIT tracking service:

• Display your dose schedules and history
• Send dose reminders (if enabled)
• Enable sharing with caregivers you authorize
• Sync data between your devices

We do not sell, share, or use your health data for advertising, marketing, or any purpose other than providing this service.

Data Storage & Security

• Your data is stored in MongoDB Atlas, a secure cloud database
• All data transmission uses HTTPS encryption
• Authentication is handled by Clerk, a trusted auth provider
• Mobile authentication tokens are hashed (SHA-256) before storage
• Credentials are stored in secure device storage (SecureStore on mobile)

Data Sharing

Your data is only shared in the following circumstances:

• With caregivers you invite: You can grant other users access to specific children's data with roles you control (caregiver or viewer)
• Service providers: We use Clerk for authentication and MongoDB Atlas for data storage. These services have their own privacy policies and do not access your health data.
• Legal requirements: We may disclose data if required by law

We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.

Your Rights

You have the following rights regarding your data:

• Access: You can view all your data within the app
• Export: Data export functionality is planned for a future release
• Deletion: You can delete all your data from the Settings page
• Correction: You can edit any information in the app

Children's Privacy

This app is designed for parents and caregivers to track their children's OIT treatment. Children should not create accounts themselves. All child data is controlled by the parent/guardian who creates the account.

Data Retention

Your data is retained as long as you maintain an active account. When you delete your account or clear your data, all associated information is permanently removed from our systems within 30 days.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or your data, please contact us at the email associated with your account support.