Legal

Privacy Policy

Effective date: 25 February 2026 · Last updated: 25 February 2026

AllerGuide handles health-related data. We take that seriously. This policy explains exactly what we collect, why, and how you can control or delete it.

1. Who we are

AllerGuide is operated by Benedetto Colella ("we", "us", "our"). If you have any questions about this policy or your data, contact us at benedettoc2004@icloud.com.

2. What data we collect

We collect only what's necessary to provide the service:

Account data: Email address, display name, avatar, and password (stored as a secure hash — we never see your plaintext password).
Health / allergen data: The allergens and dietary preferences you choose to enter (e.g. Peanuts, Gluten, Vegetarian). This is the core of the service. You are never required to enter this data.
Usage data: Dishes you save, phrases you bookmark, and AI chat messages you send. Chat messages are used solely to generate your response and are not used for advertising or model training.
Device data: Operating system, app version, and crash/error logs. No advertising identifiers are collected.
Waitlist data: If you joined our waitlist, we store your email address only.

We do not collect location data, contacts, camera access, microphone access, or any data not listed above.

3. How we use your data

To operate the app and provide personalised allergen filtering
To respond to AI chat queries using your allergen context
To sync your data across devices when you are signed in
To send you product updates if you joined the waitlist (you can unsubscribe at any time)
To diagnose bugs and improve the app

We do not sell your data, share it with advertisers, or use it for any purpose other than operating AllerGuide.

4. Health data — special notice

Allergen and dietary preference data you enter is health-related. It is stored securely using encryption in transit (TLS) and at rest. It is never shared with third parties, used for advertising, or used to train AI models. You can delete it at any time from your profile or by contacting us.

5. Third-party services

We use a small number of trusted third-party services to operate AllerGuide:

Supabase — database and authentication. Your data is stored in Supabase's EU-hosted infrastructure. Supabase Privacy Policy.
Anthropic Claude API — powers the AI Chat feature. Chat messages are sent to Anthropic's servers to generate responses. Anthropic does not use API inputs to train its models. Anthropic Privacy Policy.
RevenueCat — manages in-app subscriptions. Processes subscription state only; no health data is shared. RevenueCat Privacy Policy.
Apple Sign In — if you sign in with Apple, Apple may share a private relay email address with us. We store this as your account email. Apple Privacy Policy.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data including your allergen profile, saved dishes, and saved phrases is permanently deleted within 30 days.

Waitlist emails are retained until you unsubscribe or request deletion.

7. Your rights

Depending on where you live, you may have the right to:

Access — request a copy of all data we hold about you
Correction — update inaccurate data (you can do this directly in the app)
Deletion — request full deletion of your account and data
Portability — receive your data in a machine-readable format
Objection — object to any processing of your data
Withdraw consent — stop using the app and request deletion at any time

To exercise any of these rights, email benedettoc2004@icloud.com. We will respond within 30 days.

8. Children's privacy

AllerGuide is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To make a request, contact benedettoc2004@icloud.com.

10. International users (GDPR)

If you are in the European Economic Area, your data is processed on the basis of contractual necessity (to provide the service you signed up for) and, where applicable, your explicit consent (for health data). You have the rights listed in Section 7. To make a request under GDPR, contact benedettoc2004@icloud.com.

11. Security

All data is transmitted over encrypted HTTPS connections. Passwords are hashed and never stored in plaintext. We use industry-standard security practices, but no method of transmission or storage is 100% secure. If you discover a security issue, please disclose it responsibly to benedettoc2004@icloud.com.

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. Continued use of AllerGuide after changes constitutes acceptance of the updated policy. The effective date at the top of this page will always reflect the most recent revision.

13. Contact

Questions, requests, or concerns about your privacy:

Benedetto Colella
Email: benedettoc2004@icloud.com

This privacy policy was last updated on 25 February 2026.