Privacy Policy

Effective date: November 2, 2026

AllergyFlow is developed and operated by Oleksandr Prokhorov ("developer", "we", "our"). This policy explains what data is collected, where it goes, and what choices you have. Some features send data to services run by other companies; each is listed below.

1. Data stored on your device and in your iCloud

Your allergen list and the lists of people you add (a name and their allergens), your saved products (the barcode, the product's name and brand, the ingredient and allergen information read from Open Food Facts or typed or scanned by you, any name you gave it, whether you marked a change as checked, and a short history of checks: when, which person it was for, and the sentence shown), food diary (meals, ingredients, reaction notes), saved AI recipes and the most recent pollen reading are stored on your iPhone using Apple's SwiftData framework. If you are signed in to iCloud, this data is also synced to your private iCloud database through Apple's CloudKit (subject to Apple's privacy policy). We cannot see your iCloud data. Removing a saved product deletes its information and history from the app and from your iCloud; a small removal marker (the barcode number, or a one-way fingerprint of text you entered, and the time) remains so that the removal reaches your other devices. Your recent checks, any ingredient label you ask the app to remember for a barcode (when the product database has no ingredient list for it), and app settings are kept on the device and are not synced.

2. Location and pollen

When you allow location access and open the Pollen tab, AllergyFlow sends your approximate location, rounded to about 10 km, to our server, which passes it on to Open-Meteo (open-meteo.com), a third-party weather data service, to fetch pollen forecasts, air quality, UV and weather for that area. This happens wherever you are in the world. Our server uses the location only to answer that request: it does not write it to its application logs and does not store it with your installation or your address. It keeps only the public forecast for that 10 km area, so that others in the same area can be answered without another request, and a count of how many forecasts were fetched. Open-Meteo receives the coordinates of that area from our server, not your IP address or an identifier of your device. Our server sees your IP address, as any web service does (see section 4). Pollen forecasts cover Europe; air quality, UV and weather are available worldwide.

Version 1.0.2 and earlier of the app send the rounded location directly to Open-Meteo, which then also sees your IP address, and do not send it to us. They send it only for places in Europe, where pollen forecasts exist.

The last pollen reading is kept with its approximate location on your device (and in your private iCloud, see above). You can refuse or withdraw location access at any time in iOS Settings; the app then shows that pollen is unavailable. It does not substitute another place.

3. Product barcodes and label scanning

When you scan a barcode, its number is sent to Open Food Facts (openfoodfacts.org), a public product database, to look the product up. If you save a product, its barcode number is sent again to read the product's current record when you open the app (at most once a day for each saved product), unless you turn that off in Settings. Open Food Facts also sees your IP address. Reading an ingredient label with the camera happens on your device; the image is not stored or sent.

4. AI recipes

When you tap "Generate" (after you allow AI recipes), your allergen list, the meal type and the cuisine you chose are sent to our server, which forwards them to OpenAI to write a recipe. No name, email or account is sent. This happens only when you ask for a recipe, and you can switch it off in Settings → Privacy.

To apply daily limits and prevent abuse, the app also sends, with AI recipe requests and with pollen requests, a random identifier that Apple's App Attest creates for your installation (it is not linked to your Apple ID), and, if you subscribe, Apple's signed subscription record, which our server uses only to confirm the subscription. Our server keeps that identifier, a counter and the number of recipes requested per day. It does not keep your allergen list or the recipes, and its application logs do not contain request content. Our hosting provider, Railway, processes requests and may keep ordinary server logs (such as IP addresses). OpenAI processes the request under its own privacy policy and may retain it for a limited time for abuse monitoring.

5. Analytics, advertising and purchases

AllergyFlow contains no analytics or advertising SDKs and does not read your advertising identifier (IDFA). Subscriptions are handled entirely by Apple; we never receive your payment details. Apple may provide us aggregated crash and usage data if you have opted in to sharing it with developers in your iOS settings.

6. Your rights (EEA and UK users)

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, or request deletion of personal data we hold. We hold very little: your diary, profile, people and saved products live on your device and in your iCloud, so you can delete them by removing the app and its iCloud data. Our server holds only a random installation identifier and daily counters. For questions about it, email support@allergyflowapp.com and we will respond within 30 days.

7. Children's privacy

AllergyFlow is not directed to children under 13. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top will reflect the latest revision. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

Questions? Reach us at support@allergyflowapp.com