Privacy Policy

Read this part if you read nothing else. AllerTrack stores health information about your child. That is sensitive data, and it is treated as such: it is never sold, never used for advertising, never shared with anyone except the service providers listed below that are strictly needed to run the app. You can export everything or delete all of it permanently, yourself, at any time, from your account page.

1. Who is responsible for your data

Pablo Antón Anfosso, established in Spain, is the data controller for the information described here. For anything related to your data, including exercising the rights in section 7, write to support@allertrack.app.

2. What we collect, and why

Only what the app needs to work. There is no analytics, no tracking pixels, no advertising identifiers, and no data collected for any purpose other than providing the service to you.

3. Health data and the legal basis

Doses, symptoms, reactions and treatments are health data — a “special category” under Article 9 of the GDPR, which gets stronger protection than ordinary personal data.

We process it on the basis of your explicit consent, given when you create your account (Article 6(1)(a) and Article 9(2)(a) GDPR). Everything else — your email, your plan — is processed to perform our contract with you (Article 6(1)(b)).

You can withdraw your consent at any time by deleting your account, which erases the data. Withdrawing does not undo processing that already happened lawfully before you withdrew.

4. Data about a child

The account belongs to you, the adult. By creating it you confirm you hold parental responsibility for the child whose information you enter, or are otherwise authorised to provide it.

AllerTrack is not intended to be used by children. We deliberately ask for as little as possible about the child: a name of your choosing and their treatment records. No surname, no date of birth, no address, no photographs, no identifiers of any kind are requested.

5. Who else can see it

Nobody buys it, nobody rents it, nobody advertises against it. It is shared only with the providers that make the service run, each bound to process it only on our instructions:

About the AI feature (Pro plan only). If you use “just tell us what happened” to describe a reaction in your own words, that sentence — and nothing else — is sent to Anthropic to turn into form fields. Your history, your child's name and your account are not sent. If you dictate it, the speech-to-text happens in your own browser: the audio never reaches us or anyone else, only the resulting text. If you never use that button, nothing is ever sent to Anthropic at all.

Your data is stored in Europe. Where a provider transfers data outside the EEA, that transfer relies on the European Commission's Standard Contractual Clauses.

We will also disclose data if a law or a valid court order requires it — and we will tell you when we are legally allowed to.

People you choose to share with

Two features let you hand access to someone else. Both are entirely your decision, and you control them from your account:

• Caregivers. If you invite another adult by email, they can read and add to your family's records, including the health information in them, from the moment they sign in with that address. They cannot invite anyone else, change your plan or delete the account. Removing them ends their access immediately.
• Allergist links. A shared link opens a read-only view of one allergen's record, with no account needed. The link address is the secret: anyone who has it can open that record until it expires or you turn it off, so treat it like the medical report it is. Links expire on their own, and turning one off takes effect immediately.

Once you have shared information with someone, what they do with it is outside our control, in the same way as emailing them a PDF would be.

6. How long we keep it

For as long as your account exists. The whole point of the app is a long, continuous record, so we do not silently delete old entries.

When you delete your account, your data is deleted from our database immediately and permanently, including doses, reactions, schedules and settings. Backups held by our hosting provider roll off within 30 days. Anonymous, aggregated counts that cannot identify you or your child (for example, how many accounts exist) may be retained.

7. Your rights

Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, receive it in a portable format, and withdraw your consent.

Two of those are built into the app so you never have to ask us and wait:

• Export everything — a complete machine-readable file of all your data, from your account page.
• Delete everything — permanent deletion of your account and all records, from your account page.

For anything else, write to support@allertrack.app and we will respond within one month. If you think we have handled your data badly, you can complain to the data protection authority of your country.

8. Cookies

AllerTrack sets only the cookies needed to keep you signed in. There are no analytics cookies, no advertising cookies and no third-party trackers, which is why you are not being asked to accept anything. Clearing them simply signs you out.

9. Security

Traffic is encrypted in transit. Data is separated at the database level so that one account cannot read another's records, enforced by the database itself rather than only by application code. Passwords are stored hashed by our authentication provider and are never visible to us.

No system is perfect. If a breach ever affects your data, we will notify the supervisory authority within 72 hours and tell you directly when the law requires it.

10. Changes

If we change this policy in a way that affects how your data is used, we will ask you to accept the new version before you continue using the app, and the version number above will change.