Privacy Policy

Allergy Detective AI ("we," "us," or "our") is operated by EXCELSIA GROUP LLC, located at 11582 SW Village Pkwy #518, Port St. Lucie, FL 34987, United States. We respect your privacy and are committed to protecting the personal and health-related information you entrust to us.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. By using Allergy Detective AI, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and any display name you choose to provide. If you sign in using a third-party provider (such as Google or Apple), we receive the email address and name associated with that account.

1.2 Profile and Health-Related Information

Allergy Detective AI allows you to create one or more profiles (for yourself or family members). The health-related information you may choose to log includes:

• Profile details such as display name, relationship, optional date of birth, and optional profile photo
• Symptom logs, including body location, symptom types, severity, duration, and optional notes
• Food and drink logs, including food names, ingredients, meal categories, and optional photos
• Product logs, including product type, brand, product name, and optional photos
• Activity logs, including activities and stress levels
• Environmental logs, including pollen levels, air quality, weather, temperature, humidity, and indoor factors
• Medication logs, including medicine names, dosages, and durations
• Known allergies, skin conditions, and tracking preferences
• Optional city-level location for environmental data enrichment

1.3 AI-Generated Analysis Data

When you request an AI investigation, we process your logged data to generate potential trigger analysis, cross-reactivity observations, medication response patterns, trend analyses, and watch list suggestions. The results are stored in your account and are associated with the profile that was analyzed.

1.4 Photos and Files

Photos you upload (such as images of foods, products, or symptoms) are stored securely. Health-related photos are stored in private storage and are accessible only through time-limited signed URLs. Doctor Case File exports (PDF, CSV, JSON) are generated on demand and are not stored on our servers beyond your session.

1.5 Usage and Technical Data

We automatically collect limited technical data, including approximate device type, browser type, and aggregated usage analytics (such as which features are used). We do not collect precise geolocation data unless you explicitly enable location-based environmental tracking in Settings.

2. How We Use Your Information

• To provide the core logging, analysis, and investigation features of the application
• To generate AI-assisted pattern observations and potential trigger suggestions based on your logged data
• To maintain separate, isolated profiles for different family members within your account
• To generate Doctor Case File reports for sharing with your healthcare provider
• To send optional logging reminders and notifications if you enable them
• To improve the quality, accuracy, and usability of our features through aggregated, de-identified analytics
• To provide subscription and billing services through our payment processor, Stripe
• To communicate with you about your account, security updates, and important service notices

3. How We Protect Your Information

We implement industry-standard security measures to protect your data:

• All data is transmitted over encrypted connections (HTTPS/TLS)
• Health-related photos are stored in private storage and are only accessible through time-limited signed URLs
• Row-level security policies ensure that each user can only access their own data and the profiles they have created
• Access to your data is restricted to authorized personnel for system maintenance and support
• Payment information is handled entirely by Stripe and is never stored on our servers

While we take reasonable steps to protect your information, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal or health-related information. We may share information only in the following limited circumstances:

• Service Providers: We use third-party services (including Stripe for payment processing and AI model providers for analysis) that may process data on our behalf under appropriate data protection agreements
• Legal Compliance: If required by law, court order, or government regulation
• Safety: If we believe disclosure is necessary to protect the rights, property, or safety of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

Your Doctor Case File and exported data are shared only when you explicitly choose to download or share them. We do not share your health data with healthcare providers, insurance companies, or third parties unless you initiate the sharing.

5. Data Retention

We retain your data for as long as your account is active. You can delete individual logs or all of your data at any time through the Settings page. When you delete data, it is permanently removed from our active database. If you delete your account, all associated data will be permanently removed within a reasonable period.

6. Your Privacy Choices

You have the following rights and controls over your data:

• Access: You can view and export all your logged data at any time
• Deletion: You can delete individual logs or all of your data through Settings
• Notifications: You can enable or disable logging reminders in Settings
• Location: You can enable or disable location-based environmental tracking in Settings
• Account Closure: You can request account deletion, which will permanently remove all your data

Depending on your jurisdiction (such as the EU, UK, California, or other regions with privacy laws), you may have additional rights including the right to access, correct, port, or restrict the processing of your personal data.

7. Children's Privacy

Allergy Detective AI is designed for use by adults who may create profiles for their family members, including children. We do not knowingly collect personal information directly from children. Parents or guardians who create profiles for their children are responsible for the information they enter and for managing their children's data.

8. AI and Automated Processing

Our AI-assisted analysis features process your logged data to identify potential patterns and suggest possible triggers. These analyses are generated by automated systems and are not reviewed by medical professionals. AI-generated insights are observational and organizational in nature — they do not constitute medical advice, diagnosis, or treatment recommendations. See our Medical Disclaimer for important limitations.

9. Cookies and Tracking

We use minimal cookies and similar technologies for essential functionality (such as maintaining your session) and aggregated analytics. We do not use cookies for cross-site advertising tracking. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

10. International Data Transfers

Your data may be processed and stored on servers located in the United States or other countries. If you are accessing our services from outside the United States, you acknowledge that your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or your data, you can reach us through the in-app support or contact form. Our mailing address is:

EXCELSIA GROUP LLC
11582 SW Village Pkwy #518
Port St. Lucie, FL 34987
United States