Privacy Policy — Allergy Diary

Last updated: 2026-06-06

Allergy Diary ("the app") is published by Mobilia Apps. This policy explains what data the app collects, why, and how it is used.

1. Data You Enter

The app stores the following information locally on your device in a private database:

• Food entries (name, ingredients, meal type, photo path, notes, timestamp)
• Symptom entries (name, severity, body location, duration, notes, timestamp)
• Medication entries (name, dose, route, reason, notes, timestamp)
• Environmental readings (air quality, pollen levels, location coordinates) when you request them
• Optional profile (name, age, known allergies, conditions)

This data never leaves your device unless you explicitly sign in for cloud backup.

2. Optional Cloud Backup

If you sign in with Google, your diary entries are synced to Google Firebase Firestore under your Firebase user account at users/{your-uid}/. You can sign out and delete your account at any time from Settings.

3. AI Correlation Analysis

When you tap Run AI Analysis in the Correlations screen, the app sends a summary of your recent diary entries (foods, symptoms, medications, environmental readings, optional profile context) to our backend proxy (gemini-proxy.muhammadilyas15.workers.dev), which forwards the request to Google's Gemini API. The response is returned to your device.

• We do not store the prompt or the response on our servers beyond what is required for transient processing.
• Google's Gemini API processes the data under Google's API terms.
• You can avoid this entirely by simply not using the AI Correlation feature.

4. Air Quality & Pollen Data

When you fetch environmental readings, your chosen city is geocoded on-device (Android Geocoder) and the resulting latitude/longitude are sent to Open-Meteo (air-quality-api.open-meteo.com) to retrieve public air-quality and pollen data. Open-Meteo's privacy policy is available on their site. No personal identifier is included.

5. Advertising

The free tier of the app displays banner and rewarded ads served by Google AdMob. AdMob may collect device identifiers and ad-interaction events under its own Privacy & Terms. Consent is gathered via the IAB TCF / UMP framework before personalised ads are shown in regions that require it.

6. Crash Reporting & Analytics

We use Firebase Crashlytics for crash diagnostics and Firebase Analytics for aggregated usage stats. These services do not receive your diary content; they only receive technical signals (crash stack, device model, OS version, screen names).

7. Permissions

• POST_NOTIFICATIONS — to show daily-reminder notifications you opt into.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION — declared but not requested at runtime; the current build uses Geocoder text-input instead of GPS.
• RECEIVE_BOOT_COMPLETED — to reschedule your reminder after a device restart.
• INTERNET / ACCESS_NETWORK_STATE — to fetch air quality, run AI correlation, and sync.

8. Children

Allergy Diary is intended for users aged 13 and over (or the minimum digital-consent age in your region). It is not directed at children.

9. Medical Disclaimer

Allergy Diary is a personal tracking tool. It does not provide medical advice, diagnosis, or treatment. AI correlation hints are informational pattern suggestions, not clinical conclusions. Always consult a qualified healthcare provider for medical concerns.

10. Your Rights

You can:

• Delete any entry from the app.
• Sign out at any time (local data remains until you uninstall).
• Uninstall the app to remove all local data.
• Contact us to delete your cloud-backed data: muhammadilyas15@gmail.com.

11. Changes

We may update this policy. Material changes will be communicated via the app or the Play Store listing.

12. Data Retention

We keep your information only for as long as it is needed for the purposes described in this policy.

• Data stored on your device — retained until you delete the individual entry, clear the app's storage, or uninstall the App. Uninstalling removes all locally stored data from the device.
• Cloud backup data (only if you signed in) — retained for as long as you keep it, so it is available when you reinstall or switch devices. It is erased as soon as you delete it in the App or ask us to delete it (see the Data Deletion section). We do not keep backup copies of deleted cloud data for longer than 30 days, after which deletion is permanent and irreversible.
• Crash reports (Firebase Crashlytics) — automatically deleted after 90 days.
• Analytics data (Firebase Analytics) — retained in aggregated, non-identifying form for a maximum of 14 months, then automatically deleted.
• Support emails — if you contact us, your message is retained for up to 24 months after your enquiry is resolved, then deleted.
• Purchase records — retained by Google Play for the period required by applicable tax and accounting law. We do not hold separate copies.

13. Data Deletion — How to Delete Your Data

You can delete your data at any time. Delete individual entries Open any entry in the App and tap Delete. It is removed immediately, from both the device and the cloud. Uninstall Uninstalling the App removes all locally stored data from your device. Request deletion by email If you cannot access the App, or you want written confirmation that your data has been erased, email us at muhammadilyas15@gmail.com with the subject line "Allergy & Symptom Diary – Data Deletion Request", including the account email address you used to sign in. We will verify the request, delete all associated data, and confirm by email within 30 days. There is no charge for this.

14. Contact

Developer: Mobilia Apps Email: muhammadilyas15@gmail.com Privacy hub: https://itworldpro.com/allergy-diary/privacy-policy