# Privacy Policy — Allergy Diary
**Last updated: 2026-06-06**
Allergy Diary ("the app") is published by Mobilia Apps. This policy explains what data the app collects, why, and how it is used.
## 1. Data You Enter
The app stores the following information **locally on your device** in a private database:
- Food entries (name, ingredients, meal type, photo path, notes, timestamp)
- Symptom entries (name, severity, body location, duration, notes, timestamp)
- Medication entries (name, dose, route, reason, notes, timestamp)
- Environmental readings (air quality, pollen levels, location coordinates) when you request them
- Optional profile (name, age, known allergies, conditions)
This data **never leaves your device** unless you explicitly sign in for cloud backup.
## 2. Optional Cloud Backup
If you sign in with Google, your diary entries are synced to **Google Firebase Firestore** under your Firebase user account at `users/{your-uid}/`. You can sign out and delete your account at any time from Settings.
## 3. AI Correlation Analysis
When you tap **Run AI Analysis** in the Correlations screen, the app sends a summary of your recent diary entries (foods, symptoms, medications, environmental readings, optional profile context) to our backend proxy (`gemini-proxy.muhammadilyas15.workers.dev`), which forwards the request to Google's Gemini API. The response is returned to your device.
- We do **not** store the prompt or the response on our servers beyond what is required for transient processing.
- Google's Gemini API processes the data under [Google's API terms](https://ai.google.dev/terms).
- You can avoid this entirely by simply not using the AI Correlation feature.
## 4. Air Quality & Pollen Data
When you fetch environmental readings, your chosen city is geocoded on-device (Android Geocoder) and the resulting latitude/longitude are sent to **Open-Meteo** (`air-quality-api.open-meteo.com`) to retrieve public air-quality and pollen data. Open-Meteo's privacy policy is available on their site. No personal identifier is included.
## 5. Advertising
The free tier of the app displays banner and rewarded ads served by **Google AdMob**. AdMob may collect device identifiers and ad-interaction events under its own [Privacy & Terms](https://policies.google.com/privacy). Consent is gathered via the IAB TCF / UMP framework before personalised ads are shown in regions that require it.
## 6. Crash Reporting & Analytics
We use **Firebase Crashlytics** for crash diagnostics and **Firebase Analytics** for aggregated usage stats. These services do not receive your diary content; they only receive technical signals (crash stack, device model, OS version, screen names).
## 7. Permissions
- **POST_NOTIFICATIONS** — to show daily-reminder notifications you opt into.
- **ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION** — declared but **not requested at runtime**; the current build uses Geocoder text-input instead of GPS.
- **RECEIVE_BOOT_COMPLETED** — to reschedule your reminder after a device restart.
- **INTERNET / ACCESS_NETWORK_STATE** — to fetch air quality, run AI correlation, and sync.
## 8. Children
Allergy Diary is intended for **users aged 13 and over** (or the minimum digital-consent age in your region). It is not directed at children.
## 9. Medical Disclaimer
Allergy Diary is a personal tracking tool. It does **not** provide medical advice, diagnosis, or treatment. AI correlation hints are informational pattern suggestions, not clinical conclusions. Always consult a qualified healthcare provider for medical concerns.
## 10. Your Rights
You can:
- Delete any entry from the app.
- Sign out at any time (local data remains until you uninstall).
- Uninstall the app to remove all local data.
- Contact us to delete your cloud-backed data: **muhammadilyas15@gmail.com**.
## 11. Changes
We may update this policy. Material changes will be communicated via the app or the Play Store listing.
## 12. Contact
**Developer:** Mobilia Apps
**Email:** muhammadilyas15@gmail.com
**Privacy hub:** https://sites.google.com/view/mobilia-apps/