# Privacy Policy — Allergy Diary
**Last updated: 2026-06-06**
Allergy Diary ("the app") is published by Mobilia Apps. This policy explains what data the app collects, why, and how it is used.
## 1. Data You Enter
The app stores the following information **locally on your device** in a private database:
- Food entries (name, ingredients, meal type, photo path, notes, timestamp)
- Symptom entries (name, severity, body location, duration, notes, timestamp)
- Medication entries (name, dose, route, reason, notes, timestamp)
- Environmental readings (air quality, pollen levels, location coordinates) when you request them
- Optional profile (name, age, known allergies, conditions)
This data **never leaves your device** unless you explicitly sign in for cloud backup.
## 2. Optional Cloud Backup
If you sign in with Google, your diary entries are synced to **Google Firebase Firestore** under your Firebase user account at `users/{your-uid}/`. You can sign out and delete your account at any time from Settings.
## 3. AI Correlation Analysis
When you tap **Run AI Analysis** in the Correlations screen, the app sends a summary of your recent diary entries (foods, symptoms, medications, environmental readings, optional profile context) to our backend proxy (`gemini-proxy.muhammadilyas15.workers.dev`), which forwards the request to Google's Gemini API. The response is returned to your device.
- We do **not** store the prompt or the response on our servers beyond what is required for transient processing.
- Google's Gemini API processes the data under [Google's API terms](https://ai.google.dev/terms).
- You can avoid this entirely by simply not using the AI Correlation feature.
## 4. Air Quality & Pollen Data
When you fetch environmental readings, your chosen city is geocoded on-device (Android Geocoder) and the resulting latitude/longitude are sent to **Open-Meteo** (`air-quality-api.open-meteo.com`) to retrieve public air-quality and pollen data. Open-Meteo's privacy policy is available on their site. No personal identifier is included.
## 5. Advertising
The free tier of the app displays banner and rewarded ads served by **Google AdMob**. AdMob may collect device identifiers and ad-interaction events under its own [Privacy & Terms](https://policies.google.com/privacy). Consent is gathered via the IAB TCF / UMP framework before personalised ads are shown in regions that require it.
## 6. Crash Reporting & Analytics
We use **Firebase Crashlytics** for crash diagnostics and **Firebase Analytics** for aggregated usage stats. These services do not receive your diary content; they only receive technical signals (crash stack, device model, OS version, screen names).
## 7. Permissions
- **POST_NOTIFICATIONS** — to show daily-reminder notifications you opt into.
- **ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION** — declared but **not requested at runtime**; the current build uses Geocoder text-input instead of GPS.
- **RECEIVE_BOOT_COMPLETED** — to reschedule your reminder after a device restart.
- **INTERNET / ACCESS_NETWORK_STATE** — to fetch air quality, run AI correlation, and sync.
## 8. Children
Allergy Diary is intended for **users aged 13 and over** (or the minimum digital-consent age in your region). It is not directed at children.
## 9. Medical Disclaimer
Allergy Diary is a personal tracking tool. It does **not** provide medical advice, diagnosis, or treatment. AI correlation hints are informational pattern suggestions, not clinical conclusions. Always consult a qualified healthcare provider for medical concerns.
## 10. Your Rights
You can:
- Delete any entry from the app.
- Sign out at any time (local data remains until you uninstall).
- Uninstall the app to remove all local data.
- Contact us to delete your cloud-backed data: **muhammadilyas15@gmail.com**.
## 11. Changes
We may update this policy. Material changes will be communicated via the app or the Play Store listing.
## 12. Data Retention
We keep your information only for as long as it is needed for the purposes described in this policy.
- **Data stored on your device** — retained until you delete the individual entry, clear the app's storage, or uninstall the App. Uninstalling removes all locally stored data from the device.
- **Cloud backup data (only if you signed in)** — retained for as long as you keep it, so it is available when you reinstall or switch devices. It is erased as soon as you delete it in the App or ask us to delete it (see the Data Deletion section). We do not keep backup copies of deleted cloud data for longer than **30 days**, after which deletion is permanent and irreversible.
- **Crash reports (Firebase Crashlytics)** — automatically deleted after **90 days**.
- **Analytics data (Firebase Analytics)** — retained in aggregated, non-identifying form for a maximum of **14 months**, then automatically deleted.
- **Support emails** — if you contact us, your message is retained for up to **24 months** after your enquiry is resolved, then deleted.
- **Purchase records** — retained by Google Play for the period required by applicable tax and accounting law. We do not hold separate copies.
## 13. Data Deletion — How to Delete Your Data
You can delete your data at any time.
**Delete individual entries**
Open any entry in the App and tap Delete. It is removed immediately, from both the device and the cloud.
**Uninstall**
Uninstalling the App removes all locally stored data from your device.
**Request deletion by email**
If you cannot access the App, or you want written confirmation that your data has been erased, email us at **muhammadilyas15@gmail.com** with the subject line **"Allergy & Symptom Diary – Data Deletion Request"**, including the account email address you used to sign in. We will verify the request, delete all associated data, and confirm by email **within 30 days**. There is no charge for this.
## 14. Contact
**Developer:** Mobilia Apps
**Email:** muhammadilyas15@gmail.com
**Privacy hub:** https://sites.google.com/view/mobilia-apps/allergy-diary