Aller AI
In short: Aller AI doesn't require an account. Your allergy profile lives on your device. Photos you scan are processed only to generate that result and are not stored on our servers afterward. We never sell your personal information.
01Overview
This Privacy Policy ("Policy") describes how Aller AI ("we", "our", "us") collects, uses, discloses, and protects information when you use the Aller AI mobile application (the "App"). By using the App, you agree to the practices described here. If you don't agree, please don't use the App.
We built Aller AI so it needs as little personal information as possible to work: there's no sign-up, no password, and your allergy profile is stored locally on your device by default.
02Information we collect
| Allergy profile | The allergens, severity levels, and trace-handling preferences you set in the App. This is health-related information. It's stored locally on your device and sent with each scan request so we can check it against the food — it is not stored on our servers after the request completes. |
|---|---|
| Scan photos | When you scan a menu, dish, barcode, or label, that photo is sent to our backend and analyzed by an AI vision model to identify ingredients and allergens. The photo is used only to generate that scan's result and is discarded after processing — we do not build a photo library of your scans on our servers. |
| Purchase & subscription data | Subscription status, product identifiers, and transaction identifiers, handled through Apple's In-App Purchase system and our subscription provider, RevenueCat. We never see or store your payment card details — Apple processes all payments. |
| Advertising identifier (IDFA) | Collected only if you grant permission through Apple's App Tracking Transparency prompt, and used to measure the performance of our ad campaigns. You can decline this prompt, or change your choice anytime in iOS Settings → Privacy & Security → Tracking. |
| Usage analytics | Anonymous product-usage events — app opened, scan started, upgrade tapped — used to understand how the App is used and to improve it. These events never include your photos, your allergy profile, or any scan contents. |
| Device & app identifiers | A random identifier generated by our subscription provider to manage your subscription and prevent purchase fraud. It isn't tied to your name, email, or any contact details, because we don't collect those. |
03How we use this information
- To generate accurate, personalized scan results based on your allergy profile and the photo you provide.
- To process subscriptions, apply free trials and promotional offers, and restore purchases across your devices.
- To understand how the App is used, fix bugs, and prioritize what to build next.
- To measure the performance of our advertising, only where you've allowed tracking.
- To respond when you contact us for support.
- To detect, investigate, and prevent fraudulent or abusive activity.
We do not sell your personal information, and we do not use your allergy profile or scan photos for advertising purposes.
04Third-party services
Aller AI relies on a small number of service providers to function. Each processes data under its own privacy policy:
- OpenAI — processes scan photos and your allergy profile to generate results. Not used to train OpenAI's models.
- Supabase — hosts the backend function that relays scan requests between the App and OpenAI.
- RevenueCat — manages subscriptions, entitlements, and purchase validation.
- Apple — processes all App Store payments and provides the App Tracking Transparency framework.
- Meta (Facebook) — receives your advertising identifier, only with your consent, and app-event data for ad measurement.
- PostHog — collects anonymous product-usage analytics.
05Data retention
Your allergy profile and scan history stay on your device and are permanently deleted when you uninstall the App. Scan photos are processed in real time and are not retained by our backend after a result is returned. Subscription records are retained by Apple and RevenueCat for as long as required to manage your subscription and to meet legal and accounting obligations.
06Your choices
- Decline or revoke advertising tracking permission anytime in iOS Settings → Privacy & Security → Tracking.
- Delete all locally stored data — your allergy profile, scan history, and preferences — by uninstalling the App.
- Manage or cancel your subscription anytime from your iPhone's Settings → [your name] → Subscriptions.
- Request deletion of any backend logs associated with your device by contacting us below.
07Security
We use industry-standard safeguards — including encryption in transit (HTTPS/TLS) — to protect information while it's processed. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work to keep the amount of data we handle to the minimum the App actually needs.
08Regional privacy rights
European Economic Area, UK & Switzerland (GDPR)
If you're located in the EEA, UK, or Switzerland, you have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Because Aller AI stores your allergy profile locally on your device rather than on our servers, the simplest way to exercise most of these rights is to delete the App. For anything processed on our backend (such as logs), contact us below.
California (CCPA/CPRA) & other U.S. states
If you're a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. Sharing an advertising identifier with Meta for ad measurement only happens if you grant tracking permission, which you can decline or revoke at any time.
09Children's privacy
Aller AI is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.
10Changes to this policy
We may update this Policy as the App evolves. Material changes will be reflected by updating the effective date at the top of this page. We encourage you to review this Policy periodically.
11Contact us
Aller AI is operated by Novar Softwares (CNPJ 44.913.552/0001-66). Questions about this Policy or your data? Email us at czaar.developer@gmail.com and we'll get back to you.