Introduction
AllerAlert ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile health application designed for proactive asthma management.
By using AllerAlert, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.
Information We Collect
Personal Information
We may collect personally identifiable information that you voluntarily provide when using AllerAlert, including:
- Name and email address (via email registration, Google Sign-In, or Apple Sign-In)
- Profile information from your authentication provider
- Health-related data you choose to log (symptoms, triggers, medications)
Environmental Data
When connected to an Atmotube PRO device via Bluetooth, we collect:
- VOCs (Volatile Organic Compounds) readings
- Particulate Matter levels (PM1, PM2.5, PM10)
- Temperature, humidity, and atmospheric pressure
Location Information
With your permission, we may collect location data to:
- Provide hyper-local weather forecasts
- Correlate environmental conditions with your symptoms
- Identify environmental risk zones
Health Data from Apple Health or Health Connect
With your permission, AllerAlert reads the following from Apple Health (iOS) or Health Connect (Android): steps, resting heart rate, heart rate variability, blood oxygen saturation, respiratory rate, and sleep. We read up to 30 days of history when you first connect, and new data afterwards, including in the background while the app is closed. The app stores hourly and daily summaries of these measures in your account to show your health trends alongside your symptoms and air quality. We do not use this data for advertising, and we never share it with third parties except as described under Data Sharing. You can stop this at any time by revoking AllerAlert's access in the Health app or in Health Connect, or by disconnecting health data inside AllerAlert.
Voice Data
When using voice-enabled symptom tracking, your voice input is processed to extract symptoms, triggers, and medication information. Voice recordings are processed in real-time and are not stored permanently.
How We Use Your Information
We use the collected information to:
- Provide and maintain the AllerAlert service
- Generate personalized health insights and trend visualizations
- Analyze environmental patterns and identify triggers
- Improve our app's features and user experience
- Send important notifications about your health data
- Comply with legal obligations
Data Storage and Security
- Firebase Authentication: Secure user authentication via email, Google Sign-In, or Apple Sign-In
- Cloud Firestore: Encrypted, real-time cloud database for your health data
- No PHI Storage: No Protected Health Information (PHI) is stored outside of Firebase's secure infrastructure
Data Retention
We keep your data for as long as your AllerAlert account exists. Specifically:
- Account and health data: symptom entries, medication records, air quality readings, health summaries, and your profile are kept while your account is active so that you can see your history and trends.
- Voice recordings: not stored. Dictation is processed on your device while you speak, and only the resulting text is saved with your diary entry.
- Location: we do not store your position. Location is used at the moment you request a weather forecast or save a diary entry, and only your time zone is kept with the entry.
- Crash reports: technical diagnostics without health data, kept by Firebase Crashlytics for 90 days.
When you delete your account from inside the app (Me → Delete Account) or through our account deletion request page, your account and all data linked to it are deleted from our systems within 30 days, including backups. Data that was already de-identified for the research study before your deletion request cannot be linked back to you and may be kept for the period required by the study protocol approved by the Indiana University Institutional Review Board, after which it is destroyed.
Third-Party Services
AllerAlert integrates with the following third-party services:
- Firebase (Google): Authentication, data storage, and crash reporting (Crashlytics)
- Open-Meteo: Weather forecasts and outdoor air quality, requested for your approximate location without any account information
- Apple Health and Health Connect: the source of the health measures described above, read only with your permission
Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal requirements or respond to lawful requests
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets (with prior notice)
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate information
- Deletion: Delete your account and all associated data from the app (Me → Delete Account) or through our account deletion request page; see Data Retention for what happens next
- Portability: Request your data in a portable format
- Withdraw Consent: Opt out of data collection at any time
To exercise these rights, please contact us using the information provided below.
Children's Privacy
AllerAlert is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: saptpurk@iu.edu