Privacy Policy

This policy explains how AllergyVault, a sole trader based in Melbourne, Australia (“AllergyVault”, “I”, “me”) handles information when you use the AllergyVault iOS app and this website. An Australian Business Number (ABN) is available on request.

Allergy records are health information. This policy is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in mind. It is not legal advice.

1. Who is responsible

AllergyVault is operated by a sole trader based in Melbourne, Victoria, Australia. There is no separate company listed for this product.

For privacy requests (access, correction, or a complaint), contact AllergyVault via Instagram (@allergyvault) or X (@AllergyVault). Do not send medical records through social media. If you need a private channel, say so in the message and a suitable way to continue will be arranged.

2. The iOS app: on-device first

The core AllergyVault app is built so allergy records, profile details, emergency contacts, supporting documents, and related settings are stored on your device. You do not create an AllergyVault account to use the core vault.

In ordinary use of the core vault:

• AllergyVault does not run a login service or host your allergy records on AllergyVault servers.
• Face ID or device passcode lock uses Apple’s local authentication. Allergy records stay in the vault file; they are not stored in Keychain as a substitute database.
• Backup and restore are started by you. A backup is a file you keep or move.
• Restaurant, pharmacy, and Medical ID cards are generated on the device so you can show or share them.

3. Optional connections you choose

Some features send or receive information only if you use them:

• Apple Health import is read-only. If you import allergies, the data comes from Health on your device under Apple’s rules and your permission.
• iCloud / multi-device sync uses your Apple ID and iCloud. Apple is the service provider. AllergyVault does not operate that cloud.
• Time-limited clinician or school share links let you share vault information for a limited time. Anyone with the link may be able to view what you shared until it expires. Share only with people you trust.
• Caregiver invites in the full family vault share access you grant with the invited person.
• Menu or label scan assist may process an image you capture so it can be checked against your records. Prefer on-device processing where the app provides it.
• Notifications for EpiPen expiry are scheduled locally on the device.

Apple, Instagram (Meta), and X are separate organisations. Their products are covered by their own privacy policies.

4. This website

This marketing site does not offer an account, waitlist, or email signup. Follow links go to Instagram and X.

The site is hosted on Vercel. Like most websites, hosting and delivery systems may process technical data such as IP address, browser type, date and time, and the pages requested. That processing may occur outside Australia. AllergyVault does not run a separate marketing analytics pixel on this site.

If you follow Instagram or X, those services collect information under their policies.

5. Why information is handled

Where AllergyVault handles personal information, it is to:

• provide the app and website you asked for
• let you show, share, back up, or restore your own records
• respond to privacy or support requests you send
• operate and secure this website
• meet Australian law where it applies

AllergyVault does not sell personal information. The app is not a diagnostic service and does not replace clinicians or emergency services.

6. Children and family profiles

AllergyVault is aimed at adults who manage their own allergies, and at parents or carers who manage a child’s allergies. Family profiles are for that adult user on their device. Do not enter another person’s health information unless you are allowed to manage it.

7. Retention

On-device records stay until you change or delete them, uninstall the app, or restore a backup that replaces them. Website logs are kept only as the host keeps them for security and operations. Messages you send on Instagram or X are kept as those platforms keep them, and any copy AllergyVault retains for a request is kept only as long as needed to handle it.

8. Access, correction, and complaints

You can view and edit vault data in the app. For access or correction of personal information AllergyVault holds outside the device (for example, a message you sent), use the Instagram or X contact above.

If you are not satisfied with how a privacy matter is handled, you may complain to the Office of the Australian Information Commissioner (OAIC).

9. Overseas disclosure

Website hosting (Vercel) and social platforms you choose to use may store or process data outside Australia, including in the United States. Optional Apple services (Health, iCloud) follow Apple’s locations and terms.

10. Changes

This policy may be updated. The date at the top will change when it does. Continue using the site or app only if you accept the current policy.