Privacy Policy

Two kinds of data, kept apart

It helps to separate them, because they follow completely different rules:

• Restaurant data — menus, dishes, allergen information, and business details we gather from public sources. This is information about restaurants, not about you. It lives in a separate part of our database from anything personal.
• Your data — your allergy profile, your searches, and your account. This is about you, and it is protected by everything below.

We never mix the two. When we build reports or share insights about restaurants, that work never draws on your identifiable personal data.

What we collect about you

• Your allergy profile (the allergens you select and whether traces matter). By default it lives only on your device. If you create an account, it is saved to your account so it follows you.
• Restaurant searches you run. We log the restaurant, the result, cost, and any errors, to cache answers, improve coverage, monitor for problems, and prevent abuse.
• Account details if you sign in: your email and basic profile from your sign-in provider (for example Google). We never receive your password.
• Basic analytics (page views, general usage) to understand what is working.

Sensitive information

Your allergy profile can reveal something health-related about you, so we treat it as sensitive. We use it only to give you your results and to run the service. We do not use it for advertising, and we never sell or share it in a form that identifies you. You can decline the data uses described below and still use every part of the product.

Who processes your data

We use a small set of providers to run the service:

• Supabase — database and accounts
• Vercel — hosting
• OpenRouter and its underlying model providers (currently Google Gemini), and Anthropic — to read menu text and produce the allergen report
• Google — restaurant lookup (Places) and analytics
• Search and fetch providers (including our own self-hosted crawler) used to find and read public restaurant pages

Providers process data on our behalf under their own terms; they are not permitted to use it for their own purposes.

Selling and sharing — the honest version

• We never sell or share data that identifies you. Not your allergy profile, not your email, not your searches tied to your name.
• We may share aggregated, de-identified insights — for example, “gluten is the most searched allergen in Brooklyn.” These are built so that no individual can be identified, and they never include your name, email, or profile. Under laws like the CCPA this could be considered “sharing,” so you can opt out at any time (see below), and we honor Global Privacy Control signals.
• Restaurant data is a separate matter. Information about restaurants and their menus is not personal data, and we may publish or license it. That never involves your personal data.

Your choices and rights

• Use the product without an account. Your profile stays on your device and you can clear it anytime.
• Opt out of de-identified aggregate sharing at Data Choices, or by emailing us. It does not change your experience.
• Access or delete your account and associated data. Email privacy@allergytable.com.
• Depending on where you live, you may have additional rights (access, correction, deletion, portability, and to not be discriminated against for exercising them). Email us to exercise any of them.

For the full picture of what we collect and how we use it, see Data Choices.

Questions

Reach us at privacy@allergytable.com. This policy may change as the product grows; we will update the date above and, for material changes, ask you to review again.