TrackAllerg — Privacy Policy

Last updated: 2026-08-30

What TrackAllerg is

TrackAllerg is a personal allergy diary for Android. You record symptoms, medicines and notes; the app fetches weather, pollen and air-quality data for your location to display alongside your entries. TrackAllerg is not a medical device and provides no medical advice.

Data you enter

Symptom severities, medicines and doses, treatments, notes, sleep location, time outdoors, and a location per day, plus any custom treatment or sleeping-place names you add. The weather, pollen and air-quality values fetched for each tracked day (and the elevation of that day's location) are saved together with the entry so your history stays complete offline. This is health-related data. It is stored:

• Without an account ("guest mode", the default): only on your device. It is included in Android's device backup (your Google account backup) if you have device backup enabled. We have no access to it.
• With a Google account sign-in (optional): in Google Firebase Cloud Firestore (region: Zürich, Switzerland), under your account, encrypted in transit, accessible only by you (enforced by security rules). We do not read, share or sell it.

Location

Your approximate (city-level) location is used only to request weather, pollen and air-quality data from the services below, and a coarse coordinate is stored in your own diary entries. Location is never shared with anyone else and is never used for advertising. You can use the app entirely without location access by picking a place manually.

Third-party services

• Open-Meteo (open-meteo.com): receives coordinates to return weather, air-quality and pollen-forecast data (the measured pollen values come from MeteoSwiss, below). No account identifiers are sent.
• MeteoSwiss open data (data.geo.admin.ch): pollen measurements are downloaded per monitoring station; your coordinates are not sent (the app picks the nearest station on the device).
• Google Firebase: authentication (only if you sign in) and data storage (see above). When you sign in with Google, the app receives your Google account's email address, display name and profile-picture URL; they are used only to identify your account and show it in Settings (the picture is loaded from Google's servers) and are deleted with the account. The app also uses Firebase App Check with Google Play Integrity: when it communicates with Firebase, Google Play sends an attestation of the app and device to Google to protect the backend from abuse — no diary data is involved. Crash reporting (Firebase Crashlytics) is used only if you keep it enabled in Settings; crash reports are anonymous — no user identifier is attached, your entries, notes, medicine names and locations are never included, and identifiers and coordinates are additionally scrubbed before upload.

TrackAllerg contains no advertising and no analytics SDKs.

Data deletion

In the app: Settings → Data → Delete. In guest mode this permanently removes all diary data from the device: every entry, your custom catalog names, your saved home location, your pollen-station choice and the cached weather, pollen and air-quality data (app settings such as language and reminder time are kept; uninstalling the app removes everything). With an account, deletion removes your cloud data and your account and performs the same local wipe on that device; other devices you used with the account keep their offline copy until the app is uninstalled there. You can also request deletion without the app — see the account deletion page.

Data export

Settings → Data → Export produces a CSV of all your entries at any time.

Data retention

Cloud data is kept until you delete it or your account — there is no automatic expiry. Data on your device is kept until you delete it in the app or uninstall the app; the Android device backup of guest data follows your device's backup settings. Anonymous crash reports are kept by Firebase Crashlytics for 90 days.

Contact

Questions or requests: hi@trackallerg.net