MyAllergyCheck

Privacy policy

Last updated: October 3, 2026

In short: no ads from your information, and we never sell it. If you create an account, we keep your email address, your avoid list and your history so you can use them on any device, and you can delete them at any time. Label photos never leave your device.

MyAllergyCheck is run by 1001569350 Ontario Inc., Ontario, Canada ("we", "us"). This policy covers myallergycheck.com and the MyAllergyCheck apps.

Without an account

You can make your first check without an account. The avoid list you enter and that check are kept only in your browser's or app's storage on your device, and we do not receive them. Clearing your browser's site data, or uninstalling the app, removes them.

With an account: what we keep

  • Your email address, to sign you in and to write to you about your account, and whether you asked for the newsletter.
  • When you agreed to your information being saved, which you do with a tick box when you create your account.
  • Your avoid list, including the reason you gave for each item (confirmed allergy, from my clinician, sensitivity or personal preference). This can be health information. We treat it as sensitive: it is used only to show it back to you and to check products for you.
  • Your history: the last 50 ingredient lists you checked, with their product names and results.
  • Sign-in records: which devices are signed in (as a scrambled token, kept for up to 90 days), and the scrambled form of your latest sign-in code. We never keep a password, because there are none.

A copy of your avoid list and history is also kept on each device you sign in on, so the app opens quickly and works without a connection. Signing out removes that copy from the device.

Why we keep it, and your consent

We keep this information for one purpose: to give you the service you asked for, which is saving your list and results and showing them on your devices. You give that consent with a tick box when you create an account, and you can withdraw it by deleting your account. We do not use it for advertising, we do not sell or rent it, and we do not share it except with the service providers below, who only process it for us.

What is never sent to us

  • Label photos. The photo is read on your device and is not uploaded or kept. Only the text you then choose to check is saved to your history.
  • Your face or fingerprint. The app's lock is handled by your phone. We never receive or store biometric information; the phone only tells the app whether the check passed.

Other information sent over the internet

  • Barcode numbers. When you look up a barcode, the number is sent to our server, which asks Open Beauty Facts (an open product database) for that product. We keep the product answer for up to a day so repeat lookups are faster.
  • Emails to you. Sign-in codes are sent to your email address through SendGrid (a Twilio service). If you asked for the newsletter, it is sent the same way, only for as long as you want it: turn it off on the Account page or with the unsubscribe link in any issue.
  • Retailer links. When you press a link to a retailer such as Amazon, you leave MyAllergyCheck and that retailer's own privacy policy applies. Paid links carry our partner code so the retailer knows the visit came from us; we do not send the retailer your name, email address, avoid list or history. We do not learn what you buy.
  • The contact form. If you write to us through the Contact page, your name, email address and message are sent to our email inbox so we can answer you, delivered by our email providers (SendGrid, a Twilio service, and Cloudflare). They are used for nothing else and kept only as long as needed to deal with your message.
  • The check that you are a person. The sign-in and contact forms use Cloudflare Turnstile to keep out automated abuse. Turnstile looks at your IP address and browser signals to tell people from programs, and uses no advertising cookies.
  • Ordinary web requests. Like every website, loading our pages sends your IP address and browser type to our hosting provider, Cloudflare, which processes them to deliver the service and protect it from abuse.
  • Visit statistics. We use Cloudflare Web Analytics to see how many people visit and how fast the pages load. It records the page address (such as /check), the page that led you here, your browser and device type, your country, and loading times. It uses no cookies, does not store your IP address, does not follow you to other sites, and does not build a profile of you. It never receives your avoid list, your history, the ingredient lists you check or your photos.
  • The label reader's files. The first time you photograph a label, your browser downloads the text-reading software from jsDelivr, a public file delivery network. jsDelivr receives your IP address for that download, and nothing about your photo or your lists.
  • The barcode scanner in the Android app is provided by Google Play services on your phone. The camera image is processed on your phone.

Cookies

When you sign in we set one cookie that keeps you signed in for up to 90 days. It is needed for the service to work. We use no advertising or tracking cookies.

Where it is kept, and how it is protected

Account information is stored in a database run by our hosting provider, Cloudflare, in data centres in eastern North America, which can include the United States. Information kept or processed outside Canada is subject to the laws of that place. It is encrypted when it travels and when it is stored. Access is limited to the people who need it to run the service. No system is perfectly secure; if a breach creates a real risk of significant harm, we will tell you and the regulators as the law requires.

How long we keep it

We keep your account information until you delete your account. Deleting your account removes your email address, avoid list, history and sign-in records from our database at once. Backups made by our hosting provider can hold a copy for up to 30 days before they expire.

Your choices and rights

  • See and change it: your avoid list and history are shown in the app, and you can edit or clear them there.
  • Delete it: use "Delete my account" on the Account page, or ask us by email.
  • Withdraw consent: deleting your account withdraws your consent. You can keep using the free check without an account.
  • Ask or complain: under Canadian privacy law (PIPEDA, and Quebec's Law 25 where it applies) you can ask what we hold about you, ask for a copy or a correction, and complain. Write to our privacy contact (). You can also contact the Office of the Privacy Commissioner of Canada or your provincial regulator.

What we do not do

  • No advertising based on your avoid list, history or account, and no advertising identifiers.
  • No selling, renting or trading of personal information.
  • No cookies for tracking, and no tracking of you across other sites or apps.
  • No sharing of your avoid list or history with brands, retailers, insurers or employers.

App permissions

The Android app asks for the camera only to photograph ingredient labels and scan barcodes when you choose to, and uses your phone's face, fingerprint or PIN check only if you turn on the app lock.

Children

The service is not directed at children under 13, and we do not knowingly collect personal information from them. Accounts are for people old enough to agree to the Terms of use.

Changes

If we change what we collect or how we use it, we will update this policy first, change the date at the top, and ask you to look at the notice again when the change matters.

Contact

1001569350 Ontario Inc., Ontario, Canada.