Privacy

Short version: your child's details never reach us. They travel inside the link and sit on your device — which means anyone who has the link has the details. Share it the way you'd share a photo of your child's medical notes.

Last updated: 5 August 2026. AllergyEZ is run by a family, not a company. Write to us at info@allergyez.com.

What we hold about your child

Nothing.

There's no database, no account and no sign-up. No profile is ever sent to us, so there's nothing on our side to look up, leak, sell or hand over.

How that works

When you build a card, everything you typed — name, allergens, severity, whether an adrenaline (epinephrine) auto-injector is carried, your emergency contact, your notes — is packed into the card's own web address, after the #:

allergyez.com/c#eyJ2IjoxLCJhIjpb…

Browsers are built not to send that part to a website's server. It stays on your device and is unpacked there to draw the card. The QR code is drawn on your device too, and printing or saving a PDF never leaves it.

What's saved on your device

In your browser's own storage, so you don't have to retype everything: the card you last built, the destination you last chose, and a few housekeeping flags — that you've read the first-run notice, or snoozed a review reminder. None of it is sent to us. Clearing your browser's site data for allergyez.com removes all of it.

If you download the yearly review reminder, that's a small calendar file made on your device. It contains your child's first name in the event title and a link to the card builder — never the card itself — and it lives wherever your calendar does, including any account your calendar syncs to.

The app also keeps a copy of itself on your device so a card opens in a restaurant with no signal. That's the app, not your data.

The link is the record

This is the part we most want you to read.

A shared link carries your child's details with it. That's what makes it work offline, with no account. It also carries the month you last confirmed the card — that rides in the same place, after the #, like everything else. It all goes wherever the link goes:

• Whoever you send it to can read it, and can forward it to anyone.
• It sits in your message history and theirs, including cloud backups of those chats.
• It sits in the browser history of every device that opens it.
• A QR code is just the link in visual form. Anyone who photographs it has everything.
• Anyone glancing at your screen, or at a printed card left on a table, can read it.

Some tools that handle links may copy the whole address, # and all: link shorteners, apps that fetch a preview of a link you paste, browsers built into other apps, browsers that sync history to a signed-in account, and work or school devices managed by someone else. The protection here is how browsers are built, not something we can police once the link is out of your hands.

So share deliberately — the hotel, the school, the host family, the grandparent. Don't post a card link or a QR image publicly.

We can't withdraw a link once it's sent; we never had it, so there's nothing on our side to delete. If a link has gone somewhere you regret, build a fresh card, stop using the old one, and ask people to delete it.

Privacy is not safety — please read this too

Keeping the details private doesn't make the card correct.

Every translation in this app is unverified and has not been checked by a qualified medical translator. Before you rely on a card, have a fluent native speaker read it back to you, and where it matters — a long stay, a school, a hospital — check it with local health or food-safety officials too. Translations can be wrong, incomplete or out of date.

AllergyEZ is not medical advice, is not a medical device, and creates no doctor–patient relationship. It's no substitute for your doctor, for carrying prescribed medication such as an adrenaline (epinephrine) auto-injector, or for speaking directly to the kitchen. Please still do all three. The app is provided as is, with no warranty, and you use it at your own risk — the detail is in our terms of use and safety notice.

If any translation looks wrong, tell us: info@allergyez.com. It protects every family after you.

Server logs, and counting visits

Our site is hosted by Vercel. Like every website, that produces ordinary server logs: your IP address, the time, which page was requested, and your browser type. We use them only to keep the site up and to see roughly how much it's used — that's our legitimate interest in running a working service. They never include the part of the link after the #, so they never include your child's details.

Vercel keeps those logs under its own retention policy, which we don't control and haven't set, and its servers may be outside your country. We don't download them or keep copies.

We also count visits, and that is the whole of it. Vercel's analytics tells us how many people opened a page, which page it was, roughly which country, and which site sent them. It sets no cookie of ours, it doesn't follow you between websites, and it builds no profile of you. We use it to know whether this is reaching the families it was built for. We don't sell data and never will.

It never receives the part of the link after the #. That part is your child's details, and we cut it off on your device before anything is sent — not as a setting we could quietly change, but in the code that does the sending.

Of the part after the ?, it receives a short list and nothing else: the country a card is made for, its language, and which version of a learn page you were reading. Everything else in it is thrown away on your device, so nothing you type that lands in a link can reach the people who count the visit.

The copy you install to your phone counts nothing at all. No analytics is included in it. An installed card opens offline, in an airport or a restaurant with no signal, and reports nowhere.

One other company's code runs in your browser, on exactly one page — the model above answers on our server, not on your phone. The support page embeds a panel from Ko-fi so you can support us without leaving the site. That panel is Ko-fi's, not ours: it loads from their servers and may set their own cookies, under their privacy policy. It appears nowhere else — not on the card, not on the emergency screen, not on the home page — and it never sees anything after the #, because nothing on any page does. If you would rather not load it, the same link opens Ko-fi directly.

If anything else ever changes — if we started recording something we don't record today, say — we'll say so here before it happens.

We'd resist any demand for those logs as far as we reasonably could, but we won't pretend we're beyond the reach of one. What we can promise is that a demand can only ever reach a log line. There's no store of children's medical information here to demand.

If you ask Ezzie a question

On one learn page you can type a question and get an answer back. Say plainly what that costs: the question you type is sent off our server to a language model to be answered. It goes through Vercel's AI Gateway to whichever company runs the model — today Meta's Llama, on the gateway's ordinary free tier. We have not bought a route where that company agrees to throw your question away, so what happens to it at the far end is what Vercel's terms and the model company's terms say, not something we have signed for.

What travels is your question and our own learn-page paragraphs, which are already public. Your child's card never does: the card lives after the #, the browser never sends that part to any server, and this page is not the card.

We don't keep the question or the answer. Neither is written to any store of ours — there is nothing to write to. To stop one person exhausting the day's budget we count questions against a hashed form of your network address, and the address itself is never held.

The honest advice: it's a page about reading, not a place to describe your own child. Ask it about sesame, not about your daughter.

If you review a translation for us

If you volunteer at /vet and choose to leave an email address, that address is sent to us with your review — it is the only thing in AllergyEZ that deliberately transmits something you typed, it is used only to ask what you meant by a correction, and it is never published, sold or added to a mailing list.

We also receive the verdicts, corrections and notes you wrote, and — only if you filled them in — a name for credit and a country. Your corrections may be published; your email never is. While you work, all of it — that address included — is saved in your browser's own storage so a refresh doesn't lose it, and sending doesn't clear it: we can't tell whether an email really left your outbox, and deleting twenty minutes of your work on a guess would be worse. Two buttons clear it, and both are yours to press: I've sent it — clear my draft from this device on the send screen, and Delete this draft from this device and stop at the foot of the review itself. Either one takes the address with it, which matters if the machine isn't yours. No card, no child's details and nothing after a # is ever part of a review: the cards in that tool are samples with no real person in them.

If something goes wrong

If we ever found the site had been tampered with in a way that could have exposed what's on your device, we'd say so plainly on the home page as quickly as we could, and tell anyone the law requires us to tell.

If this project ever ends, there's no database to be sold or left behind — that was the point of building it this way. But printed cards and QR codes outlive us, and one day allergyez.com may not be ours. Treat an old printed card as a paper document, not a live link.

Your rights, and the formal bits

This app is for parents and carers. We don't ask children to use it, and we knowingly collect nothing from anyone, of any age.

Depending on where you live, you have the right to ask for a copy of personal data we hold about you, to have it corrected or deleted, to object to how it's used, and to complain to your data protection authority. In practice the only personal data we ever have is a server log line, and we usually can't tell which one is yours from an IP address alone — so we may not be able to act on a request even in good faith. Ask anyway: info@allergyez.com.

If we change this

We'll update this page and the date at the top. If a change is significant, we'll say so plainly on the home page rather than quietly editing this one.

Talking to us

Questions about privacy, or a translation that looks wrong — the same address reaches us:

info@allergyez.com

We're a family, not a company. We built this after a frightening trip with our own food-allergic child, and we read everything that comes in.