Skip to content
AllergyVault

Privacy

Privacy Policy

Last updated 23 October 2026.

This policy explains how AllergyVault, a sole trader based in Melbourne, Australia (“AllergyVault”, “I”, “me”) handles information when you use the AllergyVault iOS app and this website. An Australian Business Number (ABN) is available on request.

Allergy records are health information. This policy is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in mind. It is not legal advice.

1. Who is responsible

AllergyVault is operated by a sole trader based in Melbourne, Victoria, Australia. There is no separate company listed for this product.

For privacy requests (access, correction, or a complaint), contact AllergyVault by Instagram direct message (@allergyvault). Do not send medical records through social media. If you need a private channel, say so in the message and a suitable way to continue will be arranged.

2. The iOS app: on-device first

The core AllergyVault app is built so allergy records, profile details, emergency contacts, supporting documents, and related settings are stored on your device. You do not create an AllergyVault account to use the core vault.

In ordinary use of the core vault:

  • AllergyVault does not run a login service or host your allergy records on AllergyVault servers.
  • Face ID or device passcode lock uses Apple’s local authentication. Allergy records stay in the vault file; they are not stored in Keychain as a substitute database.
  • Backup and restore are started by you. A backup is a file you keep or move.
  • Restaurant, pharmacy, and Medical ID cards are generated on the device so you can show or share them.

3. Optional connections you choose

The current app keeps records on the device. Two optional Plus features send or receive information only if you use them:

  • iCloud sync (AllergyVault Plus) uses your Apple ID and iCloud. Apple is the service provider. AllergyVault does not operate that cloud.
  • Caregiver invites (AllergyVault Plus) share the access you grant with the invited person.

Label scan, Apple Watch Medical ID, share links, and care templates are part of the current app.

Apple, Instagram (Meta), and X are separate organisations. Their products are covered by their own privacy policies.

4. This website

This marketing site links to the App Store, to Instagram, and to X. Support is an Instagram direct message to @allergyvault.

The site is hosted on Vercel. Like most websites, hosting and delivery systems may process technical data such as IP address, browser type, date and time, and the pages requested. That processing may occur outside Australia. AllergyVault does not run a separate marketing analytics pixel on this site.

If you follow Instagram or X, those services collect information under their policies.

5. Why information is handled

Where AllergyVault handles personal information, it is to:

  • provide the app and website you asked for
  • let you show, share, back up, or restore your own records
  • respond to privacy or support requests you send
  • operate and secure this website
  • meet Australian law where it applies

AllergyVault does not sell personal information. The app is not a diagnostic service and does not replace clinicians or emergency services.

6. Children and family profiles

AllergyVault is aimed at adults who manage their own allergies, and at parents or carers who keep a profile for a child. The vault holds up to two profiles. AllergyVault Plus adds further family profiles and caregiver invites. Do not enter another person’s health information unless you are allowed to manage it.

7. Retention

On-device records stay until you change or delete them, uninstall the app, or restore a backup that replaces them. Website logs are kept only as the host keeps them for security and operations. Messages you send on Instagram or X are kept as those platforms keep them, and any copy AllergyVault retains for a request is kept only as long as needed to handle it.

8. Access, correction, and complaints

You can view and edit vault data in the app. For access or correction of personal information AllergyVault holds outside the device (for example, a message you sent), use the Instagram contact above.

If you are not satisfied with how a privacy matter is handled, you may complain to the Office of the Australian Information Commissioner (OAIC).

9. Overseas disclosure

Website hosting (Vercel) and social platforms you choose to use may store or process data outside Australia, including in the United States. If you turn on iCloud sync, that service follows Apple’s locations and terms.

10. Changes

This policy may be updated. The date at the top will change when it does. Continue using the site or app only if you accept the current policy.