AllergyLens is built to work without an account and without collecting your personal data. Your allergy profiles stay on your device. This page explains the details, including the few things that do leave your device to make it work.
What we store, and where
Your profiles, history, saved items, reaction log and settings are stored in your browser on your device (in local storage). They are not sent to us and we cannot see them. There is no account, no login, and no user database.
What leaves your device
- Product lookups. When you scan a barcode or search, the barcode or search term is sent to Open Food Facts and, for some US products, USDA FoodData Central, through our proxy, to fetch the product data. These carry no personal identifiers.
- Optional AI check. If AI features are enabled, the ingredient or menu text you scan is sent to our AI provider (DeepSeek) to clean, translate and analyse it, along with the list of allergens the active profile watches (so it can flag them). Names, emergency contacts and other profile details are never sent. Note that the allergen list is health information, and menu text can reveal where you are eating.
- Label photos stay on your device. Reading a photographed label happens on your phone; the image is not uploaded.
- Error reports. If it crashes we send an anonymous error report (via Sentry) to help fix it. URLs are stripped of their fragments so shared links, which can contain a child's name, are not included, and there is no session recording.
- Anonymous usage counts. We use Vercel Web Analytics to count page views and understand which features are used. It is privacy-friendly and cookieless, collects no personal data, and does not track you across other sites.
What we do not do
- No advertising and no ad networks.
- No tracking cookies, no cross-site tracking, and no selling of data.
- No account, so nothing to leak in a breach of ours.
Sharing features
Some features let you share by a link or QR code, a safe-snack list, a full profile (allergens, settings and emergency card), or a read-only emergency passport. That data travels in the link itself, not through a server, so anyone who has the link can read it, and it stays in the recipient's browser history. Share these only with people you trust. A passport opened from a link cannot be edited, and it is marked as unverified because the details were supplied by whoever sent it.
Third parties
To run, AllergyLens relies on Open Food Facts and USDA FoodData Central (product data), DeepSeek (optional AI), Sentry (error reporting), and Cloudflare and Vercel (hosting and the proxy). If you choose to leave a tip, that goes through Ko-fi. Each has its own privacy policy.
Children
A profile may describe a child's allergies and emergency contacts. That information is entered by a caregiver and stored only on the caregiver's device. We do not knowingly collect data from children, because we do not collect personal data at all.
Your control
You can delete any profile, history entry or reaction from within AllergyLens. Clearing this site's data in your browser removes everything AllergyLens has stored on your device.
Contact
Questions about privacy? Email privacy@campix.io.
AllergyLens is a decision-support tool, not medical advice or a guarantee. Always read the physical label.