Privacy Policy

Effective November 7, 2026. This policy also serves as our Consumer Health Data Privacy Policy.

Smidgen is run by BelAllergy (Belysa and Eduardo Inoa) (“we”). We are parents of a child with food allergies and eczema. We built Smidgen for families like ours, and we treat your family’s information the way we want ours treated.

The short version

• We collect only what you put in Smidgen and what we need to run it.
• Your family’s health information is visible only to members of your household.
• We do not sell your data. We do not share it with advertisers. We do not use ad trackers or analytics pixels inside the app.
• We do not use your data to train AI models.
• You can download all your data or delete it at any time from Settings.

What we collect

• Account: your email address, the name you choose to show, language, your family’s time zone, a scrambled copy of your unlock code if you set one (we can’t read the code), the public key for fingerprint or Face ID unlock (your fingerprint and face never leave your phone), and the date you accepted our terms and gave consent.
• People you add: names, photos, birthdays and notes you choose to add for children, other adults and pets in your household, and your own photo. Only add another adult’s details with their permission.
• Consumer health data you enter: the first name and weight band of each person or pet you add, treatment or care plans, dose and medicine logs, symptoms, reactions, skin journal entries and photos, visit dates, and emergency plans. This is health information, and we only collect it with your consent.
• Family content: moments, photos, artwork and captions you upload, plus your household calendar, reminders, notification history, the address our notification service uses to reach your phone, pantry and shopping lists and the care contacts you add (names, clinics, phone numbers, addresses and notes).
• Technical data: sign-in session cookies and basic server logs (time, page requested, error messages) kept for security and troubleshooting.

We remove location and camera data from photos in your browser before they are uploaded.

Why we use it

• To provide the features you use: checklists, calendar, reminders, journal, moments, sharing.
• To keep the service secure and fix problems.
• To contact you about your account, security, or changes to these terms.

We use consumer health data only to provide the service you asked for. We will ask for your separate consent before using it for anything else.

Who can see it

• Your household: parents and caregivers you invite, who also see photos and profiles and get the household’s reminders on any phone where they turned notifications on. Everyone in a household shares the same family information and sees the name you choose and who logged each dose. Caregivers can view the plan and log doses but cannot change the plan.
• People you share a moment with: only that one moment (photo, title, caption, date and family name), and only while the link is active. Shared links never include plans, doses, symptoms, or journal entries. Skin journal photos can’t be shared.
• Our admins: can see household names, plan type, member counts, dates of activity, and how much of Pip each household used and what it cost. They also read any message you send us from Help & feedback, with your sign-in email so we can reply. They cannot see plans, doses, symptoms, children’s names, or photos.
• Service providers who host and run Smidgen for us under contract and only on our instructions: Supabase (database, sign-in, file storage), Vercel (web hosting), and the notification services run by Apple, Google or your browser’s maker, which carry a reminder’s text to your phone if you turn notifications on. Reminder text is the label you wrote, so keep it general if others can see your screen. If a parent turns on Pip, our optional AI helper, Anthropic (the maker of the Claude AI) processes what Pip needs to answer: names, birthdays and notes, plan details, logs, calendar, pantry, contacts, questions you ask, and PDFs you upload. Emergency plans are never sent to it, and emergency pages you mark in a PDF are removed first. Anthropic doesn’t use this to train its AI and keeps it only for a limited time under its terms. For general questions Pip may search a short list of approved health organizations, without family details. Recipe requests send ages and foods to avoid, without names. Searches for places send only the area you type, and the web search service may see it. A parent can turn Pip off at any time, and you can clear your conversation. Payment processing, when we start charging, will be handled by Stripe; we never see your full card number.
• Legal reasons: if required by law, or to protect someone’s safety. We will tell you unless the law forbids it.

Children

Accounts are only for adults 18 and older. Children do not use Smidgen directly and do not have accounts. A parent or legal guardian enters information about their own child and controls it.

How long we keep it

We keep your data while your account is active. When you delete your Smidgen account, we delete your family’s Smidgen data right away if you were the only member of the household, and remove you from the household otherwise. Backups are overwritten within 30 days. Your sign-in email may be shared with other services we run on the same platform; email us to remove it entirely.

Your rights and choices

• Access and download: Settings → Download my data.
• Correct: edit anything in the app.
• Delete: Settings → Delete my account, or delete individual entries.
• Withdraw consent: delete your account. We stop processing your health data.
• Stop sharing: turn off any shared link at any time.
• Notifications: turn them off for any phone under Reminders & notifications, or in your phone’s settings.
• Saved on your phone: the emergency plan and care contacts are saved on your device so they work offline. They’re visible there without your app lock, on purpose, and are removed when you sign out.
• Questions or appeals: email privacy@belallergy.com. We respond within 30 days. If we deny a request, you can appeal by replying to our answer, and if you are a resident of a state with such a right you may contact your state Attorney General.

We provide these rights to everyone, including residents of Washington, Nevada, Connecticut, California and other states with consumer health data laws.

Security

Data is encrypted in transit and at rest. Every family’s records are walled off at the database level so one household cannot read another’s. If a breach ever affects your information, we will notify you and, where required, the Federal Trade Commission, as required by the FTC Health Breach Notification Rule.

Changes

If we make a material change, we’ll tell you in the app or by email before it takes effect, and we’ll ask again for consent where the law requires it.

Contact

BelAllergy (Belysa and Eduardo Inoa) · privacy@belallergy.com