Effective Date: May 4, 2025

Thank you for using Tolerance Tracker, a mobile application designed to help users manage and track daily intake of items related to structured allergy treatment plans. This Privacy Policy explains how we collect, use, store, protect, and share your information when you use our app. By using Tolerance Tracker, you agree to the terms outlined in this Privacy Policy.

1. About Tolerance Tracker

Tolerance Tracker is a privately developed mobile application created by an independent developer, a parent of a participant in the Tolerance Induction Program (TIP) offered by the Food Allergy Institute. This app is not affiliated with, endorsed by, or connected in any official capacity with the Food Allergy Institute or the TIP program. It is designed to assist individuals and families in tracking daily tasks, such as logging food and medicine intake, within a cycle-based plan.

The app uses SwiftUI and Google Firebase for real-time data syncing and storage, offering features like cycle management, item tracking, timers, reminders, and role-based permissions for multiple users.

2. Information We Collect

We collect only the information necessary to provide the functionality of Tolerance Tracker. The types of data collected include:

2.1 Information You Provide

• User-Provided Data: You may enter information such as:

  • Cycle details (e.g., cycle number, start date, food challenge date, patient nickname or initials).

  • Item details (e.g., medicine, maintenance food, treatment food, recommended food, doses, and units).

  • Logs of daily item intake, including timestamps and user identifiers (e.g., who logged the entry).

  • Room codes for sharing access with other users.

  • User preferences (e.g., reminder settings, treatment timer notifications, unit preferences).

• Contact Information: If you contact us directly (e.g., via email at zack@tolerancetracker.com), we may collect your email address and any information you include in your message.

Important: We strongly recommend not entering sensitive or personally identifiable information, such as full names, medical diagnoses, doctor names or contact information, health insurance data, Social Security numbers, or any information you would not be comfortable sharing publicly. Instead, use nicknames, initials, or general terms (e.g., “MyChild” instead of a full name).

2.2 Automatically Collected Information

• Device Information: We may collect basic device information, such as device type (e.g., iPhone, iPad), operating system version (e.g., iOS 18), unique device identifiers (e.g., Firebase Installation ID).

• Usage Data: We collect anonymized data about how you interact with the app, such as app feature usage (e.g., which screens you visit, buttons clicked), timestamps of actions (e.g., when you log an item or start a timer).

• Crash and Performance Data: We collect anonymized diagnostic data to improve app performance, such as crash reports and error logs.

2.3 No Health Data Collection

Tolerance Tracker does not collect or process health data as defined by Apple’s HealthKit or other health-related frameworks. All data entered is treated as general user input and is not categorized as protected health information (PHI) under laws like HIPAA.

3. How We Use Your Information

We use the collected information solely to provide and improve the functionality of Tolerance Tracker, including:

• App Functionality:

  • Storing and syncing cycle plans, item logs, and user settings via Firebase for real-time multi-device access.

  • Displaying progress, timers, and reminders on the Home Screen or Week View.

  • Enabling role-based permissions (Full Access vs. Log-Only) and room code sharing.

  • Allowing users to view, edit, or delete logs in the History section.

• Notifications: Sending reminders and treatment timer notifications (e.g., “Time for the next treatment food”) based on user settings.

• Support: Responding to user inquiries or feedback sent to zack@tolerancetracker.com.

• Improvement: Analyzing anonymized usage and crash data to enhance app performance and user experience.

We do not use your data for advertising, marketing, or any purpose unrelated to the app’s core functionality.

4. How We Share Your Information

We do not sell, share, or disclose your personal information to third parties, except in the following limited circumstances:

• Google Firebase: User data is stored and synced using Google Firebase, a third-party service provider. Firebase processes data on our behalf to enable real-time syncing and storage. Firebase’s data handling complies with industry-standard security practices. For more details, see Google Firebase’s Privacy Policy.

• Legal Obligations: We may disclose data if required by law, such as in response to a court order, subpoena, or other legal process, or to protect the rights, property, or safety of the developer, users, or others.

• Room Code Sharing: When you share a room code with other users, they gain access to the cycle plan and logs associated with that code. You are responsible for sharing room codes only with trusted individuals.

5. Data Storage and Security

• Storage: All user data is stored in a private Firebase database, hosted on secure Google Cloud servers. Data is encrypted in transit (using HTTPS/TLS) and at rest (using Firebase’s encryption protocols).

• Security Measures: We implement reasonable technical and organizational measures to protect your data, including Firebase security rules to restrict unauthorized access, role-based permissions to limit data access (Full Access vs. Log-Only), and anonymized identifiers for device and usage data.

• Limitations: While we strive to protect your data, no system is completely secure. We cannot guarantee absolute security against unauthorized access, data breaches, or data loss. You assume the risk of providing data to the app.

6. Your Data Rights

Depending on your location, you may have certain rights regarding your personal data under applicable laws (e.g., GDPR, CCPA). These rights include:

• Access: Request a copy of the data you’ve entered into the app.

• Correction: Request correction of inaccurate data.

• Deletion: Request deletion of your data from our Firebase database.

• Restriction: Request that we limit the processing of your data.

• Portability: Request a transferable copy of your data in a machine-readable format.

To exercise these rights, contact us at zack@tolerancetracker.com. We will respond within the timeframes required by law (e.g., 30 days for GDPR, 45 days for CCPA). Note that deleting your data may prevent you from using certain app features, as data is necessary for functionality.

7. Children’s Privacy

Tolerance Tracker is not intended for use by children under 13 without parental consent, in compliance with the Children’s Online Privacy Protection Act (COPPA) and similar laws. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided data without parental consent, contact us at zack@tolerancetracker.com, and we will promptly delete the data.

Parents or guardians using the app to manage a child’s allergy treatment plan should:

• Use nicknames or initials instead of full names.

• Avoid entering sensitive health information.

• Supervise access by other users (e.g., babysitters) via room codes.

8. International Data Transfers

Tolerance Tracker uses Firebase servers, which may be located outside your country (e.g., in the United States). If you are located in the European Economic Area (EEA), United Kingdom, or other regions with strict data protection laws, your data may be transferred to countries with different privacy standards. We rely on Firebase’s compliance with frameworks like the EU-U.S. Data Privacy Framework to ensure lawful data transfers. For details, see Google’s Data Protection Terms.

9. Third-Party Services

Tolerance Tracker integrates with Google Firebase for data storage, syncing, and notifications. Firebase is our only third-party service provider. We do not integrate with advertising networks, analytics platforms (beyond Firebase’s anonymized crash reporting), or other third-party services that collect personal data.

Links shared via the app’s share sheet (e.g., room codes with an app link) may direct users to external platforms (e.g., the App Store). These platforms have their own privacy policies, and we are not responsible for their practices.

10. Retention of Data

We retain your data only for as long as necessary to provide the app’s functionality or comply with legal obligations:

• Active Use: Data is stored in Firebase while you actively use the app.

• Inactivity: If a cycle plan is inactive (no logs or updates) for 12 months, we may delete the associated data to minimize storage.

• Deletion Requests: If you request data deletion, we will remove your data from Firebase within 30 days, unless required to retain it by law.

11. Disclaimers and Limitations

No Medical Advice: Tolerance Tracker is an organizational tool, not a medical device or healthcare service. It does not provide medical advice, diagnose conditions, or replace professional care. Always consult a healthcare provider for treatment, dosage, or dietary decisions.

Liability: The developer is not liable for:

• Incorrect data entry by users.

• Missed dosages or notifications.

• Unauthorized access due to shared room codes.

• Data breaches or losses beyond our control.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or app functionality. We will notify you of significant changes by:

• Posting the updated policy on our website (www.zthreesolutions.com).

• Displaying a notice in the app.

Continued use of Tolerance Tracker after changes indicates your acceptance of the updated terms.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or Tolerance Tracker, contact the developer at:

• Email: zack@tolerancetracker.com

• Website: [www.zthreesolutions.com]

We aim to respond to inquiries within 7 business days.

14. Compliance with Apple Guidelines

This Privacy Policy complies with Apple App Store Review Guidelines, including:

• Clearly disclosing data collection, usage, and sharing practices.

• Explaining third-party services (Firebase) and their roles.

• Addressing children’s privacy (COPPA compliance).

• Providing contact information for user inquiries.

• Supporting user data rights (access, deletion, etc.).

If you have concerns about our compliance, please contact us at zack@tolerancetracker.com.

Last Updated: May 4, 2025