Privacy Policy

1. Introduction

This Privacy Policy explains how Alltaken, Inc. (“AllTaken”, “we”, “us”) collects, uses, discloses and otherwise processes personal information when you use the App, visit alltaken.app, join the beta waitlist or contact us. In this policy, “the App” means our mobile app for tracking supplements, medications and routines, including its widgets and test versions, under whatever name it is listed on the Apple App Store or, once offered, Google Play. Today the App is available for iPhone only. This policy forms part of our Terms of Use; capitalised terms that are not defined here have the meaning given there.

AllTaken is operated by Alltaken, Inc., a Delaware corporation, 2810 North Church Street, Wilmington, DE 19802, United States. How to contact us is set out in section 11.

You must be 18 or older to use AllTaken. When you set up the App it asks for your age range, and anyone who chooses “Under 18” cannot continue to create an account. AllTaken is not directed at children, and a child cannot have an account. An adult user may keep the list of a child they are responsible for, or of another person they help, in the user’s own account (“People you help” in section 3); that list is entered and controlled by the adult. Apart from that, if we learn that someone under 18 has given us personal information, we will take steps to delete that information and the account.

If you are covered by Washington’s My Health My Data Act, our separate Washington Health Data Privacy Policy also applies to the health information described below.

2. What’s new in this version

28 October 2026: caregiver links, which let you share your routine with one adult you trust on their own phone, and the alerts they can choose to receive about it (sections 3 to 10, 12 and 13); and a correction: our server now sends notifications, but only these caregiver alerts (section 3).

26 October 2026: the details of a representative in the European Union, the United Kingdom and Switzerland are removed until that appointment is in place (section 13).

21 October 2026: lab results and the symptom log you can choose to record, and the lists you can keep for up to two people you help, such as a parent, partner or child (sections 1, 3, 10, 12 and 13); how long the AI provider keeps requests (section 3); where emails you send us are stored (section 7); and a correction: medications are never sent to the AI service (section 3).

6 October 2026: AI features now use one AI processing provider instead of a main provider and a backup (sections 3, 5 and 7), and the company’s registered name is written as it is incorporated, Alltaken, Inc. The first published version of this policy was dated 3 October 2026. When we change it, the changes will be listed here.

3. Personal information we collect

Information you provide directly

• Account and profile information. Email address, password (handled by our authentication provider and never visible to us), display name, time zone, app language, whether onboarding was completed, the goals you choose, any sleep or meditation targets you set, and a record of whether and when you turned AI features on or off.
• Onboarding answers. When you set up the App it asks what you take and roughly how many items, your age range, your height (optional), your main goal, what you find hardest, how confident you are in your routine, how often you forget, and what you want from the App. These answers are kept on your iPhone only; they are not stored in your account on our servers and are not restored to a new device. Two things based on them do leave the iPhone: a goal you choose that matches one of the App’s goals is saved to your account, and, only if you turned usage analytics on, usage events record the category you picked for some answers (for example your age range or main goal), never free text and never your height.
• Supplements, medications and routines. The products you add (product identity, your own dose and unit, schedule, start and end dates, notes), the history of changes to each routine, one-day schedule exceptions, inventory counts and the reminder settings you choose.
• Daily logs. Whether each item was taken, skipped, forgotten or not planned, with the time and an optional reason.
• Lab results, if you choose to record them: the test, the value and its unit, the date on the report and, only if your report printed one, your lab’s own range. The App does not rate a value or supply a range of its own.
• Symptom log, if you choose to track symptoms: which symptoms you track and since when, and for each entry the symptom, its severity (mild, moderate or strong) and the time. The App shows patterns as observations computed on your iPhone, never as causes.
• Caregiver links. If you link with another adult so that one of you can help with the other’s routine, the records described under “Caregiver links” below.
• People you help. You can keep the list of up to two other people, such as a parent, a partner or a child, on your iPhone and in your own account; they do not get an account. Before you add someone you must confirm that you have their permission to keep their health information in AllTaken. For each person we keep the name you type, their relationship to you, when you confirmed that permission, and the same kinds of records as above that you enter for them: supplements, medications, routines, logs, inventory, lab results and symptom log. Their reminders appear on your iPhone with their name.
• Wellness entries. Your answers to an occasional one-tap question about how you have been feeling, such as your sleep, energy, digestion or focus, and any daily mood, energy and stress check-ins, with notes, recorded in earlier versions of the App. Together with your routine, this information can indicate a health condition and may be treated as sensitive or health information under some laws.
• Product labels and shelves submitted for scanning. Label photos, the text read from them and barcodes, and, if you scan a whole shelf, a photo of the shelf, handled as described below.
• Questions you submit to AI features. Your questions and the context from your own records used to answer them, handled as described below.
• Shared catalogue submissions. Products you add are private to your account. If you choose to submit a product to the shared catalogue, only the product identification details and label photos you submit are reviewed, never your routine, doses or wellness entries.
• Communications with us. Your email address and whatever you include when you contact support or make a request about your information. If you report an AI answer, the App opens an email to support containing your reason, the answer’s reference and its text; you see it and send it from your own mail app.
• Invitations. Where invitations are offered, if you join through an invitation code or link, we record which code you used and the account that shared it, with the dates you joined and first subscribed, so the invitation can be credited. If you turned usage analytics on, the campaign labels carried by the link that brought you to the App (such as its source and campaign name) are saved to your account once. We do not use advertising identifiers or device fingerprinting.
• Beta waitlist. If you join the waitlist on this website: your email address as you typed it, the time you submitted it, the version of the consent notice you were shown, a record that the signup came from this website, and a status (pending, invited or removed) with the time it last changed, which we update by hand once we have contacted you about testing.
• Payment information. Subscriptions are sold and billed by Apple through the App Store under Apple’s terms, including refunds, and, once the App is offered there, by Google through Google Play under Google’s terms. We do not receive your card details; we keep the store transaction identifiers and subscription status needed to know that your account has an active plan.

Information collected automatically

• Usage analytics, only if you turn it on. Usage analytics is off unless you tick it on the consent screen when you set up the App or turn it on later in Profile › Data & Privacy, and you can turn it off at any time. When it is on, product-usage events are recorded to your account, for example that onboarding started, a scan started or failed, a routine was created, a paywall was viewed or a purchase completed. Each event carries an app-session identifier, the app version and a fixed set of categorical properties such as counts, durations, entry points, outcome codes, plan, the categories of your onboarding answers (such as age range and main goal) and app language. Events never contain product or medication names, doses, notes, questions, scanned text, photos or email addresses.
• Technical and security information. Our hosting providers process the technical information needed to deliver and protect the service, such as IP address, request logs and device or browser characteristics. Our own server functions log request status, timing and error codes, not the content of requests. To limit automated abuse of the waitlist form, the signup endpoint keeps a short-lived, hashed count of requests per network address; the address itself is not stored.
• Device status, for caregiver links only. While you share your routine through a caregiver link, your iPhone reports when it last synced, its app version, your time zone, whether notifications are on and whether your reminders cover your items. Your caregiver sees when it last synced, your time zone and whether notifications are on.
• A device token, for caregiver alerts only. If you help someone through a caregiver link and turn alerts on, your iPhone gives us a device token so that alerts can reach it (“Caregiver links” below).
• Crash reports. The app contains no crash-reporting or advertising software. If you have chosen to share analytics and crash data with developers in your iPhone settings, Apple provides us with crash reports under Apple’s terms.
• Cookies and tracking. alltaken.app sets no cookies and uses no analytics, advertising or tracking technologies. Apart from the waitlist form, the website has no login and does not connect to the app’s database. Reminders are scheduled on your iPhone. The only notifications our server sends are caregiver alerts, and only to a caregiver who turns them on (“Caregiver links” below).

Information from third parties

• Sign-in providers. If you use Sign in with Apple or Sign in with Google where they are offered, we receive the identifier and email address that service shares.
• Apple. The App Store transaction identifiers and subscription status described above, and crash reports you have chosen to share.
• Apple Health. Only the categories you authorise, as described in section 4. Apple Health information is used only to provide the features you request; it is never used for advertising or marketing and never shared for those purposes.

We do not buy information about you, and we do not receive it from advertising partners, data brokers or other users.

De-identified or aggregated information

We do not currently create de-identified or aggregated datasets from your information for purposes other than serving your own account. If that changes, this policy will say so and describe the safeguards used.

Apple Health, scanning, AI features and sync

Apple Health is optional and read-only; AllTaken never writes to Health. If you allow it, the app reads daily totals or averages for steps, active energy, resting heart rate, heart rate variability, sleep and workouts. Those daily values are stored on your iPhone and, while you are signed in, in your account on our servers so they can be shown next to your routine. Raw Health samples never leave your iPhone. You can change or revoke access at any time under Settings › Health › Data Access & Devices › AllTaken; revoking stops new imports, and daily values already imported remain in your account until you delete them. If you turn AI features on, summaries of these values can be sent to a third-party AI service as described next.

AI features use a third-party AI service. They are off unless you tick them on the consent screen when you set up the App or turn them on later in Profile › Data & Privacy, and you can turn them off at any time; our server also checks that they are on before it sends anything. With AI features off, scanning still reads label text and barcodes on your iPhone, and nothing is sent to an AI service. With AI features on, the App asks you to confirm before it sends something in each session, and then sends the following to our server, which passes it to a third-party AI service only to produce the answer you asked for:

• Label scans: compressed photos of the front label and the facts panel, the text recognised on your iPhone and any barcode. The details found are shown to you for review, only the details you confirm are saved, and our server does not keep the photos.
• Shelf scans: the photo of your shelf or cabinet, to list the products it shows. Nothing is saved until you confirm each one, and our server does not keep the photo.
• Questions you ask: your question; the recent questions and answers of the same chat (at most the last few exchanges), so the answer can refer to them; and summaries of your own logged data that our server adds from your account: your active supplements with strengths and schedule, ingredient totals and overlaps, adherence and weekly summaries, goal coverage, inventory, safety findings, the intake analysis for a date, and summaries of your connected Apple Health data, namely the average, lowest and highest daily values of sleep, steps, resting heart rate and heart rate variability, and the averages of active energy and workout minutes, over recent days, with averages of any check-ins or meditation sessions you recorded. Raw Health samples are never sent.
• Explanations of a pattern: only the summary being explained: the item and goal, how many days it was and was not taken, the average of the Apple Health value involved (such as sleep or resting heart rate) on each kind of day or your answers to the occasional wellness question, any tags you recorded in that period, and the confidence level.

Before and after the AI service answers a question, the question and the answer are also checked by a safety service that we run on a cloud hosting provider; it records its decision codes, not the text. We do not store your chats as conversations on our servers; your chat history stays on your iPhone. So that a question is not answered and charged twice if your connection drops, our server keeps a copy of the final answer for ten minutes; after that the copy is no longer used and is deleted in the next daily clean-up. Apart from that, it keeps only a fingerprint of the answer, not its text, for abuse monitoring. Requests are made by our server: the AI service does not receive your name, email address or account identity, receives photos only for the scan being processed, and receives your information only so that it can produce the answer. We use one AI processing provider and describe it by category rather than by name because the provider can change; if we add or change a provider, this policy will be updated first. The provider’s business terms state that it does not use our requests to train its models, and that it keeps requests and answers for up to 30 days and then deletes them; content its automated safety filter flags may be kept for up to 2 years. Never sent to the AI service: your medications, your lab results, your symptom log, or anything you record for someone you help. It handles requests under its business terms with us, and we send it only what is listed above. We do not use your information to train AI models.

Account storage and sync. The app keeps a full copy of your data on your iPhone in its private storage so it works offline. While you are signed in, everything you record is also synced to your private account on our servers, except your onboarding answers, which stay on your iPhone; each record is protected so that only your account can read it. Sync is part of using a signed-in account; it is not a separate setting. Insights and patterns are computed on your iPhone from your own records. The one exception to “only your account” is a caregiver link you accept, described next.

Caregiver links

You can let one adult you trust, for example a grown-up son or daughter, help with your AllTaken routine. They use their own account on their own iPhone. Nothing is shared until you read, on your own phone, exactly what they will be able to mark and see, and tap “Allow”. Your phone then shows a 4-digit check number, which you tell them and they type on their phone. If the number is wrong five times, or it is not confirmed within 72 hours, the invitation ends and nothing is shared.

• What they can mark. Your doses, past and to come, as taken or skipped. Any note or reason you add to a dose is shared too. They cannot add, change or remove your supplements, medications, schedules, reminders or supply, and they can change or remove only the marks they made themselves. Every dose they mark says so in your own history, for example “Taken · marked by” and their name.
• What they can see, but not change. Your supplements and medications (names, doses, schedules and their history so far, notes and the price you entered); the days you plan to skip a dose or add one; your reminder times and on/off settings; your supply and refill estimates; a pharmacist sheet of your list; and when your phone last synced, your time zone and whether notifications are on.
• What they never see. Your Apple Health data, your wellness answers and check-ins, your patterns and insights, your AI chats and scans, your Shelf Verdict and Label Checks, your lab results and symptom log, and your email address. Nothing about the people you help on your own phone (“People you help” above) is ever shared through a link.
• Alerts on their phone. If they turn alerts on, their phone can show that a time of day of yours is still open (for example “A dose from Mom’s morning is still open.”), or that your phone hasn’t been active for a day. An alert names you (the name you chose to be shown) and the time of day, never which item. Our server sends these alerts to their phone through Apple Push Notification service, so Apple carries the alert’s text. To do that we keep a device token for their phone, which their phone gives us only when they turn alerts on. It is linked to their account, used only to send these alerts, and deleted when they sign out, when the link ends, or when Apple tells us it no longer works. Your own phone does not register for these alerts. Alerts can be late, missing or wrong: they are a convenience, not a medical or safety monitor, and no one should rely on them for anyone’s safety.
• You stay in control. “Shared with” and their name is shown on your Today while the link is active. Profile › Care shows who can see your routine and lets you remove them at any time, in one tap, without their agreement; you can also choose not to allow new invitations from them. Every 180 days we ask whether to keep the link.
• Your subscription. While the link is active, their subscription covers you. If their subscription ends, or the link ends, you keep access for 7 days and then need your own.
• How a link ends. You remove them (in Profile › Care, or when we ask every 180 days), they stop helping (Profile › Care › Stop helping), or either of you deletes your account. When the link ends, the copy of your routine on their phone is deleted, and so is the log of changes we kept to keep the two phones in step. Your own data stays in your account.
• Adults only. Both people in a caregiver link must be adults with their own AllTaken account. A child cannot be linked. A parent who keeps a child’s list does so in their own account under “People you help”, and that list is never shared through a caregiver link.

4. How we use personal information

• To provide the service. To keep your routine, logs and reminders, identify products from labels, show your history, patterns and weekly summaries, maintain your account and keep your records available to you across sessions and devices.
• To run caregiver links you set up: to keep the two phones in step, show your caregiver what your consent screen lists, record the doses they mark, and send the alerts they turn on.
• To process scans and answer AI questions through a third-party AI service, using only your own recorded information as context, and only when you have turned AI features on.
• To manage paid features by honouring your App Store subscription, and to credit invitations where they are offered.
• To communicate with you. To respond to support requests, send administrative notices about changes to this policy or the Terms, and, if you joined the beta waitlist, to contact you about beta testing.
• To respond to privacy-rights requests and to verify them.
• To understand and improve the service and fix problems, only when you have turned usage analytics on.
• To protect the service and its users: monitoring for misuse, preventing fraud and automated abuse of the website and waitlist, and enforcing our Terms.
• To comply with the law, including responding to lawful requests from authorities.
• To run our business: record keeping, audits, accounting, insurance, and the establishment, exercise or defence of legal claims.
• In a business transaction: to evaluate or complete a reorganisation, financing, sale or transfer of the business or its assets, subject to this policy.

AllTaken is a tracking and general-wellness app. It does not diagnose, treat or prevent any condition and does not give medical advice. We do not use your information for advertising, and we do not sell it. Where the law requires a legal basis for each purpose, the basis we rely on is set out in section 13.

5. How we disclose personal information

We disclose personal information only as needed for the purposes above, to these categories of recipients:

• Service providers. Companies that host and operate the app and website on our behalf: cloud hosting, database, authentication, server-function and storage providers for your account; a third-party AI service (one AI processing provider) for scans, questions and explanations, only when you have turned AI features on; a cloud hosting provider that runs our safety-check service for questions; and website hosting and security providers that serve alltaken.app, store waitlist signups and protect the signup form from automated abuse. Each receives only what its purpose requires and processes it on our behalf under its terms with us; the AI provider’s terms on training are described in section 3.
• Apple. For App Store distribution and subscriptions, Sign in with Apple, TestFlight, Apple Health on your device, any crash reports you choose to share and, through Apple Push Notification service, the delivery of caregiver alerts (the alert’s text and the device token), under Apple’s terms.
• Google. For Sign in with Google where it is offered, and for distribution and subscriptions through Google Play once the App is offered there, under Google’s terms.
• Other users, through the shared catalogue. If you submit a product to the shared catalogue, the reviewed product identification details and label photos become visible to other users.
• The person you link with. If you accept a caregiver link, the adult you chose sees and marks what your consent screen listed (section 3, “Caregiver links”), until the link ends. If you help someone, they see that their doses were marked by you, with your name. Apart from the shared catalogue and a link you set up, nothing you record is shown to anyone.
• People you choose. If you use the app’s share feature, you decide what is included and where it goes through the iOS share sheet. Apart from a caregiver link you accept, nothing is shared automatically.
• Parties to a business transaction. A buyer, merger partner, investor or their professional advisers, before or during a reorganisation, financing, sale or transfer of the business, subject to this policy.
• Legal, regulatory and safety recipients. Courts, regulators, law-enforcement or other authorities when we are required to by law, or when disclosure is necessary to protect the rights, property or safety of AllTaken, its users or others, to investigate fraud or violations of our Terms, or to establish, exercise or defend legal claims.

We do not sell your information, and we do not disclose it to advertisers, advertising networks, analytics companies, research partners or data brokers. There are no advertising or third-party tracking tools in the app or on this website.

6. Managing your preferences

• AI features and usage analytics are off unless you tick them when you set up the App or turn them on in Profile › Data & Privacy, and you can turn either off there at any time.
• Apple Health, camera, photo library and notifications are managed in iPhone Settings; you can change or revoke each permission at any time.
• Caregiver links. In Profile › Care, see who can see your routine and remove them, or stop helping someone, at any time. A caregiver turns alerts on or off there too.
• Your records. Review and edit any routine, dose, log or note in the app; corrections never rewrite your past logs. Keep products private, or choose to submit one to the shared catalogue.
• Emails. We do not send marketing or promotional emails. The only emails we initiate are administrative notices about your account, replies to your messages, and, if you joined the beta waitlist, messages about beta testing. To leave the waitlist, email support@alltaken.app from the address you signed up with; we then delete your entry.
• Cookies and advertising. There is nothing to manage: the website sets no cookies, and neither the app nor the website shows advertising or tracks you across other sites or apps.
• Deleting your account. See section 10.

7. International transfers

We are based in the United States. Your account and synced records are currently hosted in the European Union (Ireland). Requests to the third-party AI service, and the safety checks on questions, are processed in the United States. Emails you send us, for example to support or to our privacy address, are stored by our email provider in Saudi Arabia. Caregiver alerts are delivered by Apple through Apple Push Notification service. The website and waitlist are served through a global content delivery network, and our other providers operate in the countries where they are based, so your information may be processed in countries other than the one where you live, whose laws may differ from those of your country and may allow authorities there to access information in certain circumstances. When personal information from the European Economic Area, Switzerland or the United Kingdom is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses, with the UK Addendum and the Swiss amendments where they apply, in our data processing agreements with the providers concerned. You can ask for a copy of the relevant safeguards by emailing privacy@alltaken.app.

8. User content and the shared catalogue

AllTaken has no public profiles, forums, comments or community feeds. The only content that can become visible to other users is a product you deliberately submit to the shared catalogue: its identification details and the label photos you submit, after review, and, only if you accept a caregiver link, the parts of your routine your consent screen lists, shown to the one adult you linked with (section 3). Do not submit a product if you do not want that information to be visible to other users. Your routine, doses, logs, wellness entries and questions are never part of a submission and are never shown to anyone else apart from that link. The Terms of Use describe the permission you give us for catalogue submissions.

9. How we protect your information

We use technical, organisational and administrative safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction, including:

• encrypted connections between the app, the website and our servers;
• records synced to your account are protected on our servers so that only your account can read them, apart from what your consent screen lets a caregiver you linked with see;
• a caregiver invitation is stored only as a one-way scrambled (hashed) version of its link and short code, never in a form anyone could read back;
• passwords are handled by our authentication provider and are never visible to us;
• the waitlist form is protected by an automated bot check, and request counts are kept as salted hashes rather than network addresses;
• our server functions log outcome codes, not the content of requests, so email addresses and records do not appear in logs.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If you believe your account has been accessed without your permission, contact us at once.

10. How we retain your information

We keep personal information for as long as it is needed for the purposes described in this policy, including to meet legal, accounting or reporting requirements, and then delete or anonymise it. In deciding how long to keep information we consider its amount, nature and sensitivity, the potential harm of unauthorised use or disclosure, the purposes for which we process it, whether those purposes can be achieved another way, and the applicable legal requirements.

• Your account and records (profile, routines, logs, wellness entries, lab results, symptom log, Apple Health daily values, invitation records, usage events and the records of your AI requests): kept for as long as you keep your account, then deleted with it as described below. Turning usage analytics off stops new events; events already recorded stay with your account until you delete it.
• People you help: kept until you delete that person’s data (in the App, remove them under Profile › People you help, then choose Delete their data) or delete your account. Removing someone only hides their list and stops their reminders; their data stays in your account until you delete it. A copy on another iPhone signed in to your account stays on that iPhone until its data is reset, so delete the person on each iPhone that holds them.
• Caregiver links: a record of your consent (the version of the screen you accepted, the exact lists it showed, and when) and the link’s dates and who ended it, kept with your account. The invitation, stored only as a hashed link and short code with its expiry date and the caregiver’s first name: a declined or expired invitation is deleted 30 days after it was created, an accepted one 90 days after it was created (sooner if the caregiver deletes their account first). While the link is active, a short log of which records changed and who changed them, kept for at most 30 days and deleted when the link ends. Your phone’s latest status report replaces the one before and is deleted with your account. A caregiver’s device token is deleted when they sign out, when the link ends, or when Apple tells us it no longer works. When a link ends, the copy of your routine on the caregiver’s phone is deleted; deleting either account ends the link.
• Onboarding answers: kept only on your iPhone, until you delete your account or remove the App.
• Label and shelf photos sent for scanning: analysed to produce the result and not kept on our servers. Photos you choose to submit to the shared catalogue are the exception (section 8).
• AI chats: not kept on our servers as conversations. A copy of each final answer is kept for ten minutes so that a dropped connection does not produce a second answer, and is deleted in the next daily clean-up. For each AI request we keep a record of the feature used, its time, size and cost, the kinds of data looked up, any safety flags and a fingerprint of the answer, never the question or the answer itself; these records stay with your account until you delete it.
• Request-limit counters tied to your account: deleted one day after their time window starts.
• Account deletion records: when you ask us to delete your account, we keep a record of the request (your account’s random identifier, its dates and whether it was completed or cancelled) for 90 days after it is completed or cancelled, so that we can answer questions about it. If the account had an App Store subscription, we keep a one-way fingerprint of the purchase’s transaction identifier, with nothing that links it to you or your account, so that the same subscription can be used with a new account.
• AI usage totals: daily totals of AI requests and cost for each feature, used to enforce spending limits. They contain no account information and are not personal information.
• Support emails: kept for 2 years after your question is resolved, then deleted.
• Privacy requests: a record of each request and how we answered it (its date, type and outcome) is kept for 24 months, as California law requires; the rest of the correspondence follows the support rule above.
• Beta waitlist signups: kept until the beta ends or you ask to leave the waitlist, and deleted within 30 days after that.
• Server backups: data you delete can remain in our database host’s daily backups for up to 7 days, until they are overwritten. Backups are used only to restore the service after a failure.
• Hosting and security logs: kept by our providers for up to 7 days, unless we need them longer to investigate a specific security incident.

In the App, Profile › Delete my account and data schedules the deletion of your account. When you confirm, the App signs you out straight away, removes everything stored on that iPhone and cancels its reminders. Our server deletes your account and all the data held in it, including usage events, AI request records and any catalogue submissions, once 72 hours have passed. If you sign in again before then, on any device, the deletion is cancelled and your account and data are kept; after the 72 hours, signing in can no longer cancel it. If the request cannot reach our server, nothing is deleted and you stay signed in so you can try again. If changes on your iPhone have not yet reached your account, the App tells you first, so you can wait for them to sync or continue without them. Deleting your account does not cancel an App Store subscription; manage that in your Apple account.

11. Contact us

For questions, complaints or requests about this policy or our privacy practices, including requests under Washington’s My Health My Data Act, email privacy@alltaken.app. For help using the App, email support@alltaken.app.

You can also write to us at: Alltaken, Inc., Attn: Privacy/Legal, 2810 North Church Street, Wilmington, DE 19802, United States.

12. Your privacy rights

Depending on where you live, the law may give you rights over your personal information. Subject to the conditions and exceptions in the law that applies to you, these may include:

• Access and portability. To confirm whether we process your information, to learn the categories of recipients, and to receive a copy in a portable, commonly used format where technically feasible.
• Deletion. To have your information deleted; you can do this yourself in the app at any time (section 10).
• Correction. To have inaccurate information corrected; most records can be edited directly in the app.
• Limiting or objecting to processing. To withdraw consent, object to or restrict certain processing, or opt out of sales, sharing for advertising, targeted advertising and profiling. We do none of the latter; AI features, usage analytics and Apple Health access are each consent-based and can be turned off at any time.
• Non-discrimination. We will not treat you differently for exercising your rights.
• Appeal. If we decline a request, you can ask us to review the decision by emailing privacy@alltaken.app with “APPEAL” in the subject line and a reference to the decision. Where the law provides for it, you may also complain to a supervisory authority.

How to exercise your rights

Email privacy@alltaken.app and tell us which right you are exercising. Someone whose list is kept by a user they know (“People you help”, section 3) can use the same address; because that list is held in the user’s account, we will ask which account holds it. We may need information sufficient to verify your identity before acting, and we will respond within the time required by applicable law. Where the law allows, an authorised agent may submit a request on your behalf; we will verify the agent’s identity and authorisation. We do not charge for reasonable requests. Many of these requests you can also handle yourself in the App: Profile › Data & Privacy › Download my data gives you a copy of your account (including your caregiver-link history and the doses your caregiver marked, never their account identifier), removing a caregiver link in Profile › Care withdraws your consent to it, most records can be edited directly, and Profile › Delete my account and data deletes it.

13. Additional information for certain jurisdictions

AllTaken launches first in the United States, followed by Canada and the European Union. The subsections below apply where the relevant law covers you.

United States: California

If you are a California resident, the categories of personal information we may collect, described in section 3, correspond to: identifiers (such as email address, account and device identifiers, including a caregiver’s device token for alerts, and IP address); commercial information (store subscription status and transaction identifiers); internet or network activity (usage events, only if you turn analytics on, and technical logs); audio, electronic or visual information (label and shelf photos you scan); inferences (insights and summaries computed on your iPhone from your own records); and sensitive personal information, including health information (your supplements, medications, wellness entries and Apple Health values). Sources, purposes and recipients are described in sections 3 to 5, and how long we keep each category is described in section 10. In the past 12 months we have disclosed identifiers, commercial information, internet or network activity, audio, electronic or visual information and sensitive personal information to service providers for business purposes (hosting your account, processing scans and questions you send to AI features, and serving the website), and to Apple for App Store purchases, sign-in and the delivery of caregiver alerts. When you accept a caregiver link, you direct us to show your information to the person you linked with; that is not a sale. We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We use sensitive personal information only to provide the features you request, so there is no further use to limit. You may have the rights to know, delete, correct, limit the use of sensitive information and be free from discrimination, and to request information about disclosures for direct marketing (we make none). To exercise them, email privacy@alltaken.app.

United States: Washington and Nevada

Washington’s My Health My Data Act and Nevada’s consumer health data law require specific disclosures about consumer health data. They are provided in our separate Washington Health Data Privacy Policy, which also covers Nevada.

Other US states

If you live in another state with a consumer privacy law, such as Colorado, Connecticut, Oregon, Texas or Virginia, you have the rights in section 12 to the extent that law provides them, including the right to appeal a decision. Several of these laws treat health information as sensitive data that may be processed only with your consent, which we ask for before you use the App’s health features. If we decline your appeal, you may contact your state’s attorney general.

European Economic Area, Switzerland and United Kingdom

Where these laws apply, the controller of your personal information is Alltaken, Inc., identified in section 1, which you can contact as set out in section 11. We have not appointed a data protection officer; privacy questions go to privacy@alltaken.app.

In addition to the rights in section 12, you may have the right to object to processing based on legitimate interests, to request restriction, to receive your information in a machine-readable format where processing is based on consent or contract, and to withdraw consent at any time without affecting earlier processing. AllTaken makes no decisions about you based solely on automated processing that produce legal or similarly significant effects. Retention follows section 10; transfers outside these territories follow section 7.

You also have the right to complain to a data protection authority: in the EU, the authority where you live, work or where the alleged infringement occurred (list of EU authorities); in Switzerland, the Federal Data Protection and Information Commissioner; in the United Kingdom, the Information Commissioner’s Office. We would appreciate the chance to resolve your concern first.

The table below sets out the lawful basis we rely on for each processing activity.

Canada

Where Canadian privacy law applies, we collect, use and disclose personal information with your consent, express or implied, unless the law permits otherwise. You are not obliged to provide personal information, but some features cannot work without it. You may request access to, and correction of, the personal information we hold about you, and you may complain to the relevant privacy commissioner if a concern is not resolved. Quebec residents may additionally request their information in a structured, commonly used technological format, or ask that it be transferred to another organisation, and may ask us to stop disseminating information or de-index a link where the law provides for it. Requests go to privacy@alltaken.app.

Changes to this policy

We may update this policy as the service or its practices change, for example when we add a feature or launch on another platform. The policy will always show the date it was last updated and list the changes in section 2. If a change is material, we will tell you in the App or by email before it takes effect, and where the law requires your consent, for example before using health information for a new purpose, we will ask for it.