Privacy Policy

1. Introduction

This Privacy Policy explains how Alltaken collects, uses, discloses and otherwise processes personal information when you use the Alltaken iPhone app, visit alltaken.app, join the beta waitlist or contact us. It forms part of our Terms of Use; capitalised terms that are not defined here have the meaning given there.

Alltaken is being prepared for release by a company that is still being incorporated. The operator’s registered name, country and business contact details will be added here before publication.

The minimum age for using Alltaken, and what we do if we learn that someone under it has created an account, will be stated here before publication. Alltaken is not directed at children.

If you are covered by Washington’s My Health My Data Act, our separate Washington Health Data Privacy Policy also applies to the health information described below.

2. What’s new in this version

This is the first published draft of the Alltaken Privacy Policy, revised on 13 September 2026. It follows a plain structure: what we collect, how we use it, who receives it, the controls you have, and the rights that apply where you live. Later versions will list their changes here.

3. Personal information we collect

Information you provide directly

• Account and profile information. Email address, password (handled by our authentication provider and never visible to us), display name, time zone, app language, whether onboarding was completed, and your onboarding answers: what you take, your goals, your confidence, what you want from the app, and an age range.
• Supplements, medications and routines. The products you add (product identity, your own dose and unit, schedule, start and end dates, notes), the history of changes to each routine, one-day schedule exceptions, inventory counts and the reminder settings you choose.
• Daily logs. Whether each item was taken, skipped, forgotten or not planned, with the time and an optional reason.
• Wellness entries. Daily check-ins for mood, energy and stress, and any notes you add. Together with your routine, this information can indicate a health condition and may be treated as sensitive or health information under some laws.
• Product labels submitted for scanning. Label photos, the text read from them and barcodes, handled as described in section 4.
• Questions you submit to AI features. Your questions and the context from your own records used to answer them, handled as described in section 4.
• Shared catalogue submissions. Products you add are private to your account. If you choose to submit a product to the shared catalogue, only the product identification details and label photos you submit are reviewed, never your routine, doses or wellness entries.
• Communications with us. Your email address and whatever you include when you contact support or make a request about your information.
• Beta waitlist. If you join the waitlist on this website: your email address as you typed it, the time you submitted it, the version of the consent notice you were shown, a record that the signup came from this website, and a status (pending, invited or removed) with the time it last changed, which we update by hand once we have contacted you about testing.
• Payment information. Subscriptions are sold and billed by Apple through the App Store under Apple’s terms, including refunds. We do not receive your card details; we keep the App Store transaction identifiers and subscription status needed to know that your account has an active plan.

Information collected automatically

• Usage analytics, only if you turn it on. Usage analytics is off until you enable it in Profile, and you can turn it off at any time. When it is on, product-usage events are recorded to your account, for example that onboarding started, a scan started or failed, a routine was created, a paywall was viewed or a purchase completed. Each event carries an app-session identifier, the app version and a fixed set of categorical properties such as counts, durations, entry points, outcome codes, plan, age range, main goal and app language. Events never contain product or medication names, doses, notes, questions, scanned text, photos or email addresses.
• Technical and security information. Our hosting providers process the technical information needed to deliver and protect the service, such as IP address, request logs and device or browser characteristics. Our own server functions log request status, timing and error codes, not the content of requests. To limit automated abuse of the waitlist form, the signup endpoint keeps a short-lived, hashed count of requests per network address; the address itself is not stored.
• Crash reports. The app contains no crash-reporting or advertising software. If you have chosen to share analytics and crash data with developers in your iPhone settings, Apple provides us with crash reports under Apple’s terms.
• Cookies and tracking. alltaken.app sets no cookies and uses no analytics, advertising or tracking technologies. Apart from the waitlist form, the website has no login and does not connect to the app’s database. Reminders are scheduled on your iPhone; the app does not send push notifications from a server.

Information from third parties

• Sign-in providers. If you use Sign in with Apple or Sign in with Google where they are offered, we receive the identifier and email address that service shares.
• Apple. The App Store transaction identifiers and subscription status described above, and crash reports you have chosen to share.
• Apple Health. Only the categories you authorise, as described in section 4. Apple Health information is used only to provide the features you request; it is never used for advertising or marketing and never shared for those purposes.

We do not buy information about you, and we do not receive it from advertising partners, data brokers or other users.

De-identified or aggregated information

We do not currently create de-identified or aggregated datasets from your information for purposes other than serving your own account. If that changes, this policy will say so and describe the safeguards used.

Apple Health, scanning, AI features and sync

Apple Health is optional and read-only; Alltaken never writes to Health. If you allow it, the app reads daily totals or averages for steps, active energy, resting heart rate, heart rate variability, sleep and workouts. Those daily values are stored on your iPhone and, while you are signed in, in your account on our servers so they can be shown next to your routine. Raw Health samples never leave your iPhone. You can change or revoke access at any time under Settings › Health › Data Access & Devices › Alltaken; revoking stops new imports, and daily values already imported remain in your account until you delete them.

AI features are off until you turn them on in Profile, and you can turn them off at any time. With AI features off, scanning still reads label text and barcodes on your iPhone, and nothing is sent to an AI provider. With AI features on: compressed photos of the front label and the facts panel, the text recognised on your iPhone and any barcode are sent to our server and passed to our AI processing provider to extract the product details; the result is shown to you for review, only the details you confirm are saved, and our server does not keep the photos. A question you ask is sent to our server, which adds the context needed to answer it from your own account (your active supplements and medications with strengths and schedule, ingredient totals and overlaps, adherence and weekly summaries, goal coverage, inventory, safety findings, averages of your Health and check-in metrics, and the intake analysis for a date). When you ask for an explanation of an insight, only the computed summary being explained is sent. Requests are made by our server; the AI provider does not receive your account identity or email address, and receives photos only for the scan being processed.

Account storage and sync. The app keeps a full copy of your data on your iPhone in its private storage so it works offline. While you are signed in, everything you record is also synced to your private account on our servers, where each record is protected so that only your account can read it. Sync is part of using a signed-in account; it is not a separate setting. Insights and patterns are computed on your iPhone from your own records.

4. How we use personal information

• To provide the service. To keep your routine, logs and reminders, identify products from labels, show your history, patterns and weekly summaries, maintain your account and keep your records available to you across sessions and devices.
• To process scans and answer AI questions, using only your own recorded information as context, and only when you have turned AI features on.
• To manage paid features by honouring your App Store subscription.
• To communicate with you. To respond to support requests, send administrative notices about changes to this policy or the Terms, and, if you joined the beta waitlist, to contact you about beta testing.
• To respond to privacy-rights requests and to verify them.
• To understand and improve the service and fix problems, only when you have turned usage analytics on.
• To protect the service and its users: monitoring for misuse, preventing fraud and automated abuse of the website and waitlist, and enforcing our Terms.
• To comply with the law, including responding to lawful requests from authorities.
• To run our business: record keeping, audits, accounting, insurance, and the establishment, exercise or defence of legal claims.
• In a business transaction: to evaluate or complete a reorganisation, financing, sale or transfer of the business or its assets, subject to this policy.

Alltaken is a tracking and general-wellness app. It does not diagnose, treat or prevent any condition and does not give medical advice. We do not use your information for advertising, and we do not sell it. Where the law requires a legal basis for each purpose, the applicable basis will be stated in section 13 once the operator and its markets are confirmed.

5. How we disclose personal information

We disclose personal information only as needed for the purposes above, to these categories of recipients:

• Service providers. Companies that host and operate the app and website on our behalf: cloud hosting, database, authentication, server-function and storage providers for your account; AI processing providers for scans and questions, only when you have turned AI features on; and website hosting and security providers that serve alltaken.app, store waitlist signups and protect the signup form from automated abuse. Each receives only what its purpose requires and processes it under contract for us. The retention terms that apply to AI processing requests will be stated here before publication.
• Apple. For App Store distribution and subscriptions, Sign in with Apple, TestFlight, Apple Health on your device and any crash reports you choose to share, under Apple’s terms.
• Google. For Sign in with Google where it is offered.
• Other users, only through the shared catalogue. If you submit a product to the shared catalogue, the reviewed product identification details and label photos become visible to other users. Nothing else you record is ever shown to anyone.
• People you choose. If you use the app’s share feature, you decide what is included and where it goes through the iOS share sheet. Nothing is shared automatically.
• Parties to a business transaction. A buyer, merger partner, investor or their professional advisers, before or during a reorganisation, financing, sale or transfer of the business, subject to this policy.
• Legal, regulatory and safety recipients. Courts, regulators, law-enforcement or other authorities when we are required to by law, or when disclosure is necessary to protect the rights, property or safety of Alltaken, its users or others, to investigate fraud or violations of our Terms, or to establish, exercise or defend legal claims.

We do not sell your information, and we do not disclose it to advertisers, advertising networks, analytics companies, research partners or data brokers. There are no advertising or third-party tracking tools in the app or on this website.

6. Managing your preferences

• AI features and usage analytics are off until you turn them on in Profile, and you can turn either off at any time.
• Apple Health, camera, photo library and notifications are managed in iPhone Settings; you can change or revoke each permission at any time.
• Your records. Review and edit any routine, dose, log or note in the app; corrections never rewrite your past logs. Keep products private, or choose to submit one to the shared catalogue.
• Emails. We do not send marketing or promotional emails. The only emails we initiate are administrative notices about your account, replies to your messages, and, if you joined the beta waitlist, messages about beta testing. To leave the waitlist, email support@alltaken.app from the address you signed up with; we then delete your entry.
• Cookies and advertising. There is nothing to manage: the website sets no cookies, and neither the app nor the website shows advertising or tracks you across other sites or apps.
• Deleting your account. See section 10.

7. International transfers

Your account and synced records are hosted in the European Union. The website and waitlist are served through a global content delivery network, and our other providers operate in the countries where they are based, so your information may be processed in countries other than the one where you live, whose laws may differ from those of your country and may allow authorities there to access information in certain circumstances. Where the law requires safeguards for such transfers, we will use recognised mechanisms; the specific safeguards will be confirmed with the operator and stated here before publication.

8. User content and the shared catalogue

Alltaken has no public profiles, forums, comments or community feeds. The only content that can become visible to other users is a product you deliberately submit to the shared catalogue: its identification details and the label photos you submit, after review. Do not submit a product if you do not want that information to be visible to other users. Your routine, doses, logs, wellness entries and questions are never part of a submission and are never shown to anyone else. The Terms of Use describe the permission you give us for catalogue submissions.

9. How we protect your information

We use technical, organisational and administrative safeguards designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction, including:

• encrypted connections between the app, the website and our servers;
• records synced to your account are protected on our servers so that only your account can read them;
• passwords are handled by our authentication provider and are never visible to us;
• the waitlist form is protected by an automated bot check, and request counts are kept as salted hashes rather than network addresses;
• our server functions log outcome codes, not the content of requests, so email addresses and records do not appear in logs.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If you believe your account has been accessed without your permission, contact us at once.

10. How we retain your information

We keep personal information for as long as it is needed for the purposes described in this policy, including to meet legal, accounting or reporting requirements, and then delete or anonymise it. In deciding how long to keep information we consider its amount, nature and sensitivity, the potential harm of unauthorised use or disclosure, the purposes for which we process it, whether those purposes can be achieved another way, and the applicable legal requirements.

Your records stay in your account for as long as you keep it. The retention periods for usage events, server backups, support correspondence, waitlist signups after invitation or removal, and AI processing request logs will be stated here before publication.

In the app, Profile › Delete my account and data deletes your account and the data held in it on our servers, including usage events and any catalogue submissions, and then removes everything stored on that iPhone and cancels its reminders. If the server deletion cannot be completed, nothing is deleted and you can try again. Deleting your account does not cancel an App Store subscription; manage that in your Apple account.

11. Contact us

For questions, complaints or requests about this policy or our privacy practices, email support@alltaken.app. The legal operator, its postal address and any data protection contact will be added here before publication.

12. Your privacy rights

Depending on where you live, the law may give you rights over your personal information. Subject to the conditions and exceptions in the law that applies to you, these may include:

• Access and portability. To confirm whether we process your information, to learn the categories of recipients, and to receive a copy in a portable, commonly used format where technically feasible.
• Deletion. To have your information deleted; you can do this yourself in the app at any time (section 10).
• Correction. To have inaccurate information corrected; most records can be edited directly in the app.
• Limiting or objecting to processing. To withdraw consent, object to or restrict certain processing, or opt out of sales, sharing for advertising, targeted advertising and profiling. We do none of the latter; AI features, usage analytics and Apple Health access are each consent-based and can be turned off at any time.
• Non-discrimination. We will not treat you differently for exercising your rights.
• Appeal. If we decline a request, you can ask us to review the decision by emailing support@alltaken.app with “APPEAL” in the subject line and a reference to the decision. Where the law provides for it, you may also complain to a supervisory authority.

How to exercise your rights

Email support@alltaken.app and tell us which right you are exercising. We may need information sufficient to verify your identity before acting, and we will respond within the time required by applicable law. Where the law allows, an authorised agent may submit a request on your behalf; we will verify the agent’s identity and authorisation. We do not charge for reasonable requests. The rights that apply, and the request process, will be finalised for the markets where Alltaken is offered before publication.

13. Additional information for certain jurisdictions

The markets where Alltaken will be offered are still being confirmed. The subsections below apply only where Alltaken is offered and where the relevant law covers you; they will be completed and reviewed before publication.

United States: California

If you are a California resident, the categories of personal information we may collect, described in section 3, correspond to: identifiers (such as email address, account and device identifiers and IP address); commercial information (App Store subscription status and transaction identifiers); internet or network activity (usage events, only if you turn analytics on, and technical logs); coarse geolocation (inferred from IP address only; the app does not collect precise location); audio, electronic or visual information (label photos you scan); inferences (insights and summaries computed on your iPhone from your own records); and sensitive personal information, including health information (your supplements, medications, wellness entries and Apple Health values). Sources, purposes and recipients are described in sections 3 to 5. We do not sell personal information and do not share it for cross-context behavioural advertising, and we use sensitive personal information only to provide the features you request. You may have the rights to know, delete, correct, limit the use of sensitive information and be free from discrimination, and to request information about disclosures for direct marketing (we make none). To exercise them, email support@alltaken.app.

United States: Washington

Washington’s My Health My Data Act requires specific disclosures about consumer health data. They are provided in our separate Washington Health Data Privacy Policy.

European Economic Area, Switzerland and United Kingdom

Where these laws apply, the controller of your personal information is the operator identified in section 1, and any representative or data protection contact required by law will be named here before publication. In addition to the rights in section 12, you may have the right to object to processing based on legitimate interests, to request restriction, to receive your information in a machine-readable format where processing is based on consent or contract, to withdraw consent at any time without affecting earlier processing, and to lodge a complaint with the supervisory authority where you live, work or where the alleged infringement occurred. Alltaken makes no decisions about you based solely on automated processing that produce legal or similarly significant effects. Retention follows section 10; transfers outside these territories follow section 7 and the safeguards to be stated there.

The table below sets out the proposed lawful bases for each processing activity. It is a draft to be confirmed with the operator and counsel before publication.

Canada

Where Canadian privacy law applies, we collect, use and disclose personal information with your consent, express or implied, unless the law permits otherwise. You are not obliged to provide personal information, but some features cannot work without it. You may request access to, and correction of, the personal information we hold about you, and you may complain to the relevant privacy commissioner if a concern is not resolved. Quebec residents may additionally request their information in a structured, commonly used technological format, or ask that it be transferred to another organisation, and may ask us to stop disseminating information or de-index a link where the law provides for it. Requests go to support@alltaken.app.

Other jurisdictions

Notices for any other market where Alltaken is offered will be added here before publication.

Changes to this policy

We may update this policy as the service or its practices change. The published policy will show its effective or revision date, and where required we will provide notice of material changes. Until the operating company, the minimum age, retention periods and the applicable markets are confirmed, this page remains a draft.