Privacy Policy

1. Who we are

HISANAH is a digital platform that helps families manage food allergies: a medical file for each member, product ingredient checks, and a QR emergency card.

2. Data we collect

• Account data: email, mobile number and password (stored hashed; nobody can read it).
• Medical file data you enter: names, dates of birth, allergies, medications, blood type, hospital, doctor, contact numbers, and photos (optional).
• Scan history: products you checked and their result.
• Card scan log: scan time and device type only; we do not store IP addresses.
• Label photos: sent to an AI service to read the ingredients list; we do not store the photo itself.

3. How we use it

• Only to provide the service: showing your file, checking products against each member's allergies, and showing the emergency card.
• We don't sell your data, use it for advertising, or share it except with the technical providers listed below.

4. Emergency card

• Anyone with the card's code can see only the details you chose to show.
• You can hide any detail, disable the card, or change its code if a bracelet is lost, and view the card's scan log at any time.

5. Service providers

• Supabase: data and account storage (servers in Europe, Ireland).
• Vercel: website hosting.
• Anthropic: reading ingredient text from label photos.
• Open Food Facts: product lookup by barcode (we send the barcode number only).

6. Your rights

You can view and edit your data, download a full copy, and permanently delete your account with all its data, from “My account”.

7. Children's data

Children's data is entered and fully controlled by the guardian, and appears only on their card to the extent the guardian chooses.

8. Security

Connections are always encrypted, and each account can only see its own family's data, enforced by the database itself.

9. Contact

For any question or request about your data, contact us through the official contact email (announced at launch).