Privacy Policy
Last updated: 26 May 2026
Who we are
allergic.pet is a pet food allergy tracker operated by Johnnie Fenwick. If you have any questions about this policy, contact us at hello@allergic.pet.
What data we collect and why
Account data
When you create an account we collect your email address and password (hashed). This is required to provide the service.
Pet and health data
Meal logs, ingredient lists, reaction logs, and symptom data you enter are stored to provide the tracking and analysis features. We only process this data with your explicit consent, which you grant during sign-up and may withdraw at any time.
Usage analytics (optional)
If you opt in, we collect anonymous usage data — pages visited, time spent per page, and button interactions — using Umami Analytics, a cookieless, privacy-first analytics tool. Umami does not use cookies, does not track you across other websites, and does not collect personally identifiable information. This consent is separate from your account consent and can be changed at any time in your account settings.
Referral source
When analytics are enabled, Umami may capture UTM parameters (e.g. utm_source=google) present in the URL you arrive from. This helps us understand which channels bring users to allergic.pet. No personal data is attached to this.
Legal basis for processing (GDPR)
We process your data under the following bases:
- Contract — account and pet health data are necessary to deliver the service you signed up for.
- Consent — automated allergy analysis and usage analytics are processed only with your freely given consent, which you may withdraw at any time.
Data retention and deletion
Your data is retained for as long as your account is active. You can delete your account at any time from your account settings. Upon deletion, your personal data is anonymised in accordance with GDPR — your logs are retained in anonymised form for aggregate analysis but can no longer be linked to you.
Third-party services
Supabase — database and authentication. Your data is stored in the EU (eu-west-2). Supabase privacy policy.
Resend — transactional email. Your email address is shared with Resend solely to deliver account-related emails. Resend privacy policy.
Umami Analytics — optional, cookieless usage analytics. Only active if you have opted in. No personal data is shared. Umami privacy policy.
Your rights
Under GDPR you have the right to access, rectify, or erase your personal data; to restrict or object to processing; and to data portability. You may also withdraw any consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, email hello@allergic.pet.
Cookies
We do not use tracking or advertising cookies. A session cookie is set by Supabase to keep you logged in. Umami Analytics is cookieless by design.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or via an in-app notice. Continued use of allergic.pet after a change constitutes acceptance of the updated policy.