Privacy Policy
Last updated: June 2026
1. Controller
Ulrich Diedrichsen
Kippingstraße 27
20144 Hamburg
Germany
Email: uli@moinsen.dev
2. Overview of Data Processing
This website provides information about the AllergySense app and offers an Early Access sign-up form. We do not use tracking cookies or analytics software that could identify you. The theme preference (Light/Dark) is stored exclusively in your browser's local storage — no data is sent to servers.
3. What Data We Collect
Pilot Signup (Form)
When you contact us via the pilot-program form, we collect your email address, your role (affected person, doctor, institution), optionally whether you own an iPhone, and your optional message. This information is transmitted to us by email (sent via Resend, recipient business@moinsen.dev) and used exclusively to contact you about the pilot program.
IP Address
Your IP address is transmitted for technical reasons when accessing the website. It is not stored permanently.
4. Purpose of Processing
Your data is processed exclusively for the following purposes:
- Sending information about the development status of the AllergySense app
- Invitations to beta tests
- Responding to your inquiries
5. Legal Basis
The processing of your data is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time by sending an informal message to uli@moinsen.dev.
6. Storage Period
Your data will be stored until the beta phase is completed or until you revoke your consent. You may request deletion of your data at any time.
7. Third-Party Providers and Processors
This website is hosted on Cloudflare Pages (Cloudflare, Inc., San Francisco, USA). Cloudflare processes your IP address for website protection. We use Resend (Resend, Inc., San Francisco, USA) for email delivery.
8. Cookies, Tracking, and Analytics
This website uses no tracking and sets no advertising or analytics cookies. The theme switch (Light/Dark) stores your preference exclusively in your browser's local storage — no data is transmitted to servers.
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access (Art. 15) — You may request information about what data we have stored about you.
- Right to Rectification (Art. 16) — You may request correction of inaccurate data.
- Right to Erasure (Art. 17) — You may request immediate deletion of your data.
- Right to Restriction of Processing (Art. 18) — You may request restriction of processing.
- Right to Data Portability (Art. 20) — You may request your data in a machine-readable format.
- Right to Object (Art. 21) — You may object to the processing of your data at any time.
- Right to Withdraw Consent (Art. 7 Para. 3) — You may withdraw your consent at any time without giving reasons.
To exercise your rights, contact: uli@moinsen.dev
10. Right to Complain to a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Germany
Phone: +49 40 / 428 54 - 4040
11. Data Processing in the AllergySense App (Pilot Program)
For pilot-program participants, the following additionally applies: the app processes health data (Art. 9 GDPR). This processing takes place exclusively on the basis of your explicit consent (Art. 9 (2) (a) GDPR), which is obtained on first app launch.
| Data | Where | Notes |
|---|---|---|
| Flares, symptoms, meals, medication, daily scores | App + servers in Germany operated by us (self-hosted Appwrite) | No sharing with third parties, no selling, no advertising |
| Voice audio | Remains entirely on your iPhone | Speech recognition runs on-device; only the recognized text is processed |
| Recognized text & pre-computed analysis statistics | Anthropic (AI service, USA) | Only text and aggregated figures are transmitted — never audio, never raw records with free-text notes. According to the provider, API data is not used for model training by default. |
| Weather/pollen lookups | Open-Meteo (queried with coordinates coarsened to ~1 km) | No API key, no account, no identification |
| Apple Health data (sleep, heart rate, steps) | Only after you actively connect; attached to flare context | Read access; revocable anytime in iOS settings |
Your control: In the app you can export all data as a JSON file at any time (Profile → Data & privacy → Export data) and permanently delete your account including all server and device data (Delete account & data).
Course data is shared for research purposes exclusively in anonymized form and only after separate, explicit opt-in.
AllergySense is not a medical device and does not replace medical diagnosis or treatment.