Privacy policy

Effective October 21, 2026.

Lizzergy handles health information about you and your family. This page describes what we collect and why.

What we collect

• Your email address, to sign you in with a one-time code.
• Profiles you create: name, birth date, emergency note, allergens, sensitivity levels, and a profile photo if you add one.
• Confirmations: your typed name, confirmation with Face ID, Touch ID, or your device passcode, and the time you confirmed each statement. We never receive your face or fingerprint. Earlier versions of the app stored a drawn signature, and those images stay with the confirmation record.
• Scans: the barcode, the label photo, the text read from it, and the results.
• Push notification tokens for your devices.
• Subscription status: whether you have Lizzergy Family, which plan, and when it renews or ends. Apple or Google handle payment. We never see your card details.

Where it lives

On servers we run ourselves in the United States. Label photos and profile photos are encrypted at rest. Label text recognition runs on your phone. We do not send your profiles, photos, or scans to outside services.

Services we use

• The Apple App Store and Google Play process subscription payments under their own privacy policies.
• RevenueCat manages subscriptions for us. It receives a random account ID (not your email address), your purchase receipts, and basic device information from the app. It does not receive your profiles, photos, or scans.
• Apple Push Notification service and Google Firebase Cloud Messaging deliver notifications. They receive your device token and the notification text, which can include the name on a profile shared with you.

Who sees it

You, and the people you share a profile with. People you share with in the app see that profile, including its photo. Share links opened in a web browser do not show the photo. We do not sell data or use third-party advertising or tracking.

Deleting your data

Delete your account in the app under Settings, then Delete account. This removes your profiles, profile photos, scans, label photos, devices, and shares. Deleting your account does not cancel a subscription; cancel it in your App Store or Google Play subscriptions. Signed acknowledgment records may be retained as required by law; the retention period is under review.