Last updated: 31 August 2026
This privacy policy applies only to the Holistic Allergy iPhone app. Use of the Holistic Allergy website, clinic and clinical services is covered by our separate website policy.
Who we are
Holistic Allergy Ltd is the controller responsible for the personal information described in this policy.
– Company number: 15519886
– Registered office: 124–128 City Road, London, England, EC1V 2NX
– Email: hello@holisticallergy.co.uk
At a glance
– The app has no user accounts and does not contain advertising or third-party analytics.
– Symptom, medication and notes diary entries stay on the iPhone. Holistic Allergy cannot view or recover them.
– A selected location’s latitude and longitude are rounded to two decimal places before being sent to Holistic Allergy and Google to obtain a pollen forecast.
– If you add the widget, the app keeps the place name and pollen forecast locally for no more than 24 hours so iOS can display it on the Home Screen or Lock Screen.
– A random installation identifier is used only to protect the pollen service from excessive or abusive requests.
– The app does not track people across other companies’ apps or websites.
Location and place searches
The app can obtain a forecast in either of two ways:
1. Current location: If you grant permission, Apple’s Core Location service supplies the app with your current location. The app also uses Apple’s reverse-geocoding service to display an approximate area name.
2. Location search: You can search for a city, town, postcode or address instead. The search text and suggestions are processed by Apple’s MapKit search services. Holistic Allergy does not receive or store the text entered into the place search.
After a current or searched location is selected, its latitude and longitude are rounded to two decimal places, approximately kilometre-level location. Only the rounded coordinates are sent over HTTPS to Holistic Allergy’s Cloudflare Worker. The Worker forwards the rounded coordinates to Google’s Pollen API and returns the forecast to the app.
Holistic Allergy does not add location to the symptom diary and does not store coordinates in an application database or application logs. The Worker does not cache pollen responses.
To support the optional widget, the app stores the selected place name, pollen levels and forecast dates in an Apple App Group shared only with its widget extension. The snapshot does not contain coordinates, symptom diary data or the installation identifier, and expires no more than 24 hours after retrieval. If you place the widget on the Lock Screen, its pollen summary and place name may be visible while the iPhone is locked, subject to your iOS notification and widget privacy settings.
Cloudflare necessarily processes network and connection information, including IP address and routing metadata, to deliver and protect the service. Google receives the rounded coordinates from the Worker and may use and retain Pollen API request information as explained in its terms and privacy policy.
Some plant photographs are downloaded directly from Google-hosted storage when displayed. Google may therefore receive the iPhone’s IP address and normal request information for the image download.
Location access is optional. You can refuse or withdraw current-location permission in iOS Settings and use a searched location instead. The diary and educational content remain available without location permission. Our lawful basis for processing a selected location is your consent, demonstrated by granting location permission or deliberately selecting a searched place. You can withdraw that consent by revoking permission and ceasing to request forecasts.
Anonymous installation identifier
The app generates a random installation identifier and stores it in the iOS Keychain. It is sent securely to the Holistic Allergy Worker when a pollen forecast is requested. The Worker hashes the identifier and uses the hash as a short-lived rate-limit key for service security and abuse prevention.
The identifier is not Apple’s advertising identifier. It is not used for advertising, analytics, profiling or tracking, and it is not shared with Google. The raw identifier is not written to Holistic Allergy’s application logs or stored in an application database.
Because it is held in the iOS Keychain, the identifier may remain on the iPhone after the app is removed and may be reused if the app is reinstalled. It is restricted to that device and is not included in a device backup. Our lawful basis for this processing is our legitimate interest in protecting the pollen service and keeping it available to legitimate users.
Symptom diary, medication and notes
Symptom scores, medication selections, free-text notes and pollen readings attached to a check-in are stored locally on the iPhone using Apple SwiftData. This information may include health information, but it is not uploaded to or accessible by Holistic Allergy, Cloudflare or Google and does not become part of a Holistic Allergy clinical record.
The diary database is excluded from iCloud and device backups and protected using iOS file protection. You can delete an individual entry or all diary entries inside the app. Removing the app removes its diary database. Because Holistic Allergy does not receive the diary, we cannot view, recover, correct or delete diary entries on your behalf.
Daily reminder
If you enable the check-in reminder, its enabled preference, chosen time and selected weekdays are managed locally on the iPhone using Apple’s notification services. The app checks the local diary when scheduling reminders and does not schedule one for a day whose check-in is already complete. Holistic Allergy does not operate a remote push-notification database for this feature. You can disable the reminder in the app or change notification permission in iOS Settings.
External links
Booking, pricing, clinic, email and directions links open an external website or app. Information provided after following one of those links is handled under the privacy policy applicable to that service and is not added to the app’s on-device diary.
Tracking and advertising
The app does not contain advertising, does not access Apple’s advertising identifier and does not track activity across other companies’ apps or websites. It does not contain third-party advertising or analytics SDKs.
Retention
– Diary information remains on the iPhone until you delete it or remove the app.
– Reminder preferences remain on the iPhone until they are changed or the app is removed.
– The widget’s place name and pollen snapshot remain in the app’s shared local container for no more than 24 hours after retrieval. iOS may keep system-managed widget rendering data under its own storage rules.
– Holistic Allergy does not persist selected coordinates or pollen responses in an application database or application logs.
– The Worker’s application logs contain only an event name, a random request identifier and a response status. They do not contain coordinates, diary information or the installation identifier and are retained by Cloudflare for no more than seven days.
– The hashed rate-limit key is used for the service’s short rate-limit window. Holistic Allergy does not place it in an application database.
– The Keychain installation identifier may remain on the iPhone after app removal and reinstallation, as explained above.
– Cloudflare, Google and Apple may retain network or service information under their applicable policies and terms.
Security
Forecast requests use HTTPS. Location is reduced to two decimal places before it reaches Holistic Allergy’s server. The Worker does not log location or the installation identifier, does not cache forecast responses and does not expose the Google API credential to the app. The on-device diary is excluded from backup and protected using iOS file protection. The widget’s shared snapshot is time-limited and excludes coordinates, diary data and the installation identifier.
No method of storage or transmission can be guaranteed to be completely secure. You should protect access to the iPhone with a passcode, Face ID or Touch ID where available.
Your choices and rights
You can:
– refuse or revoke current-location access in iOS Settings;
– use a searched location rather than your current location;
– disable reminders or notification permission;
– remove the Home Screen or Lock Screen widget;
– delete individual diary entries or all diary entries inside the app; and
– remove the diary database by removing the app.
Depending on the circumstances, UK data-protection law may give you rights of access, correction, erasure, restriction, portability and objection, and the right to withdraw consent. These rights do not always apply and may be limited where Holistic Allergy does not possess or cannot identify the information concerned.
To exercise a right or ask a privacy question, email [hello@holisticallergy.co.uk](mailto:hello@holisticallergy.co.uk). You also have the right to complain to the [Information Commissioner’s Office](https://ico.org.uk/make-a-complaint/data-protection-complaints/).
Children
The app does not create accounts or ask for a user’s age. A parent or guardian should manage app permissions and supervise diary use where a child uses the app or diary information relates to a child.
Medical information
The app is an informational pollen and self-recording tool. It does not diagnose an allergy, provide emergency assistance or replace advice from a qualified healthcare professional.
Changes to this policy
We may update this policy if the app, its service providers or legal requirements change. The latest version and its effective date will be published on this page.
Contact us
For privacy questions or requests, contact:
Holistic Allergy Ltd
Email: hello@holisticallergy.co.uk
Registered office: 124–128 City Road, London, England, EC1V 2NX