Cookie & Data Policy
Last updated: February 2026
This Cookie & Data Policy explains how Octopye Digital Designs ("we", "us", or "our") uses cookies, local storage, and similar technologies on the AllerGen website at allergen.octopye.com (the "Website") and the AllerGen mobile application (the "App").
1. Data Controller
The data controller responsible for your personal data is:
2. What Are Cookies?
Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners. Cookies can be "persistent" (remaining on your device for a set period or until you delete them) or "session-based" (deleted when you close your browser).
3. Cookies in the AllerGen Mobile App
The App does not use cookies, web beacons, pixel tags, or any similar tracking technologies. Your in-app data remains entirely on your device and is never accessed through cookie-based mechanisms.
3.1 AsyncStorage (Local Storage)
The App uses AsyncStorage, a React Native local storage system similar to a browser's localStorage, to store your data on-device. This includes:
- Your allergy profiles and sensitivity levels
- Food scan logs and safety assessments
- Reaction log entries
- App preferences and settings
AsyncStorage data is stored exclusively on your device and is never transmitted to our servers or any third party. You can delete this data at any time by following the instructions on our Data Deletion page.
3.2 RevenueCat SDK
The AllerGen App uses the RevenueCat SDK for subscription management. The RevenueCat SDK may use device identifiers to:
- Validate your subscription status
- Prevent subscription fraud
- Associate purchases with your device
These identifiers are anonymous and are not used for advertising or cross-app tracking. For more information, see RevenueCat's Privacy Policy.
4. Cookies on the AllerGen Website
Our Website at allergen.octopye.com may use a limited number of essential cookies only to ensure the proper functioning of the site.
4.1 Essential Cookies
Essential cookies are strictly necessary for the Website to function correctly. These cookies do not collect personal information and cannot be disabled without affecting the functionality of the Website.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session Cookie | Maintains your browsing session and ensures the Website functions correctly during your visit. | Session (deleted when you close your browser) |
| Preference Cookie | Remembers basic display preferences such as theme settings to improve your browsing experience. | Up to 1 year |
4.2 What We Do Not Use
To be clear, the AllerGen Website does not use any of the following:
- Tracking Cookies: We do not track your browsing activity across other websites.
- Third-Party Advertising Cookies: We do not display advertisements and do not use cookies to serve or measure ads.
- Third-Party Analytics Cookies: We do not use Google Analytics, Facebook Pixel, or any other third-party analytics services that place cookies on your device.
- Social Media Cookies: We do not embed social media widgets that place cookies on your device.
- Cross-Site Tracking: We do not participate in any cross-site tracking or share cookie data with third parties.
5. How to Manage Cookies
Most web browsers allow you to control cookies through their settings. You can typically find these settings in the "Options", "Preferences", or "Settings" menu of your browser:
- Google Chrome: Settings > Privacy and Security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Apple Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
Please note that disabling essential cookies may affect the functionality of the Website. However, since we only use essential cookies, blocking all cookies should not significantly impact your experience.
6. Lawful Basis for Data Processing
Where we process personal data through the App or Website, we rely on the following lawful bases under Article 6 of the UK GDPR:
- Consent (Article 6(1)(a)): You consent to data processing when you choose to use specific features, such as scanning food labels for AI analysis.
- Contractual Necessity (Article 6(1)(b)): Processing is necessary to provide the services you have requested, including subscription management and barcode lookups.
- Legitimate Interests (Article 6(1)(f)): We have a legitimate interest in maintaining the security, functionality, and performance of the App and Website. Essential cookies on the Website are used under this basis.
7. Your Rights Under GDPR
Under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR (where applicable), you have the following rights regarding your personal data:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you. Since all App data is stored locally on your device, you already have full access.
- Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data. You can edit your data directly within the App.
- Right to Erasure (Article 17): You have the right to request deletion of your personal data. See our Data Deletion page for instructions.
- Right to Restrict Processing (Article 18): You have the right to request restriction of data processing. You can achieve this by not using features that transmit data (e.g., AI scanning).
- Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Article 21): You have the right to object to processing of your personal data. Since processing occurs only when you actively use features, you control when processing happens.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
To exercise any of these rights, please contact us at support@octopye.com. We will respond to your request within 30 days.
8. Changes to This Policy
We may update this Cookie & Data Policy from time to time to reflect changes in technology, legislation, or our practices. We will notify you of any changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
9. Related Policies
- Privacy Policy — Learn about how we handle your personal data.
- Delete Your Data — Instructions for deleting your data and submitting data requests.
10. Contact Us
If you have any questions about our use of cookies, local storage, data processing, or this policy, please contact us: