Consumer Health Data Privacy Policy
How AllergyNest handles consumer health data and how to use your rights over it. We don’t ask for health information, and we treat pollen and recall alert sign-ups as health data.
Policy update, October 28, 2026: you can now sign up for food allergen recall alerts by email. Our Privacy Policy, Consumer Health Data Privacy Policy and Terms of Use explain what a recall alert sign-up keeps, that alerts go only to confirmed addresses, and what the alerts can’t do.
October 19, 2026: doctors in our allergist directory, and the people who work at their practices, can now claim their listing. Our Privacy Policy, Cookie Policy and new Directory Listing Terms explain what a clinic account keeps. Readers still don’t need an account, and our pages still set no cookies for them.
October 17, 2026: you can now sign up for pollen alert emails. Our Privacy Policy and Consumer Health Data Privacy Policy explain what a sign-up keeps and how to delete it.
This policy explains how Faz LLC, which operates AllergyNest (allergynest.com), handles consumer health data and how you can use your rights over it. It is our consumer health data privacy policy under Washington’s My Health My Data Act, Nevada’s Senate Bill 370 and Connecticut’s consumer health data rules. Our Privacy Policy covers everything else. This version is effective October 28, 2026.
What consumer health data means
Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. It covers more than medical records. An allergy, a symptom or a treatment can count, and so can information showing that you were seeking health care services.
What we collect
We don’t ask for health information. Readers don’t need an account, and we have no quizzes or forms that send us anything about your health. Our symptom tools, Cold or allergies? and the allergy symptom quiz, work only in your browser: your answers aren’t sent to us, and they’re gone when you leave the page. Our pages set no cookies for readers and load no advertising or tracking technologies.
Clinic accounts, which doctors and people who work at their practices use to manage a listing in our allergist directory, hold their name, email address and role, and the details they add about the practice. They don’t hold health data about anyone, and the Directory Listing Terms forbid adding anything about a patient.
We collect two kinds of consumer health data on purpose, with your consent:
- Pollen alert sign-ups. If you sign up for pollen alert emails, we keep your email address and the metro you choose. We don’t ask about your health, but signing up for pollen alerts could suggest that you have a pollen allergy, so we treat a sign-up as consumer health data. We collect it only if you tick the consent box on the sign-up form. If you don’t then confirm your address from the email we send, we delete it within 7 days. Our Privacy Policy lists everything a sign-up keeps.
- Recall alert sign-ups. If you sign up for food allergen recall alerts, we keep your email address and the allergens you choose, or that you chose all nine. The allergens you choose could suggest that you, or someone you care for, has a food allergy, so we treat a sign-up as consumer health data. We collect it only if you tick the consent box on the sign-up form, and we delete it within 7 days if you don’t confirm your address. Our Privacy Policy lists everything a sign-up keeps.
We send alert emails only to addresses that have been confirmed.
Two other things might count as consumer health data:
- Request logs. For every page you request, our hosting provider processes your IP address together with the address of the page. That page may be about an allergy topic, such as a guide to a food allergy. Together, these could suggest that you were reading about an allergy.
- Emails you send us. If you choose to tell us about your health in an email, we receive that information.
We also count visits with Vercel Web Analytics, our hosting provider’s visit counter. It records which pages are viewed, without your IP address, without search text such as a ZIP code, and without any identifier that lasts longer than 24 hours, and it shows us only totals. We don’t use it to learn anything about any person. If your browser sends a Global Privacy Control or “Do Not Track” signal, your visit isn’t counted. Our Privacy Policy lists exactly what it records.
Why we have it
- Request logs: only to deliver the page you asked for and to keep the site secure and working.
- Emails: only to reply to you and keep a record of the conversation.
- Alert sign-ups: only to send you the pollen or recall alert emails you asked for, and the emails needed to confirm and manage your sign-up.
We never use any of them to infer anything about your health.
Where it comes from
- Your browser, when it requests our pages.
- You, if you email us or sign up for pollen or recall alerts.
Who receives it
- Vercel Inc., our hosting provider, processes request logs on our behalf to deliver the site and protect it from abuse, and counts visits for us.
- Google LLC, through Google Workspace, hosts our mailbox and processes the emails you send us on our behalf.
- Neon, our database provider, stores alert sign-ups on our behalf.
- Resend, our email delivery service, processes your email address and the emails we send you on our behalf.
Apart from these service providers, we don’t share consumer health data with anyone. We share it with no third parties and no affiliates. Apart from our hosting provider’s visit counter, our pages load no outside scripts. So apart from our hosting provider, which processes requests and counts visits for us, no one collects data through AllergyNest, and no third party can use our pages to track you over time or across websites.
What we never do
We never:
- sell consumer health data
- share it for any other purpose
- use it for advertising
- use it to infer anything about your health
- set up a geofence around a place where health care is provided. We never receive your device’s location.
Your rights
You have the right to:
- Confirm and access. Ask whether we collect, share or sell consumer health data about you, and get access to it.
- Get a list of recipients. Ask for a list of all third parties and affiliates with which we have shared or sold your consumer health data, with a way to contact them. We don’t sell it and don’t share it with third parties or affiliates. We will tell you which service providers process it for us.
- Delete. Ask us to delete it.
- Withdraw consent. You can withdraw your consent to an alert sign-up at any time by unsubscribing, from the link in any of our emails or on your settings page. Unsubscribing deletes your email address and your metro or allergens straight away. You can also ask us by email, as described below.
You can also ask us to correct information that is wrong, as described in our Privacy Policy. We won’t treat you differently for using any of these rights.
We hold very little personal information. In most cases, the only information we could find about you is email you have sent us, your alert sign-up if you have one, and our host’s request logs, which are kept only for a limited time. You can see, change or delete your sign-up yourself from the settings link in any of our emails.
How to use your rights
Email hello@allergynest.com with the subject “Health data request” and tell us which right you want to use. We may need to confirm that the request came from you, usually through the email address you write from. We won’t ask for more information than we need for that.
We answer within 45 days. If we need more time, we may extend this once, by up to 45 more days. If we do, we will tell you within the first 45 days and explain why.
Appeals
If we decline all or part of your request, we will explain why. You can appeal by replying to our decision with the word “Appeal”. We will answer your appeal in writing within 45 days and explain our decision. If we deny your appeal, we will tell you how to contact the attorney general. If you live in Washington, you can contact the Washington State Attorney General.
If we add other features
If we add any other feature that collects consumer health data, such as a symptom tool, we will:
- collect only what is needed to provide what you asked for
- ask for your consent where the law requires
- update this policy before we start
Changes to this policy
28 October 2026: ahead of opening food allergen recall alerts, we added recall alert sign-ups. We treat a sign-up, which keeps your email address and the allergens you choose, as consumer health data, collect it only with your consent, and delete it when you unsubscribe. We also said that alert emails go only to confirmed addresses.
19 October 2026: we noted that clinic accounts, which open soon for doctors and their practices, hold no health data, and that pages still set no cookies for readers.
17 October 2026: we added pollen alert sign-ups. We treat a sign-up as consumer health data, collect it only with your consent, and delete it when you unsubscribe. We added Neon and Resend to the service providers that process it for us. We also added two symptom tools, Cold or allergies? and the allergy symptom quiz, which work only in your browser and send us nothing.
When we change this policy, we will update the “Last updated” date on this page. For material changes, we will post a notice on the site before they take effect.
Contact us
Write to us at hello@allergynest.com. For requests about consumer health data, please use the subject “Health data request”.
Questions about this page? Email hello@allergynest.com.