Tayberry is provided by Aloha Apps LLC ("we"). It is built privacy-first: the app has no accounts and no server of ours. Your child's health information stays on your device and, if you turn on sync, in your own iCloud. This policy explains exactly what that means.
You don't create an account to use Tayberry. We don't ask for your name, email, or phone number, and we don't build a profile of you.
Information you enter — your child's profile, flagged allergens, scan history, reaction log, bloodwork entries, epinephrine devices, and emergency plan — is stored locally on your device.
If you enable iCloud Sync in Settings, this data is also stored in your private iCloud account using Apple's CloudKit, so it can sync to your other devices. It lives in your iCloud, governed by Apple's terms, not on any Tayberry server.
We never receive, see, or store this information ourselves. Tayberry has no backend database of users.
Allergen, reaction, and bloodwork details are health information about your child. Because it stays on your device and in your own iCloud, you remain in control of it at all times.
Scanning a food label happens entirely on your device using Apple's on-device text recognition. Label photos are processed locally and are not uploaded.
Scanning a restaurant menu works differently — see "Reading menus with AI" below.
Restaurant menus often use decorative fonts that on-device text recognition can't read reliably, so the menu scanner uses a cloud AI service to read the menu photo. This feature is off until you turn it on: the first time you scan a menu, the app asks for your explicit permission and names the service before anything is sent. If you decline, no menu data is sent anywhere.
What is sent: only the photograph of the menu you choose to scan. The image is sent through our processing service, Cloudflare, to Google's Gemini AI, which reads the dish names and ingredients from the image and returns them to your device. A random, anonymous identifier (not linked to you or your Apple ID) is included only to enforce a daily usage limit.
What is never sent: your child's name, allergens, reactions, bloodwork, emergency plan, or any other information about your child or you. The menu photo is the only thing that leaves your device, and matching dishes against your child's allergens happens entirely on your device after the reading comes back.
Google processes the image to generate the reading and, per its API terms for this service, does not use it to train its models. Cloudflare acts only as a pass-through and applies protections equivalent to those described in this policy. Neither we nor these providers build a profile of you from menu scans.
To alert you about relevant FDA food recalls, the app fetches the public recall list from the U.S. FDA's openFDA service (api.fda.gov). This is an anonymous, outbound request for the public recall feed. We do not send your child's allergens, your identity, or any personal data with it — matching against your allergens happens on your device.
Subscriptions and any purchases are processed by Apple through the App Store. Apple handles payment and tells the app whether a subscription is active. We never see your payment details. See Apple's privacy policy for how Apple handles that transaction.
You can delete any child profile, reaction, scan, or other entry inside the app at any time, which removes it from your device and your iCloud.
You can turn iCloud Sync off in Settings. You can also remove the app's iCloud data through iOS Settings under your Apple ID › iCloud.
Tayberry is a tool for parents and caregivers, not directed to children. The information about a child is entered and controlled by the adult using the app and is never transmitted to us.
If this policy changes, we'll update the effective date above and the version included with the app. Material changes will be reflected in a future app update.
Questions about privacy? Email us at alohaapps1@gmail.com.