Privacy Policy

Last updated: 13 November 2026

Tolerize is an oral immunotherapy (OIT) tracker for Android and iPhone. Families use it to follow a child's food immunotherapy plan as their allergist set it: today's dose and how to prepare it, a shared dose log, reminders, and doctor visits. Tolerize is invite-only: an allergy clinic enrols the patient and sends the family an invite. This policy explains what data Tolerize handles, why, where it is kept and who can see it.

Tolerize is provided by JOEY ANDROID APPS, a sole proprietorship in Port Moody, British Columbia, Canada ("we"). Contact: [email protected].

Summary

Tolerize has no advertising, no analytics and no third-party trackers, and we never sell or rent your data.
Your plan and dose log are health information. They are stored encrypted on a server in Canada (Toronto) and shared only with the people in your household and the clinic that enrolled you.
You can delete your account in the app at any time (Account → Delete my account).

Data Tolerize handles

Data	Why	Who provides it
Account: your email address and a password (stored only as a one-way hash). For each person you add to your household: their name as you enter it and their email.	To sign you in, and so everyone in the household sees the same plan and log.	You
The treatment plan: the food, the protocol, the current step and its dose, how to prepare it, sick-day guidance and the clinic's contact details. The clinic may also keep a short note to recognise you (for example initials), which only the clinic sees.	This is what the app shows you.	Your clinic
Dose log: the days a dose was given or held (with the reason you choose: sick, travel or other), the time, and who logged it; the batches you make (date and number of doses).	So the household doesn't miss or double a dose, and so your clinic can support your care.	You and your household
Reminders and visits: the reminder time and who is reminded first, alert preferences, doctor-visit dates and notes, and the "what to bring" checklist.	To ring the right phones at the right time.	You, your household or your clinic
Technical: the phone platform (Android/iPhone) and app version, when the app last reached the server, a push-notification token for each signed-in phone, and the IP address of each request in the server's logs.	To deliver notifications, support you, and keep the service secure.	Your phone

Tolerize does not collect your location, contacts, photos, advertising identifiers or any data from other apps.

Who can see it

Your household: everyone you add sees the same plan, dose log, reminders and visits. You can remove someone at any time.
Your clinic: the allergist and staff of the clinic that enrolled you see your plan, your account email, and a summary of the dose log (for example the last dose and any skipped days). Front-desk staff see appointments only. Every clinic sign-in and change is logged. The clinic keeps its own medical records separately; this policy does not cover them.
Us: only to run, secure and support the service, using individual, logged administrator access.

Service providers

We use a small number of providers to operate Tolerize. None may use your data for their own purposes.

Provider	What for	What they receive
DigitalOcean (Toronto, Canada)	Hosting the server and database	The encrypted database and backups
Google Firebase Cloud Messaging, and Apple Push Notification service on iPhone	Instant notifications to the other phones in your household	A device token, the day, the kind of event (given, held, undone) and the first name of the person who logged it. Never the food, the plan or the dose.
Proton (Switzerland)	Sending invite and password-reset emails from [email protected]	Your email address and the message
Cloudflare	Delivering the tolerize.ca website (not the app's data)	Website visitors' IP addresses

How it is protected

All traffic between the app and the server uses HTTPS (TLS).
The database is encrypted at rest (AES-256) and kept on a server in Canada. Backups are encrypted the same way and stay in Canada.
Passwords and sign-in tokens are stored only as one-way hashes. Sign-ins are rate-limited.
On the phone, your sign-in and the cached plan are excluded from cloud backups and device transfers.

Children

Tolerize is used by parents and caregivers (adults) to manage a child's treatment. Children do not have accounts. A child's treatment information is entered by their clinic and their caregivers.

Retention and deletion

Your data is kept while your account exists.
Delete in the app: Account → Delete my account. For the parent the clinic invited, this deletes your account and the household's dose log, batches, visits, reminder settings and everyone's sign-ins at once. For another household member it removes only their own sign-in. See how to delete your account for other ways.
Deleted data leaves the live database immediately and the encrypted backups within 14 days. Server logs (IP addresses) are kept for up to 14 days.
A record that an account was deleted, without any health data, is kept in the security audit log.

Your rights

You can ask to see the personal information we hold about you, to correct it, or to delete it, by emailing [email protected]. We answer within 30 days. Tolerize is governed by British Columbia's Personal Information Protection Act; if you are not satisfied with our answer you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Permissions

Permission	Why
Internet / network state	To reach the Tolerize server, and to send a dose logged offline as soon as a connection returns.
Notifications	Dose reminders, the household alert, and doctor-visit alarms. Asked for when you turn a reminder on.
Alarms (Android: `USE_EXACT_ALARM`, `SCHEDULE_EXACT_ALARM` up to Android 12, `RECEIVE_BOOT_COMPLETED`)	So reminders ring at the time you set, including after the phone restarts.

Changes

We will post any change here with a new date, and tell you in the app if it is significant.