Privacy — Cautela
Last updated 23 September 2026
The principle
Cautela states your allergies in the language of the place you are in. It has no account and no server of ours. We never receive, store or see any of your data. There is nothing for us to sell, lose or hand over, because there is nothing on our side to begin with.
What the app keeps
Cautela records what you put into it:
- the allergies you add to a profile, and their severity
- the profiles you create, for yourself and for family
- your treatments and their expiry dates
- the reactions you record in the journal
Where it lives
On your device. If you turn iCloud on, it also syncs through your own private iCloud database, which Apple encrypts and which we cannot open, read or list. We have no key and no access of any kind.
What it asks permission for
Every one of these is optional. Refuse any of them and the rest of the app keeps working.
- Health
- To read your clinical records when you ask, and to write the symptoms of a reaction. See the Health section below.
- Notifications
- For the expiry reminders on an auto-injector. Scheduled on the device by iOS.
- iCloud
- To sync your profiles between your devices, through your own iCloud account.
Health
Cautela reads the allergy records in your clinical health records, but only when you ask it to, and it keeps nothing from them unless you add an entry to a card yourself. Anything that comes from Health stays on the device and is never put in iCloud — Apple requires that, and so do we. It writes one thing: the symptoms of a reaction you record, when Health has a type for them.
What leaves the device
Nothing. The app makes no network request of its own: no analytics, no crash reporting, no advertising, no third-party kit of any kind. It works in airplane mode.
The Wallet card is signed on the device. The allergen catalogue and the card phrases are bundled inside the app. Nothing is fetched, and no card ever leaves your device unless you share it yourself.
Your data is yours
Export everything, whenever you want, without asking us. Delete the app and what was only on the device is gone; what synced to iCloud goes when you remove it from your iCloud settings. We cannot recover any of it for you, because we never had it.
Children
The app is not directed at children and collects nothing about anyone, of any age.
Changes to this page
If the app ever starts doing something this page does not describe, this page changes first. The date at the top says when it last did.
Your rights
Quebec’s Law 25 and similar laws elsewhere give you the right to access, correct and delete the personal information a business holds about you. In our case the answer is the same every time: we hold none. Your information is on your device and in your own iCloud, where you can already read, change and delete all of it yourself.
Contact
Nidello — Canada — [email protected]