Security & privacy

How the connection works

• The connector uses OAuth 2.1, the industry standard for delegated access. You sign in on Allerwell's own page - your password (or Google/Apple sign-in) is never visible to the AI assistant.
• The assistant receives short-lived access tokens scoped to exactly the permissions and profiles you approved. All traffic is HTTPS.
• Access is read-only by design: no tool exposed to the assistant can write to your account.

Your data, your choice

• Nothing is shared until you explicitly click Allow on the consent screen.
• You choose which profiles are visible each time you connect.
• Disconnecting immediately invalidates the assistant's tokens (how to disconnect).

What happens to data the assistant reads

Once your data is shown inside ChatGPT or Claude, it is also handled under that assistant's own privacy policy:

• OpenAI Privacy Policy
• Anthropic Privacy Policy

Allerwell never sells your personal data and never shares it with an assistant you haven't connected. Full details: Allerwell Privacy Policy.

A note on health information

Your allergy and dietary data is sensitive. Only connect assistants you trust, and share only the profiles you need. The connector is a convenience for exploring your own data - it is not medical advice; for medical decisions, consult a qualified professional.