Allura Health & Wellness App Privacy Policy

Effective date: August 11, 2026
Last updated: August 11, 2026

Allura Health & Wellness is operated by Hydrogen Max LLC, DBA Allura Health & Wellness ("Allura," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the Allura Health & Wellness mobile application, including its iPhone, iPad, and Apple Watch experiences (collectively, the "App").

The App is distributed through Apple's App Store by MSWEBMAKER LLC on behalf of Allura. Hydrogen Max LLC, DBA Allura Health & Wellness, operates the App, determines how Allura patient information is handled, and is responsible for this policy.

This policy applies to the App and the patient features reached through it. Allura's public website and online store have separate privacy terms. If you follow a link from the App to the Allura website, online store, payment page, form, or another service, the privacy terms shown by that service may also apply.

1. Information the App Handles

The App may handle the following categories of information, depending on the features you use.

Account, identity, and contact information

First and last name.
Email address and telephone number.
Mailing address, city, state, country, and postal code.
Date of birth and biological sex when maintained in your verified patient profile.
Allura patient/contact identifiers and account status.
One-time verification requests, authentication tokens, and saved-device login status.

Allura creates and approves patient access. The App does not offer public self-service patient account creation. Some verified identity fields cannot be changed directly in the App and require Allura staff review.

Patient, care, and health-related information

Appointment details, including requested or scheduled service, date and time, clinician, location, and appointment status.
Visit counts, check-in status, and patient-profile completion status.
Required form, consent, and submission status and related metadata.
Documents, images, lab files, and other records you choose to photograph, select, or upload for the Allura care team.
Care-team recommendations, product or service recommendations, and eligibility or access information.
Health-related interests and preferences that you choose in the App.
Membership-related care benefits and booking rules.
If your Allura profile is linked to Heads Up Health and the feature is active, selected dashboard information such as recent sleep, hydration, steps, and lab-marker summaries.

The App does not read from or write to Apple Health or HealthKit in the current version.

Membership, billing, shopping, and transaction information

Membership plan, status, start and renewal information, benefits, commitment, balance due, and cancellation status.
Allura Cash balance, ledger entries, and related transaction history.
Stripe customer, subscription, checkout-session, invoice, and payment-status information.
Shopping cart contents, checkout state, purchased item names, order amount, currency, pickup or booking requirements, and recent order receipts.
Appointment deposit and payment status.

Allura does not receive or store your complete payment-card number through the App. Payment-card information entered on a Stripe-hosted checkout or billing page is processed by Stripe under Stripe's terms and privacy policy.

Files, camera, and photo-library selections

When you choose to upload a document, the App receives the specific file, image, or camera photo you select, along with its filename, file type, category, upload identifier, size, and upload date. The App uses Apple's system photo picker where available and does not scan your full photo library.

Communications, interests, and feedback

Messages and contact details you submit when asking Allura about a service or requesting access.
App feedback, including your selected category, optional rating, message, source screen, App version, and build number.
Notification choices for appointments, documents, membership and Allura Cash, and Heads Up dashboard updates.
Health and wellness interests selected in the App.

Health-related interests and patient health information are used for care coordination, patient support, and in-App personalization only. We do not use them for advertising, marketing, or use-based data mining, and we do not sell them.

Device, security, and diagnostic information

Apple Push Notification service device token, device platform, App version, build number, and notification preferences.
Limited operational events, such as App launch, an unclean prior session, event name, severity, source, optional error message, platform, and event time.
Saved-device authentication token when you enable Face ID or device-passcode login.
Locally stored notification preferences, checkout recovery state, cart contents, and recent order summaries.

Face ID and device-passcode verification are performed by Apple's operating system. Allura does not receive or store your facial image, Face ID template, or device passcode; the App receives only the result of the device authentication check.

Apple Watch information

If you use the companion Apple Watch App, the iPhone App may send the Watch a limited snapshot containing your next eligible appointment, appointment location and status, membership plan and status, Allura Cash balance, reminder preference, and the time of the last update. This information is transferred through Apple's WatchConnectivity framework and stored on the Watch in device-only Keychain storage. It is cleared when the Watch receives a signed-out state and is treated as stale after 24 hours.

2. How We Collect Information

We collect information:

Directly from you, when you enter contact information, choose interests, update your mailing address, upload a file or photo, submit feedback, make a booking or purchase, change a notification preference, or request account deletion.
From Allura's clinical and business systems, including the patient profile, forms, appointments, recommendations, membership, wallet, and communication information associated with your approved account.
From service providers, such as payment and subscription status from Stripe and linked dashboard information from Heads Up Health.
Automatically from the App and device, such as a push token, App version, notification preference, and limited operational event data.

The App asks for camera, photo-selection, notification, and Face ID/device-authentication access only when relevant to a feature you choose to use. You can decline optional permissions, although the related feature may not work.

3. How We Use Information

We use information to:

Verify your approved Allura patient access and maintain secure sessions.
Display and maintain your patient profile.
Coordinate care and respond to patient-support requests.
Show appointments, available times, form requirements, submitted forms, and patient documents.
Let you upload records for review by the Allura care team.
Process booking requests, check-ins, deposits, purchases, membership enrollment, membership billing, and cancellations.
Maintain and display Allura Cash and transaction history.
Provide linked Heads Up dashboard information when you have access to that feature.
Use your selected interests to personalize care resources and recommendations inside the App.
Deliver notification categories you enable.
Respond to feedback and troubleshoot reliability or security problems.
Prevent fraud, misuse, unauthorized access, and security incidents.
Meet legal, regulatory, accounting, clinical-record, and contractual obligations.

We do not use patient health information, uploaded records, health dashboard information, or health-related interests for third-party advertising, marketing, or use-based data mining.

4. How We Disclose Information

We disclose information only as needed to operate the App, provide requested services, protect patients and Allura, or comply with law. Service providers are required by contract or applicable law to protect information appropriately for the services they provide.

GoHighLevel / LeadConnector: patient/contact profiles, approved access, calendars and appointments, form status, documents and care-team workflow, preferences, notification registration, membership-related fields, tasks, and communications.
Amazon Web Services: the App API, authentication requests, operational logs, one-time-code email or SMS delivery, secure configuration, document-history metadata, and uploaded document objects. Patient files are maintained in access-controlled storage and delivered through time-limited links.
Stripe: contact and customer identifiers needed for checkout, checkout line items or plan identifiers, amount and currency, opaque booking or transaction references, payment status, billing-portal access, invoices, appointment deposits, and memberships. Payment credentials entered on Stripe pages are processed by Stripe.
Heads Up Health: selected linked dashboard summaries and access to the linked dashboard when that feature is active for your account.
Apple: App distribution, device permissions, Keychain and Face ID/device authentication, Apple Push Notification service, and iPhone-to-Apple Watch connectivity.
App development and technical-support providers: limited App or operational information only when Allura authorizes access to maintain, secure, or troubleshoot the App. These providers act for Allura and do not determine how Allura patient information is used.
Shopify and hosted forms: information you choose to enter after opening Allura's online store, a hosted patient form, or another linked webpage is also governed by the policy shown on that page.

We may disclose information when reasonably necessary to comply with law, valid legal process, licensing or regulatory obligations, or to protect the rights, safety, and security of patients, staff, Allura, or others. Information may also be transferred as part of a merger, acquisition, financing, reorganization, or sale of business assets, subject to appropriate protections and applicable law.

We do not sell patient health information or App personal information. The App does not contain third-party advertising SDKs and does not track users across other companies' apps or websites for advertising.

5. Notifications and Communications

You can choose whether to allow push notifications in iPhone Settings and can change App notification categories in Profile. Push notifications may concern appointments, documents, membership and Allura Cash, or a linked Heads Up dashboard. Because lock-screen notifications may be visible to others, we limit their content and do not intentionally place detailed clinical information in a push notification.

Push notifications are separate from SMS and email preferences. You may opt out of marketing email using the unsubscribe control in the message and may opt out of SMS by replying STOP. Turning off marketing does not prevent Allura from sending non-marketing communications necessary for requested care, transactions, security, or legal compliance.

6. Local Storage and Offline Access

The App stores a limited amount of information on your device so that security, checkout recovery, and selected features work reliably:

A saved-device login token is stored in device-only Keychain storage and protected by Face ID or device-passcode authentication when you enable that option.
Notification preferences are stored locally until changed or the App's data is removed.
A shopping cart may remain locally for up to 7 days.
A pending shop checkout may remain locally for up to 24 hours, and a pending checkout return may remain for up to 48 hours.
Up to 30 recent shop receipt summaries may remain locally until App data is removed or replaced by later receipts.
Secure API responses may be cached on the device for performance and are cleared during sign-out and selected security transitions.
An Apple Watch snapshot is stored in device-only Keychain storage, is cleared when the Watch receives sign-out, and is not shown as current after 24 hours without a refresh.

Removing the App generally removes data in its App container. Some Keychain items may persist through reinstall unless removed through the App, operating system, or account-deletion process. Disable saved-device login and sign out before transferring or sharing a device.

7. Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this policy, including providing care and App services, completing transactions, maintaining security and audit history, resolving disputes, and satisfying clinical, legal, licensing, tax, accounting, fraud-prevention, and contractual obligations.

You can start account deletion in the App from More > Profile > Account access > Request account deletion.

When you submit a deletion request:

Allura records the request, deactivates App login, disconnects App push notifications, and creates a staff work item for verified completion.
Allura reviews the request and deletes or de-identifies App-account information that it is not legally or operationally required to retain within 30 days.
Allura sends a completion confirmation to the verified email address on the account.

Some information may be retained after App-account deletion when required or permitted for clinical records, patient safety, informed consent, transaction and tax records, fraud prevention, dispute resolution, licensing, regulatory, or other legal obligations. Retained information is no longer used to provide App account access or for advertising or marketing. Deleting the App account does not automatically cancel an active membership or payment obligation; use the membership cancellation controls or contact Allura if billing still needs attention.

If Allura cannot complete a request without additional identity verification, we will contact you using verified information already associated with your profile. You may also contact care@allurahw.com about the status of a deletion request.

8. Your Choices and Rights

Depending on applicable law, you may have rights to request access, correction, deletion, or a copy of personal information; to restrict or object to certain processing; to withdraw consent; and to appeal certain privacy decisions. We may need to verify your identity before fulfilling a request.

You can also:

Change or clear health interests in the App.
Change App notification categories in Profile.
Turn all push notifications off in iPhone Settings.
Disable saved-device login in Profile.
Revoke camera or photo access in iPhone Settings.
Sign out to remove the active App session and clear secure API cache.
Request App-account deletion inside the App.
Contact Allura to request a staff-reviewed correction to verified identity or clinical information.

To submit a privacy request, email care@allurahw.com.

9. Health Information and Other Privacy Notices

Information handled through the App may be health information and may also be protected by federal or state health-privacy law depending on the service and Allura's legal role. Where an applicable Notice of Privacy Practices, patient consent, or other health-privacy notice governs particular information, that notice also applies and controls to the extent of a conflict.

The App privacy policy is separate from the online-store policy. The online-store warning not to submit medical records through Shopify remains applicable to the store website; patient documents should be submitted only through the App's designated secure upload feature or another channel approved by Allura.

10. Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted network connections, access controls, device-only Keychain storage for certain tokens, time-limited document links, and controls intended to separate patient accounts. No system can guarantee absolute security.

If you believe your account or information has been compromised, contact Allura promptly at care@allurahw.com or (786) 329-3465.

11. Age Eligibility

The App is intended for approved Allura patients who are at least 21 years old. It is not directed to children, and Allura does not knowingly provide independent App access to a person under 21. If you believe an underage person has used the App without appropriate authorization, contact care@allurahw.com.

12. International Processing

The App is operated from the United States. Information may be transferred to, stored in, or processed in the United States and other places where Allura's service providers operate. When required, Allura uses appropriate safeguards for cross-border transfers.

13. Changes to This Policy

We may update this policy to reflect changes to the App, our services, providers, or legal obligations. We will update the "Last updated" date and provide any additional notice required by law. If a change materially expands how we use sensitive information, we will request consent when required before applying that new use.

14. Contact Us

Allura Health & Wellness
Hydrogen Max LLC, DBA Allura Health & Wellness
Email: care@allurahw.com
Phone: (786) 329-3465
Address: 3363 NE 163rd St., Suite 704, North Miami Beach, FL 33160
Website: https://www.allurahw.com