Consumer Health Data Privacy Policy
This policy applies to "consumer health data" as defined by Washington's My Health My Data Act (RCW 19.373), Nevada's consumer health data law (SB 370), and similar state laws. It supplements our Privacy Policy. Where the two differ for consumer health data, this policy controls.
The short version: Some recipe filters you can pick, such as GLP-1, diabetic-friendly, heart-healthy, low-sodium, and food allergies, could reveal something about your health. We use those choices only to show you matching recipes and lists. We do not sell them. We do not share them with advertisers. You can delete them at any time.
1. Consumer health data we collect, and why
| Category | Examples | How we use it |
|---|---|---|
| Diet and health-mode preferences | GLP-1, diabetic-friendly, heart-healthy, low-sodium, keto, high-protein, carnivore | To filter and rank recipes and meal plans you ask for |
| Allergen and food-restriction preferences | Peanut, tree nut, gluten, dairy, shellfish | To exclude recipes containing those ingredients |
| Nutrition targets you enter | Calorie, protein, carbohydrate, or sodium targets | To filter recipes and build meal plans that fit your targets |
| Training-fueling targets you choose to import (if you use a connected training app) | Daily carbohydrate and protein grams and a training-load tier. We do not receive your weight, birth date, heart rate, or workouts | To suggest meals and grocery lists that fit that day's fueling targets |
We collect this data only to provide the recipe, meal-planning, and shopping features you request. If you are not signed in, your selections stay on your device and are sent to our servers only with the search they apply to. They are not stored against your identity. If you are signed in, your saved preferences are stored with your account so they follow you between devices.
We do not use precise location, and we do not geofence around any health-care facility. Our location data is limited to the ZIP code you enter.
2. Sources
We collect consumer health data only from you: what you select or type in the app. If you connect a training app you control, it comes from that app at your direction. We do not buy or receive health data from data brokers or other third parties.
3. Consumer health data we share, and with whom
We do not sell consumer health data. We do not share it with advertisers, data brokers, retailers, or loyalty programs. We share it only with service providers (processors) that operate the Service for us under contract, only as needed to deliver the features you request:
| Category of recipient | Provider | What they receive |
|---|---|---|
| Database and authentication hosting | Supabase | Saved preferences, if you are signed in |
| Application hosting | Fly.io | Preferences in transit while serving your request |
| Recipe content providers | Spoonacular, Tasty (via RapidAPI), TheMealDB | Diet, allergen, and nutrition filters attached to a recipe search. These are not linked to your name, email, or account |
| AI meal-planning provider | Anthropic (Claude) | Diet and nutrition preferences included in a meal-plan or "Ask" request you make. Not used for model training |
We have no affiliates that receive consumer health data. We may disclose data if required by law or valid legal process, or to a successor in a merger or acquisition, subject to this policy.
4. Your rights
- Confirm and access: you can ask whether we collect, share, or sell your consumer health data, get a copy, and get the list of every third party it was shared with, including how to contact them.
- Delete: you can delete it. Clear your diet and allergen preferences under Profile → Your preferences, delete your whole account under Profile → Delete Account, or email us. We tell our processors to delete it too. Copies held in backups are removed when those backups expire, within six months at most.
- Withdraw consent: you can stop us from using any health-mode preference at any time by turning it off. The app keeps working without it.
- No retaliation: we will not charge you more or give you a worse experience for exercising these rights.
To make a request, email hello@shoppersentinel.com with the subject "Consumer health data request." We will verify the request and answer within 45 days. If we need more time, we will tell you, and the total will not exceed 90 days. Requests are free up to twice in any 12-month period.
Appeals: if we deny your request, reply to our decision with "Appeal" in the subject line within 30 days. We will answer the appeal in writing within 45 days and explain our reasoning. If you are a Washington resident and are not satisfied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
5. Retention
Saved health-mode, allergen, and nutrition preferences are kept while your account is active. They are deleted when you clear them or delete your account. Account deletion completes within 30 days.
6. Contact
Sentinel Media Inc.
Email: hello@shoppersentinel.com
End of Consumer Health Data Privacy Policy.