Draft, not yet in effect. This policy is awaiting legal review and will take effect when Shelfsmith is released.

Consumer Health Data Privacy Policy

Last updated September 21, 2026

Some US states, including Washington under its My Health My Data Act and Nevada, treat information about diets and food allergies as "consumer health data" and require a separate policy explaining how it is handled. This is that policy. It adds to our main Privacy Policy, which covers everything else.

What consumer health data we collect

Only if you give permission in the app:

Diets you follow, such as vegetarian, vegan, gluten free or dairy free.
Ingredients you never want to see, which you may use for food allergies or intolerances.

Separately, the groceries in your pantry and on your receipts could, in principle, suggest dietary needs (for example, lactose-free milk). We do not analyse your pantry or receipts to draw conclusions about your health.

How we collect it

Directly from you, when you choose diets or excluded ingredients in Settings. We do not collect consumer health data from any other source.

Why we collect it and how we use it

Only to filter the recipes shown to you, so that you do not see recipes that conflict with your diets or contain ingredients you have excluded. We do not use it for advertising, and we do not use it for any other purpose.

Your consent

We ask for your permission before we store any of it. Without permission, the app keeps these settings empty. You can withdraw permission at any time in Settings, under Privacy, and doing so immediately erases your diets and excluded ingredients. You can use every other part of the app without giving this permission.

Who can see it and who we share it with

Not your household. Your diets and excluded ingredients are private to you and never shown to other members.
Supabase, our hosting provider, stores it on our behalf as a processor. It may not use it for its own purposes.
No one else. We do not sell consumer health data, share it with third parties, or send it to our AI provider.

Your rights

You have the right to:

Confirm whether we hold your consumer health data, and see it: it is shown in the app under Settings.
Get a list of the third parties and processors it has been shared with. This is the list above.
Withdraw consent, which erases it, in Settings at any time.
Delete it, by withdrawing consent or by deleting your account in Settings, under Privacy.

To exercise any of these rights by email, contact lindellrhett@gmail.com. We respond within 45 days, and will tell you if we need up to 45 more. If we decline your request, you may appeal by replying to our decision. We will respond to your appeal within 45 days, and if you remain unsatisfied you may contact the Washington State Attorney General at atg.wa.gov or your own state's attorney general.

Contact

Rhett Lindell, lindellrhett@gmail.com