# Consumer Health Data Privacy Policy > How SafeMeal collects, uses and protects consumer health data under the Washington My Health My Data Act and similar U.S. state laws, and how to exercise your rights. Version 1.1, effective 2026-10-12. ## 1. Scope This policy applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada's law on consumer health data (SB 370), Connecticut's Data Privacy Act and similar U.S. state laws, for the people those laws protect: under the Washington and Nevada laws, that includes people whose data is collected while they are in that state, such as travellers. It is published by **Moty Studio LLC**, which provides SafeMeal. It completes our [Privacy Policy](/privacy), which describes all the personal data we process. ## 2. Consumer health data we collect SafeMeal can collect the following consumer health data, **only in the cases listed in section 3**: - **Food allergies, intolerances and other food restrictions** of the people you create profiles for: the foods to avoid, their severity (such as "severe allergy"), the kitchen precautions (such as avoiding cross-contamination), and presets that can reveal a condition (such as "Coeliac disease" or "Peanut allergy"). - **Information you choose to write or show** in a support message or a food request, including in the photos and screenshots you attach, if it relates to health. SafeMeal does not diagnose anything and does not ask for medical records. A condition you choose to tell us (for example by picking the "Coeliac disease" preset or writing it in a message) is collected as described here. We do not collect medical records, medications, precise location, biometric or genetic data, and we do not infer health information from other data. ## 3. Sources and purposes We collect consumer health data **directly from you**, or from the person who created a profile about you (such as a parent or a partner), and only: | When | What we do with it | | --- | --- | | You **sign in** to back up your profiles, after giving your consent | Store your profiles in your account and restore them on your devices | | You **create a share link** for a profile | Show that profile's foods, severity and precautions to the people who open the link (never its name) | | You **write to us** | Answer your message and, for a food request, consider adding the food to our catalog | Without these actions, your profiles stay on your phone (and in your phone's own backups, run by Apple, Google or your phone's maker, if you use them) and we never receive them. We use consumer health data only to provide the service you asked for, to keep it secure, and to comply with the law. **We never use it for advertising, marketing, profiling, statistics or to train artificial intelligence.** ## 4. Consent We collect consumer health data with your **consent**, given with the checkbox shown before you sign in, or when it is necessary to provide the feature you ask for (a share link you create, a message you send). You can **withdraw your consent** at any time by deleting your account in the app (Settings → your account → Delete my account), or by writing to us. We stop the processing and delete the data, as explained in section 7. ## 5. Sharing **We do not sell consumer health data**, and we do not share it with third parties for their own purposes. It is disclosed only: - to our **service providers (processors)**, which store and process it for us under contract and only on our instructions: Google (Firebase and Google Cloud: database, server functions and file storage) for profiles and share links; and, for health information you write or show (in a screenshot) in a message, Resend (email delivery), Cloudflare (email reception) and Google (Gmail, our team's mailbox); - **at your direction**: the people you give a share link to can see the shared card; - when the **law** requires it. We have no affiliates that receive consumer health data. ## 6. Your rights You have the right to: - **correct** it: you can edit your profiles directly in the app, or ask us; - **confirm** whether we collect, share or sell your consumer health data, and **access** it, including the list of the third parties and affiliates with which we shared it and their contact information; - **delete** it, including from the service providers that process it for us and from our own backups (our database's restore points are replaced within 7 days); - **withdraw your consent**; - **appeal** our decision about your request. ## 7. How to exercise your rights - **In the app:** Settings → your account → **Delete my account** deletes your account, your backed-up profiles, your share links and your support messages. See [how to delete your account and data](/delete-account). - **By email:** write to [support@safemeal.app](mailto:support@safemeal.app) with the subject "Health data request". We may ask you to confirm the request comes from you, for example by writing from the email address linked to your account. We answer within **45 days**, which we may extend once by another 45 days when reasonably necessary; we will tell you if we do. **Appeals.** If we refuse your request in whole or in part, you can appeal by writing to [support@safemeal.app](mailto:support@safemeal.app) with the subject "Appeal", within a reasonable time after our answer. We will answer within 45 days and explain our decision. If your appeal is denied, you can contact the Attorney General of your state: [Washington](https://www.atg.wa.gov/file-complaint), [Nevada](https://ag.nv.gov/Complaints/File_Complaint/), [Connecticut](https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act). ## 8. Other information - No third party collects consumer health data about your activity over time and across different apps or websites through SafeMeal. - When we change this policy, we post the new version here with its date, and we tell you in the app before a material change takes effect. If a change requires your consent, we ask for it. - What we disclose for professional advice, legal obligations or a sale of SafeMeal (Privacy Policy, section 6) never includes consumer health data beyond what the law requires. ## 9. Contact Moty Studio LLC 30 N Gould St, Ste R Sheridan, WY 82801 United States Email: [support@safemeal.app](mailto:support@safemeal.app)