Consumer Health Data Privacy Policy

• The allergens and dietary restrictions you select (for example, peanuts, milk, gluten).
• Whether you tolerate cross-contact risk.
• Free-text terms you enter under "Other," which are used on your screen and saved only if you save them to your account or your device.
• If you post a review while signed in, a snapshot of the restrictions on your saved profile at that time.

We do not collect medical records, diagnoses, medications, or biometric data, and we do not collect precise location for any health purpose.

Only to provide the service you request: showing which menu items match your restrictions and suggesting substitutes. We do not use it for advertising, profiling, or any unrelated purpose.

From you, when you make selections on a menu or save them to an account. We do not obtain this information from other sources.

• Restaurants, in anonymous, aggregate form only (for example, the number of scans that included a given allergen at that restaurant). Not your name, email, or account.
• Other visitors, only if you post a review, which can display the restrictions attached to it.
• Service providers that host and operate the service on our behalf, under limits that prevent them from using it for their own purposes.

We do not sell consumer health data, and we do not use it to target ads or to geofence any location.

You choose what to enter. We collect and use your selections to give you the screening you asked for. We will ask for your separate, clear consent before we use or share this information for anything beyond that, and we will never sell it without your written authorization. You can withdraw consent at any time by clearing your saved profile, deleting your account, or contacting us.

• Confirm whether we hold your health data and get access to it, including a list of who we shared it with.
• Correct it, by editing your saved restrictions in account settings.
• Delete it, by asking us to delete your account and data. We act within 30 days of a verified request.
• Withdraw consent for future collection or use.

To make a request, use the contact form on our About page and say you are making a health-data request. We may ask you to verify your identity by replying from your account email. If we decline, we will explain why. You can appeal by replying to that message, and we will respond in writing within 45 days. If you are still not satisfied, you may contact your state attorney general.

Health-related information is stored in our access-controlled database, passwords are hashed, and data is encrypted in transit. We keep it only as long as needed for the purposes above, as described in section 8 of our Privacy Policy.

If we change this policy in a way that affects how we collect, use, or share consumer health data, we will post the change here and obtain your consent where the law requires it before applying it to information we already hold.