Consumer Health Data Privacy Policy

Scope and contact

This policy describes how Ate Plates LLC handles consumer health data through the beta. It supplements our Privacy Policy and controls for consumer health data if the policies conflict. “Consumer health data” includes personal information linked or reasonably linkable to you that identifies health status, including qualifying inferences. Rights under Washington’s My Health My Data Act, Nevada’s consumer health privacy law, and other laws apply where their requirements are met.

Contact Ate Plates LLC at hello@ateplates.com for questions or requests.

Data, sources, and purposes

We collect allergies, intolerances, health-related dietary restrictions, and other health details you choose to enter in setup, meal logs, chats, or support messages. Meal photos, dish descriptions, portions, meal dates, plans, and shopping selections may reveal health information. We also generate estimated nutrition and inferred preferences or restrictions that may identify health status. Account identifiers associate this information with you.

Sources are you and your interactions; photos made available through your device permissions; information you are authorized to provide about another person; and AI analysis of those inputs. The Apple Health integration exports Ate Plates estimates and does not import existing Health records.

We process this data electronically, including storing it and using cloud AI, to log and identify meals, answer planning requests, personalize recipe suggestions, estimate nutrition, assemble requested shopping lists, provide optional Health export, and respond to support requests. Inferences are fallible and are not diagnoses.

What is shared and with whom

Google Cloud and Firebase, our infrastructure and authentication providers, process stored app information, including the health data described above and related account identifiers. OpenAI, our AI provider, processes relevant text, photos, restrictions, and inferred information to deliver recognition, conversation, nutrition estimates, and suggestions. Recipe-related searches may reflect your dietary requests.

If you request an Instacart shopping link, ingredient and shopping selections are shared with that grocery service and may reveal dietary restrictions. If you enable Apple Health export, meal names, times, and nutrition estimates are written to Apple Health. Support providers may process health details you include in a support request. Authorized personnel may access relevant data to provide support and operate the service.

We do not share consumer health data with corporate affiliates. We do not sell consumer health data, use it for targeted advertising, or use geofencing around healthcare facilities to identify or track people. We do not authorize third parties to collect consumer health data across websites or services for tracking through our app. Our landing page uses Google Analytics for website traffic; this health-policy page has no analytics, and app health information is not intentionally sent to website analytics. External services you choose to visit may collect information under their own policies.

Any legally compelled disclosure or transfer of the business remains subject to applicable health-privacy requirements. We collect and share consumer health data with consent or to the extent otherwise permitted by applicable law, including where necessary to provide a service you request. This policy and acceptance of the Terms do not replace any separately required consent.

Access, correction, deletion, and consent

Email hello@ateplates.com with “Health privacy request” to request access, correction, deletion, or withdrawal of consent. Identify your account and request without sending unnecessary medical details. We may ask for information reasonably necessary to verify your identity; you do not need to create a new account.

Where applicable, you may confirm whether we collect, share, or sell your consumer health data; access it; obtain a list of recipients with contact information; withdraw consent to collection and sharing; and request deletion. We will not unlawfully discriminate for exercising these rights. Withdrawing consent may prevent features that depend on the information.

You can review meal information in the journal and learned entries in Kitchen Notes. Meal edits and archived notes do not necessarily erase stored source data or inferences. You can delete your account and its data, including consumer health data, in the app under Settings › Delete Account; the Privacy Policy describes the timing. Request broader correction or deletion by email. For valid deletion requests, we will delete covered data and notify relevant recipients as required by applicable law. Turning off Auto-detect or Health export does not erase previous uploads or exports; manage exported records in Apple Health as well.

For covered Washington requests, we respond within 45 days of receipt; when permitted and reasonably necessary, we may extend once by 45 days with an explanation during the initial period. Washington backup deletion may be delayed only as permitted by law and no longer than six months after authentication. Other requests follow the applicable legal time limits.

If we decline a request, we explain why and how to appeal. Reply to hello@ateplates.com with “Health privacy appeal.” We respond within the applicable statutory period; for Washington, within 45 days. You may also complain to the Washington Attorney General, the Nevada Attorney General, or another appropriate regulator.

Changes to this policy

We will update the effective date and notify affected users of material changes through the app or email. We will provide disclosures and obtain affirmative consent before adding categories, purposes, or recipients when required by law. Posting a revision is not consent.