Legal
Consumer Health Data Privacy Policy
This policy is required by Washington’s My Health My Data Act, Nevada’s consumer health data law (SB 370), and Connecticut’s privacy law. It covers the health-related information HealthyBite handles, and it applies to everyone who uses HealthyBite, wherever you live. HealthyBite is run by the operator of HealthyBite (“we”). Our general Privacy Policy covers everything else.
Health data we collect, and why
- Allergies and intolerances you avoid, such as peanut, gluten or dairy.
- Your severe-allergy note, the free text you type about a severe allergy.
- Diet patterns and lifestyles, such as low-FODMAP, diabetic-friendly, keto or vegan, which can reveal a health condition.
- Religious food rules, such as halal, kosher or Jain. These are religious belief data, and we protect them the same way.
- On reviews: the restrictions you choose to show, how each dish went for you, and anything about your health you write in the review text. Others may infer a health condition from these.
How we use it. Only to give you the Service:
- Your dietary profile is compared with each dish, on your device, to mark it ✓, ⚠ or ✕, and to sort restaurants by how well they fit. Your severe-allergy note highlights matching dishes.
- If you sign in and give consent, your dietary profile is stored with your account so it syncs across your devices.
- If you choose, your restrictions and dish outcomes are shown on your review so diners with the same needs can judge it.
- Review text is used to write an AI summary of each restaurant’s reviews.
We never use health data for advertising, and we never send your dietary profile to an AI provider.
Where it comes from
From you, and nowhere else: what you enter in your dietary profile, and what you choose to tag or write on a review. We don’t buy health data, and we don’t receive it from other companies. We don’t infer health conditions about you.
Health data we share, and with whom
As a guest, we receive none of your dietary profile: it stays on your device. When it does leave your device, it goes only to:
- Google Firebase (our database provider, a processor acting for us): your dietary profile, only if you consent to storing it with your account. It is stored, not used by Google for its own purposes.
- The public: your restrictions and dish outcomes on a review, only if you opt in for that review, and anything about your health you write in a review’s text, since reviews are public.
- Google Gemini (an AI provider): the text of public reviews, without names, to write review summaries. Review text may describe health experiences. Google may keep it for a limited period under its terms.
- Our email providers (Twilio SendGrid and Google Gmail): only health details you choose to put in a report or email to us.
- Authorities, only if the law requires it.
No third party collects health data about your activity over time and across websites through HealthyBite.
No sale, no geofencing
We do not sell consumer health data. We do not use geofences around health care facilities, or anywhere else, to collect data or send messages.
Your rights
You have the right to:
- Confirm whether we collect, share or sell your health data.
- Access it, including a list of every third party and affiliate we have shared it with, and an email address or other way to contact each one.
- Withdraw consent to our collecting and sharing it. In the app, go to Profile and switch off the setting that stores your dietary profile with your account; your profile is then removed from our cloud copy. To stop showing restrictions on a review, delete the review.
- Delete it. Delete your account in the app (Profile → Profile Settings → Account & Security → Delete account), or see how to delete your account.
How to ask. Use the tools in the app, or email Healthybiteapp@gmail.com from the email address on your account. We’ll confirm it’s you by that address, or by your being signed in. We respond within 45 days. If we need more time, we’ll tell you why and take no more than another 45 days. Using your rights is free and never changes how the Service works for you.
Appeals. If we decline your request, reply with “Appeal” in the subject. We’ll answer within 45 days and explain our decision. If you disagree with it, you can complain to your Attorney General:
- Washington: atg.wa.gov/file-complaint
- Nevada: ag.nv.gov/Complaints/File_Complaint
- Connecticut: portal.ct.gov/ag (complaint form)
- Other states: find your Attorney General
Changes
If we change this policy, we’ll update the date above and tell you in the app. We will ask for your consent again before using health data in a new way.