Consumer Health Data Privacy Policy

1. What we collect, and how we use it

What we collect

• Allergies — the allergies you set for yourself and for the people you add to Your table, such as peanuts, gluten or shellfish.
• Diets and dislikes — the diets you set, such as low-sodium or vegan, and the foods you or the people you add would rather avoid.
• What you ask — what you type or say when you ask for a recipe, change one, or ask a question while cooking, when it mentions a health need (for example “my son is allergic to peanuts”).
• Preferences inferred from your ratings — when you rate a recipe, we note its diets along with its other features, and use your ratings to infer what you like and avoid.

How we use it

• To write the recipes and answers you ask for. Allergies, diets and dislikes go with your requests to our AI provider, merged into one list without anyone’s name. For a new recipe, or a change you ask for in a chat, that’s the needs of the people eating; when you change a recipe from its page or ask a question while cooking, everyone’s allergies; and when a recipe is rewritten from its page, everyone’s diets and dislikes too. What you ask goes with it, and recipe requests also carry preferences inferred from your ratings.
• To shape what you see in the app. On your iPhone, the app uses allergies and diets to filter the recipes you browse, and shows a warning on a recipe whose labels or ingredients list one of your table’s allergies.
• To keep records of your requests. When you ask for a recipe, we keep a record of the request with your account, including what you asked for and the allergies, diets and dislikes sent with it. We use these records to count usage and cost, and to check and improve the recipes the app makes. The first part of each question you ask while cooking, or change you ask for on a recipe’s page, is kept the same way, to count usage and cost.
• To keep your preferences with your account. A copy of your own allergies, diets and dislikes is stored with your account. The people you add are saved on your iPhone, not with your account; their needs reach our servers only in the requests described above, without their names.
• To find and fix problems. Some diagnostic logs include needs sent with a request. When a change to a recipe has to be redone, or can’t be made, because of an allergy, or a named dish can’t be made because of one, the log includes the allergies sent with it. When a recipe is redone because it missed a diet you asked for, the log names that diet. For a named dish, the log includes the web search used, which can name a diet.

2. Where it comes from

• You, when you set your own allergies, diets and dislikes, or type or say what you want.
• You, about the people you cook for, when you add them to Your table.
• Your recipe ratings, from which we infer preferences.

3. Consumer health data we share

We don’t sell consumer health data.

We share one category with a third party: what you say to the app, which can mention an allergy, diet or dislike, goes to Apple for speech recognition when your iPhone can’t transcribe it on device.

The service providers in section 4 also receive the categories in section 1, to run the app for us.

4. Who receives it

Third parties

• Apple — speech recognition, when your iPhone can’t transcribe what you say on device.

Affiliates

None.

Service providers that process it for us

• Anthropic (AI provider) — the allergies, diets and dislikes sent with your requests, what you ask, and preferences inferred from your ratings, to write recipes and answers.
• Supabase (database and server host) — stores your own allergies, diets and dislikes, records of your requests, your ratings, and diagnostic logs.
• ElevenLabs (text to speech) — when you cook hands-free, the answer being read aloud, which can mention an allergy.

5. Your rights and how to use them

Under the My Health My Data Act, you can:

• Confirm and access — ask whether we collect, share or sell your consumer health data, get a copy of it, and get a list of the third parties and affiliates we’ve shared or sold it to, with a way to contact them.
• Withdraw consent — to our collecting and sharing it.
• Delete — have it deleted.

How to make a request

• By email — write to hello@promptbite.app and say which right you want to use. We may ask for information to confirm the request is yours.
• In the app — withdraw your agreement to AI processing in Profile → Legal & privacy → AI & your data, which stops sending from then on. Delete your account in Profile → Legal & privacy → Delete my account; our Privacy Policy (§5) explains what that erases and what we keep. Change or remove your own allergies, diets and dislikes in Profile → Preferences, and the people you cook for in Profile → Your table.

When we answer

We answer within 45 days of receiving your request. If we need longer, we may extend that once, by up to 45 more days; if we do, we’ll tell you why within the first 45 days.

Appeals

If we decline to act on your request, you can appeal by replying to our answer or by emailing hello@promptbite.app with “Appeal” in the subject. Within 45 days of receiving your appeal, we’ll tell you in writing what we did or didn’t do, and why. If we deny your appeal, you can file a complaint with the Washington State Attorney General.