Consumer Health Data Privacy Notice
Overview
BuddyFood-AI ("we," "us," or "our") is a digital wellness and nutrition-planning service. We may collect information that qualifies as "consumer health data" under Washington State law, such as body metrics, dietary preferences, allergy/intolerance inputs, activity level, nutrition goals, progress updates, and derived nutrition targets. This notice explains how we collect, use, disclose, and protect that information.
This notice supplements our general Privacy Policy and applies specifically to Washington residents with respect to consumer health data. BuddyFood-AI is not a healthcare provider, does not provide medical diagnosis or treatment, and is not intended to replace advice from a qualified medical professional.
Who This Applies To
This Consumer Health Data Privacy Notice applies to Washington State residents who use BuddyFood-AI and whose consumer health data is collected, processed, shared, or sold by BuddyFood-AI. We may also use this notice as a transparency baseline for other users where similar health-data privacy laws apply.
- Washington State residents who visit or use BuddyFood-AI
- Users who complete our nutrition quiz or create a BuddyFood-AI account
- Purchasers of BuddyFood-AI diet plans and subscriptions
- Individuals whose consumer health data is derived or inferred from their use of our services
Consumer Health Data We Collect
Under the MHMD Act, consumer health data can include personal information that is linked or reasonably linkable to a consumer and identifies or can be used to infer past, present, or future physical or mental health status. For BuddyFood-AI, this may include information you provide directly, information generated from the service, information inferred from your plan/progress inputs, and technical/support information linked to a health-related request.
Body Measurements & Physical Characteristics
Height, weight, body mass index (BMI), target weight, and weight-change goals collected during our nutrition quiz.
Dietary Data & Food Allergies
Food preferences, dietary restrictions, food intolerances, and allergen information (e.g., gluten, dairy, nuts) you provide to personalize your meal plan.
Health Goals & Conditions (User-Provided)
General wellness goals such as weight loss, muscle gain, maintenance, activity improvement, or nutrition support that you voluntarily share with us. BuddyFood-AI is not a medical service and does not ask for clinical records, insurance information, or medical diagnoses.
Activity & Lifestyle Information
Physical activity level, schedule, meal timing, cooking preferences, and lifestyle information used to estimate calorie needs, macro targets, and practical plan structure.
Plan, Progress & Derived Nutrition Data
Calculated BMR, TDEE, BMI, calorie targets, macro targets, plan history, update-plan inputs, plan credit status, and progress check-ins when you choose to provide them.
Technical & Support Data Linked to Requests
Account identifiers, purchase records, support messages, consent records, device/browser information, and security logs when reasonably necessary to provide, secure, document, or support the service.
How We Use Consumer Health Data
We use consumer health data for the purposes reasonably necessary to provide, secure, support, document, and improve our digital wellness and nutrition-planning service:
- Personalization: To generate your customized diet plan, plan PDF, calorie targets, macro ratios, recipe structure, shopping list, and plan-update comparison.
- Service Delivery: To match you with appropriate meal plan templates and content.
- Account Management: To save and update your preferences for future plan generation.
- Safety: To honor your allergy and intolerance information and exclude contraindicated foods.
- Service Improvement: To debug, evaluate, and improve plan quality using aggregated, de-identified, or limited internal review data where appropriate. We do not use consumer health data for cross-context behavioral advertising.
Sharing & Disclosure
We may disclose consumer health data only in limited circumstances and only to the categories of recipients needed for the disclosed purpose:
- Service Providers: Vendors that help us operate the service, such as hosting/database infrastructure, payment processing, email delivery, PDF/file storage, customer support, security, error monitoring, and AI/model providers used to generate or support plans. These vendors may process data only as needed to provide services to us and are not authorized to use consumer health data for their own advertising.
- Legal Requirements: When required by applicable law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets, subject to appropriate confidentiality and use restrictions and any consent required by law.
- With Your Consent: For any other purpose with your explicit consent.
We do not sell consumer health data. We do not share consumer health data with data brokers, advertising networks, or for cross-context behavioral advertising. If this practice changes, we will update this notice and obtain any consent required by applicable law before selling consumer health data.
Your Rights
Washington State residents have the following rights regarding consumer health data:
Right to Confirm & Access
You have the right to confirm whether we collect, share, or sell your consumer health data and to access that data, including a list of third parties and affiliates with whom the data has been shared or sold, where required by law.
Right to Withdraw Consent
Where we process consumer health data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Deletion
You may request deletion of your consumer health data, subject to legally permitted exceptions such as security, fraud prevention, legal compliance, transaction records, dispute handling, and completing a service you requested.
Right to Appeal
If we decline to take action on your request, you may appeal our decision by contacting us at buddyfood.ai@gmail.com. We will review appeals and respond within the timeframe required by applicable law, generally within 45 days.
To exercise any of these rights, please submit a request to buddyfood.ai@gmail.com. We may verify your identity and request enough information to match your request to your account or purchase. We aim to respond within 45 days unless a legally permitted extension applies.
Geofencing Prohibition
Consistent with the MHMD Act, BuddyFood-AI does not implement geofencing around any entity that provides in-person health care services for the purpose of identifying, tracking, collecting consumer health data from, or sending notifications/ads to individuals who enter or leave such areas.
How to Contact Us
If you have questions about this Consumer Health Data Privacy Notice or wish to exercise your rights, please contact us:
BuddyFood-AI Privacy Team
Email Address: buddyfood.ai@gmail.com
Response time: Within 45 days of receipt