Consumer Health Data Privacy Policy

What this policy covers

This policy explains how Yumitos Corporation handles consumer health data as defined by Washington's My Health My Data Act and similar laws. For Yumitos, that means the allergy and dietary information you share with us. Where this policy and our Privacy Policy overlap, this policy governs that data.

Categories of health data we collect

• Food allergies and intolerances you select from our list: peanuts, tree nuts, dairy, eggs, shellfish, fish, wheat, soy, sesame, and sulfites, or none.
• Dietary practices you select: vegetarian, vegan, pescatarian, keto, paleo, gluten-free, dairy-free, low-sodium, organic, or none, and religious dietary observances, halal and kosher.
• Inferences we derive from these selections to filter and rank food suggestions for you.

Sources

You provide this data yourself: during signup, where the app asks you to select allergies and dietary preferences and to confirm your allergy selections a second time, and afterwards in Settings, where you can change them whenever you like. Selecting none is always available, and every feature of the app works with that selection. We do not collect health data from third parties.

Purposes

• Excluding dishes and vendors that conflict with your allergies and dietary practices from search results and suggestions.
• Group planning: combining your constraints with your group's so a shared search is safe for everyone in it.
• Recipe suggestions generated to be compatible with your allergies and dietary practices.

We do not use your health data for advertising, and we do not sell it. Selling consumer health data would require your separate, signed authorization under Washington law, which we do not seek.

Sharing

• Other Yumitos users. Your dietary practices and allergy selections are part of your Yumitos profile and can be visible to other signed-in Yumitos users, most directly to members of your groups when you plan outings or group searches together, so the group can choose food that works for you. We are narrowing this visibility to your groups only; when that change ships, this policy's version above will change with it.
• Service providers. Google, as our infrastructure provider, and Google's Gemini model when you use recipe suggestions, where your allergies and dietary preferences are included in the generation request so results are safe for you. Providers process this data only to provide the feature.
• Vendors: not automatically. Your allergy and dietary selections are never attached to orders. A vendor learns about your allergy only if you choose to type it into an order's special-instructions box yourself.

We do not share consumer health data with data brokers, advertisers, or analytics companies.

Consent

We collect this data only when you select it yourself, and the app asks you to confirm allergy selections before saving them. Sharing beyond what this policy describes would require your separate consent first. You can withdraw consent at any time by clearing your selections in Settings or by emailing us.

Your rights

• Access: ask what health data we hold about you and who we have shared it with.
• Withdraw consent: clear your selections in Settings at any time, or email us to withdraw consent to collection or sharing.
• Delete: clear your selections in Settings, or ask us to delete your health data by email. We will delete it from our systems, direct our service providers to do the same, and remove it from backups as those backups cycle.
• No discrimination: exercising these rights never costs you features. The app works fully with every selection set to none.

Exercising your rights and appeals

Email legal@yumitos.com from the address on your account. We will authenticate the request, respond within 45 days, and tell you what we did. If we deny your request, you may appeal by replying to our decision; a different reviewer will decide the appeal within 45 days and explain the outcome in writing. If your appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

Contact

Yumitos Corporation, 16192 Coastal Highway, Lewes, Delaware 19958-9776, USA. Privacy inquiries: legal@yumitos.com.