Legal
Consumer Health Data Privacy Policy
Version 0.1 · Last updated
Draft — pending counsel review
This policy explains how Gastroque (“Gastroque”) collects, uses and shares consumer health data under Washington's My Health My Data Act and similar laws. It adds to our Privacy Policy. We collect health data only with your consent, use it only to plan and check your meals, and never sell it.
Consumer health data we collect
- Allergies and their severity (for example a strict peanut allergy)
- Intolerances (for example lactose)
- Medical diets (for example coeliac, low-sodium, diabetes-friendly, low-FODMAP, pregnancy-safe, alpha-gal)
- Diets and religious dietary codes that can reveal health or beliefs (for example vegetarian, gluten-free, halal, kosher)
- Macro targets and notes you add about a diner
- Ratings tags or safety reports that describe a reaction, if you choose to include one
Where it comes from
Only from you — the account holder — or a co-cook in your household, when you add or edit the people at your table. We don't buy health data or collect it from other sources, and we don't infer health conditions from what you cook.
Why we collect and use it
- To plan menus that follow each diner's rules
- To check every recipe against each diner's restrictions before you see it, and to label allergens
- To keep strict allergens off the whole table and order cooking steps to limit cross-contact
- To respond to a safety report you send us
We ask for your explicit consent before saving any of these details, and you can withdraw it at any time. We don't use consumer health data for advertising, and we don't use geofencing around any health-care location.
Your rights and how to use them
- Confirm and access: see the health data we hold in your Household and in a full export (Settings → Privacy).
- Delete: delete it from Household, withdraw consent in Settings → Privacy (which deletes it for your whole table), or delete your account.
- Withdraw consent at any time, with the same effect.
- Know who received it: the processors above; email us for a list of specific third parties.
- Appeal: if we decline a request, write to privacy@gastroque.com within 45 days; if we deny your appeal you can contact the Washington State Attorney General.
To make a request, use the in-app tools or email privacy@gastroque.com. We'll verify the request through your account and respond within 45 days.
Contact
Questions about this policy: privacy@gastroque.com.