Consumer Health Data Privacy Policy
On this page
Yummiable is made by Whats4Dinner LLC ("we"). This policy explains how we handle consumer health data: information linked to a person that says something about their physical or mental health. Washington's My Health My Data Act (RCW 19.373) asks for it. We follow it for every family, wherever they live.
We treat everything the app keeps about a child's eating as consumer health data, even what never leaves your phone.
What we collect, and what for
Allergy lists. The allergies a grown-up sets for each child. Used to leave out dishes that contain, or may contain, those allergens.
Food diary. What each child planned and ate, and how much (a taste, some, most or all of it), what was skipped, the brave-bite prizes, and any note a grown-up adds, as a grown-up confirms it. Used to show each child's progress, plan meals and fill the "My body today" power-ups.
Taste Passport. How each child felt about each dish they tried (for example, loved it or okay), as a grown-up confirms it. Used to suggest foods to try.
What the app learns from these. For example, which small changes between foods (a new shape, a new flavor) work for each child, and the power-ups worked out from the diary. Used to suggest the next foods to try.
Hidden Discovery dishes. Dishes a grown-up hid for a child. Used to keep them out of suggestions.
The child's profile that all of this belongs to: a first name or nickname, a buddy icon and an age.
What grown-ups write for stories, when it says something about a child's eating or health: the story idea, the "Anything special?" note, edits, and any names in them. Used to write, check and paint the story, and to keep it on your bookshelf.
What you write to us, such as feedback or a request under this policy, when it mentions someone's health. Used only to answer you and to fix or improve the app.
We use this data only for these purposes. We never use it for advertising or marketing, and never to train AI.
Where it comes from
From you and your kids, as you use the app together: what grown-ups set, confirm and write, and what kids pick with you. The app works out the rest on the phone, from that. We never get health data from other companies, health providers, devices or data brokers.
Where it is kept
On your phone. The allergy lists, food diary, Taste Passport, what the app learns, hidden dishes and the profiles are kept in the app's own storage on your phone, and the app works with them there. Unless your family turns on Family sync, they never leave the phone. If you have turned on your phone's own backup, the phone's system may include them in that encrypted backup under your account.
In Family sync's encrypted copy. If a parent or guardian turns on Family sync, an encrypted copy of them is kept on our account service, so the family's grown-ups see the same thing on their phones. It is encrypted on your phones with a key only your family's phones have, so we cannot read it. Before anything is copied, the app asks a parent or guardian for consent on its own screen.
On your bookshelf. Finished stories, with the ideas, notes, edits and names they were written from, are kept on our story service until you delete them. They are kept under a random number for the phone, the subscription or the family, never under a name.
In our e-mail. What you write to us.
Who receives it
We do not sell consumer health data. We do not share it with any third party or affiliate, so the list of third parties and affiliates that have received it is empty.
With Family sync on, the grown-ups your family invites see the kids' data on their own phones. That is your family's choice, and a grown-up who leaves or is removed from the family no longer gets it.
Service providers handle it for us, under contract, only to run the app:
- Cloudflare, Inc. runs our account and story services. It stores the encrypted Family sync copy, which it cannot read either, and the bookshelf.
- OpenAI writes, checks and paints stories. It receives what you wrote for the story, and nothing from the profiles, diary, Taste Passport or allergy lists. It does not use it to train its models. It may keep it for up to 30 days to check for abuse, and then deletes it.
- Our e-mail provider holds what you write to us.
Your rights
Everyone can use these rights, with or without a grown-up account. A parent or legal guardian uses them for their child.
- To know and to see: ask whether we collect, share or sell your or your child's health data, and get a copy of what we hold, with the list of third parties and affiliates that received it.
- To delete: ask us to delete it.
- To withdraw consent: take back a consent you gave.
We never charge for a request, and we never treat anyone differently for using these rights.
In the app
Most of this you can do at once, yourself:
- See everything about a child in the app, and export the food diary from Settings.
- Delete a child in Settings. Their data leaves the phone and, with Family sync on, the family's copy the next time that phone shares.
- Delete a story in Manage my books. It leaves the story service at once.
- Turn Family sync off in Settings → Family. This withdraws the consent, and the copy on our account service is deleted at once. Each phone keeps its own.
- Delete the family in Settings → Family, or your grown-up account in Settings → Grown-up account. Deleting the family deletes its encrypted copy and its bookshelf from our servers; the books already on that phone stay on it.
- Delete the app. It erases what is on the phone. A Basic bookshelf belongs to the phone and stays, so delete its books in Manage my books first.
By writing to us
E-mail hello@yummiable.com. Say what you want (to see, to delete or to withdraw consent), and which child or data it is about.
Checking the request is yours. We ask for as little as we need. If you have a grown-up account, we reply to the e-mail address or phone number it signs in with, and act once you confirm. Without an account, the only health data we may hold is what you wrote for stories on that phone's bookshelf, kept under the phone's random number; Manage my books shows and deletes it. If you can't use the app, tell us, and we will agree with you on a way to show the request comes from that phone. If we can't confirm a request, we tell you why.
What you get. We send you a copy of the stories and messages we hold. The Family sync copy is encrypted so that we cannot read it; the app shows everything in it.
When. We answer within 45 days of receiving your request.
Deleting. We delete the data from our services and tell our service providers to do the same. Copies kept to restore our services drop it within 30 days, and OpenAI's within the 30 days above.
Appeals
If we turn down a request, in whole or in part, our answer says why. You can appeal by replying to it, or by writing to hello@yummiable.com with "Appeal" in the subject. We decide within 45 days of receiving the appeal and tell you in writing what we did and why. If we deny the appeal, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.
Changes
Before we collect a new kind of health data, use it for a new purpose, or share it with anyone, we update this policy and ask for your consent first.
Contact
Whats4Dinner LLC, 8201 164th Ave NE, Ste 200, PMB 064, Redmond, WA 98052, USA · hello@yummiable.com