Consumer Health Data Privacy Policy

For residents of Washington and Nevada

Effective date: 2026-09-18

Last updated: 2026-09-18

This policy is required by the Washington My Health My Data Act (chapter 19.373 RCW) and Nevada's consumer health data law (SB 370, 2023). It covers only the information those laws call consumer health data. Everything else we hold is described in our Privacy Policy.

We have written this as a separate document, with its own link, because that is what those laws require.

The health information we hold, and why

What it is. The foods you tell Pip you cannot or will not eat. This includes food allergies, medical dietary restrictions, and restrictions you keep for religious, ethical, or personal reasons. We treat all of it as health information, without asking you to tell us which kind it is, because we would rather over-protect the whole field than sort it.

We also hold your pseudonymous account ID, and we treat that as health information too, because it is the thing your restrictions are stored against. After your account is deleted, two records remain: the record that the deletion happened, and the record of actions our staff took on the account. Both still identify the account by its ID. Neither contains your food restrictions or anything else you typed, though the deletion record does hold a count of how many items were removed. Both are described in our Privacy Policy.

Where it comes from. From you, directly. You type it into Pip. We do not buy it, we do not infer it from your behavior, we do not receive it from data brokers, advertising networks, health providers, insurers, or any other outside source, and we do not derive it from your location.

Why we hold it. Two purposes, and no others. First, so that the dishes Pip suggests to you do not contain foods you told us to keep away from you — that is the service you asked us for, and holding this information is how we deliver it. Second, so we can learn which dishes genuinely suit a given restriction: when you tell us a restriction and then tell us whether a suggestion worked, that helps us suggest better dishes to anyone with the same restriction. What we learn this way is a fact about a dish, never a picture of you. We do not use it for advertising, we do not sell it, and we do not use it to decide anything about you other than which dishes to show you.

Who we share it with. We disclose consumer health data only to the service providers listed below, and only so that they can operate Pip on our behalf under a written contract that limits them to that purpose. We do not share it with anyone for their own purposes, and we do not sell it.

If that ever changes, we will disclose it here and obtain your separate permission first.

How long we hold it. For as long as your account exists. When your account is deleted, it is deleted. Full detail is in the retention section of our Privacy Policy.

Things we do not do

We do not sell consumer health data.

We do not share consumer health data with third parties or affiliates beyond the recipient categories described above.

We do not allow anyone else to collect consumer health data about you over time or across other websites or services when you use ours.

We do not use consumer health data for advertising or marketing.

We do not use what you tell us to build a picture of you, or to work out anything about your health that you did not type in yourself.

We do not collect precise location information that could indicate you are seeking health care or health supplies.

We do not operate a geofence around any place that provides in-person health care services, and we do not use one to identify you, collect data from you, or send you messages.

Your rights

If you are a Washington or Nevada resident, you have the right to:

Confirm and access. Ask whether we are collecting, sharing, or selling consumer health data about you, and see that data. Our answer will include the list of any third parties and affiliates it has been shared with or sold to, along with a way to contact each of them. If you ask, we will give you the list of everyone we have disclosed your consumer health data to. Today that list contains only the service providers named above, who process it on our behalf. We have never shared or sold your consumer health data to anyone for their own purposes, and if you ask, we will tell you that.

Delete. Have your consumer health data deleted from our records, and have us notify any processor holding a copy so they delete it too. Backups cycle out separately, and we describe that below.

Withdraw consent. Withdraw any permission you gave us to collect or share your consumer health data.

Not be penalized. We will not discriminate against you, degrade Pip, or charge you differently for exercising any of these rights.

How to exercise them

In the app. Account deletion is available inside Pip and deletes your consumer health data.

By email. Write to support@pipfind.com. Say what you want. If we cannot tell who you are from your message, we may ask for enough information to confirm it, and we will not use what you send us for anything else.

We will not require you to create an account to make a request. If you already have one, we may ask you to use it.

Timing. We respond within 45 days. If a request is complex we may extend once by another 45 days and will tell you first. Requests are free up to twice a year. If a request is clearly unfounded, excessive, or repetitive, we may charge a reasonable fee or decline, and we will explain why.

Deletion from backups. If your data sits in a backup when you ask, it is removed as that backup cycles out, which for our production database is about seven days.

If we refuse

We will tell you why, in writing, and give you a way to appeal. We will decide the appeal within 45 days and explain the outcome. If we still refuse, we will give you a link or method to submit a complaint to:

Security

Access to consumer health data is restricted to the employees, processors, and contractors who need it to deliver Pip to you. We maintain administrative, technical, and physical safeguards that meet a reasonable standard of care for our industry, sized to the volume and sensitivity of what we hold.

Changes

We will not collect a new category of consumer health data, or use what we hold for a purpose not described above, without first disclosing it here and obtaining your affirmative consent.

How we tell you about changes. If we change this policy in a way that affects what we collect, why we collect it, how we process it, or who we disclose it to, we will tell you before the change takes effect: in the app if you have an account, and by email if you gave us your email address without creating one. We will give you at least 15 days' notice, we will publish the new effective date, and we will keep every previous version available. If a change means collecting a new category of consumer health data, using it for a new purpose, or disclosing it to someone new, we will ask for your permission first, and we will not apply the change to data we already hold unless you agree.

Contact

Craft Fidelity Studios, LLC
8 The Green STE B, Dover, DE 19901
support@pipfind.com