Consumer Health Data Privacy Policy

Last updated 18 October 2026 · Draft pending legal review

This policy applies to consumers in Washington State under the My Health My Data Act, in Nevada, and in other places with similar consumer health data laws. It adds to our Privacy Policy.

Consumer health data we collect

We collect allergens and diets only after your explicit consent, and only from you.

How we use it

Only to provide Rawly to you: to check products against your household's allergens and diets, and to show your diary, averages and weekly card. We don't use it for advertising, and we don't build profiles about you for anyone else.

Who we share it with

We don't sell consumer health data. We share it only with the service providers that run Rawly for us under contract (listed in section 6 of the Privacy Policy), and with no one else unless the law requires it or you ask us to.

Your rights

You can confirm whether we hold your consumer health data, see it, get a list of the providers it's shared with, withdraw consent, and have it deleted:

We respond within 45 days. If we decline a request, you can appeal by replying to our answer, and we'll respond to the appeal within 45 days. If the appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.