Consumer Health Data Privacy Policy
This Consumer Health Data Privacy Policy is provided separately from our general Privacy Policy to describe how Henry (Double Springs Technology, LLC) collects, uses, and shares “consumer health data” as defined under Washington's My Health My Data Act, Nevada's SB 370, and similar state laws. Where this policy and our general Privacy Policy overlap, this policy governs for consumer health data.
What consumer health data we collect
The only health-related information Henry collects is what you choose to provide to personalize your meal plans:
- Food allergies you enter for your household or for individual family members
- Dietary preferences and restrictions (for example, vegetarian, vegan, gluten-free, low-fat, keto, paleo)
- Ingredient dislikes and meal feedback you provide, and any notes you write about a recipe
Henry does not collect medical records, diagnoses, medications, biometric data, precise location, or any information about reproductive or sexual health. We do not infer health conditions from your data, and we do not ask for any health information beyond the food preferences above.
How we collect it
We collect this data directly from you — when you set up your household, edit your settings, react to a meal (“Loved it” / “Skip it”), or add a note. We do not purchase health data, and we do not collect it from data brokers or other third-party sources.
How we use it
We use your allergy and dietary information for a single purpose: to generate and personalize your household's meal plans, recipes, and grocery lists, and to improve those suggestions over time for your household. We do not use it for advertising, and we do not sell it.
How we share it
We do not sell consumer health data. We share it only as needed to run the service:
- OpenAI — dietary constraints and allergies are sent to generate meal plans. We do not send your name, email, or account identifiers with them. OpenAI does not use data submitted through its API to train its models.
- Supabase — our database and authentication provider, which stores your data on our behalf under contractual data-protection terms.
We do not share consumer health data with Instacart, Kroger, advertisers, analytics brokers, or affiliate partners. Shopping lists sent to Instacart or Kroger contain grocery items, not your allergy or dietary profile.
We require the service providers above, by contract, to protect this data, use it only to provide services to us, and not to sell it or use it for their own purposes.
Your rights
You have the right to:
- Confirm and access the consumer health data we hold about you
- Withdraw consent to our collection and use of it
- Delete it
You can edit or remove your allergy and dietary information at any time in Settings. Deleting your account (Settings → Account → Delete Account) permanently deletes all of your consumer health data, and we direct our service providers to delete it as well. You may also exercise any of these rights, or appeal a denied request, by emailing hello@henry.kitchen. We will not discriminate against you for exercising these rights.
Consent
When you enter allergy or dietary information, you consent to our collecting and using it for the meal-planning purposes described above, which are necessary to provide the service you request. We will obtain your separate, affirmative consent before collecting or sharing consumer health data for any purpose not described in this policy, and we will never sell it without the specific valid authorization required by law.
Security
We protect consumer health data with the safeguards described in our Privacy Policy, including encryption in transit, row-level database security, and access limited to what is necessary to operate the service.
Contact
Questions or requests regarding your consumer health data:
Email: hello@henry.kitchen
Double Springs Technology, LLC, P.O. Box 1261, Jackson, MS 39215