Consumer Health Data Privacy Policy

1. Why This Page Exists

Washington State's My Health My Data Act, and similar laws in Nevada and Connecticut, define "consumer health data" far more broadly than most people expect. Two things you tell DateFlo fall inside that definition: your food allergies and dietary restrictions, and any accessibility needs you share so a night is actually reachable for you.

This page is the separate, specific disclosure those laws require. Everything here is also true of our main Privacy Policy; this page just says it in the terms Washington asks for. It applies to everyone, not only Washington residents.

2. What We Collect

• Allergies and dietary restrictions for you and your partner, such as a nut allergy, celiac disease, or a restriction you keep for religious or personal reasons.
• Accessibility needs, such as step-free access, seating requirements, or anything else that decides whether a venue works for you.

We collect this only from you, in the plan request form or in your saved preferences. We do not buy it, infer it, or pick it up from anywhere else. We do not collect biometric data, medical records, diagnoses, prescriptions, reproductive or sexual health information, or precise location for any health purpose.

3. Why We Collect It

One reason, and only one: to plan a night that is safe and workable for you. Every food recommendation in your plan is checked against what you told us, and venue choices account for your accessibility needs. That is the whole purpose.

We do not use it for advertising, profiling, research, training anyone's models, or any secondary purpose. If we ever wanted to use it for something else, we would have to ask you first and get a separate yes.

4. Who It Goes To

We do not sell consumer health data. Ever, to anyone, for any price. Selling it would require a signed authorization from you, and we do not ask for one because we do not do it.

It is shared in only two situations:

• A restaurant, when a reservation needs it. If we book a table for you and your allergy needs to reach the kitchen, we tell them. That is the point of telling us.
• Our processors, to run the service. Our database and hosting providers store it, and our planning provider processes it to build the plan. Each is bound by contract to use it only on our instructions and to protect it to the standard described here.

Our processors are listed by name in Section 5.2 of the Privacy Policy.

5. Your Rights

You have the right to:

• Know what consumer health data we hold about you, who we shared it with, and why. Settings in the app has "Download my data", which gives you all of it immediately.
• Withdraw consent to our collection or sharing of it, at any time, by removing it from your preferences or emailing us.
• Have it deleted, from our systems and from our processors. Delete your account in Settings and it goes with everything else. If you want only the health data gone but the account kept, email us and we will do exactly that.
• Appeal if we ever refuse. Reply to our refusal and a person reviews it. If we still say no, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

Exercising any of these never changes the price you pay or the service you get. We respond within 45 days, and we tell our processors to delete it too when you ask us to.

6. How Long We Keep It

For as long as your account exists, because it is what makes every future plan safe for you. When you delete your account, it is deleted with everything else, and we ask our processors to do the same. There is no archive of it and no backup copy we keep on purpose.

7. Who Can See It Inside DateFlo

Access is limited to the people who need it to plan or support your night, and every access goes through the same authenticated systems as the rest of your account. Your partner can see the preferences you share with them, because they are shared preferences for the two of you. Nobody else can.

8. Contact

Email admin@dateflo.com with "Health Data Request" in the subject line and we will get back to you within two business days.