Consumer Health Data Privacy Policy
Last reviewed: October 2026
This policy applies to residents of Washington, Nevada and other US states whose laws protect consumer health data. It adds to our Privacy Policy.
Health data we collect
When you use Mellowa you may share information that these laws treat as consumer health data: your self-reported energy, mood, stress, sleep and hunger levels, food allergies and intolerances, dietary preferences, notes and journal entries.
Where it comes from
Only from you, when you complete your profile, a check-in or a journal entry. We do not buy health data or collect it from other sources, and we do not infer health conditions.
Why we use it
Only to create and adjust your personal wellbeing plans and meal ideas, to keep allergens out of them, and to run safety checks that stop unsafe requests. We collect it only with your consent, which you give with a separate checkbox when you sign up.
Who we share it with
We do not sell consumer health data and never share it for advertising. It is processed only by service providers acting on our behalf: Anthropic (AI plan generation), Supabase (database) and Vercel (hosting). We have no affiliates that receive it.
Your rights
You can confirm whether we hold your health data, get a copy of it, see the list of providers that process it, withdraw your consent, and have it deleted. Export and deletion are available any time in Settings, or email privacy@mellowa.app. We respond within 45 days. If we decline a request, you can appeal by replying to our answer, and if you are still not satisfied you can contact your state Attorney General.