Consumer Health Data Privacy Policy

Effective date: September 29, 2026

This policy explains how the Hot Flash Kitchen app handles consumer health data, as required by Washington's My Health My Data Act, Nevada's consumer health data law, the Connecticut Data Privacy Act, the Oregon Consumer Privacy Act and Vermont's Data Privacy and Online Surveillance Act. Our Privacy Policy covers everything else.

The short version

Health-related information you enter stays on your phone. We never receive it, and we don't share or sell it.

What we process

• Check-ins: how you feel on a given day. The choices are bloated, brain fog, mood shifts, headache, irregular cycles, hot flashes, sleep deprived, stiff and achy, wiped out, and "I feel good".
• Meal ratings: whether a meal seemed to help.
• Patterns: what the app works out from your check-ins and ratings, such as what comes up most and which meals seemed to help.
• What you choose to send: if you turn them on, the line about how you feel in a text to your partner, and "How I feel" on a share card.

Where it comes from

From you, when you check in and rate meals, and from the app working out your patterns on your phone. We don't get it from anyone else.

Why, and how it's used

Only to suggest meals for how you feel, explain why they might help, show your patterns and the summary you can print, and write the texts and share cards you choose to send. Never for advertising, targeted advertising, profiling, or selling. We don't collect, use, share or sell it to train AI models, including large language models.

How it's handled

It's saved only in the app's storage on your phone and processed there. It's included in your phone's backups (such as iCloud Backup) if you have them on, under Apple's terms. The app never sends it to us, to our service providers (Firebase and RevenueCat) or to anyone else, so no one at Hot Flash Kitchen, and no contractor or service provider, can see it. The app doesn't use location services, geofencing or location tracking of any kind, including near healthcare facilities.

Sharing

We don't share consumer health data with anyone: no third parties, no affiliates and no service providers. We don't sell it. It leaves your phone only when you send it yourself, in a text from your Messages app, a share from your phone's share sheet, or a summary you print or save. Where it goes then is your choice, and we never receive a copy. No third party collects information about your activity across other apps or websites through the app.

Your consent

We ask before your first check-in, and we'd ask again before ever using it for anything new. If you say "Not now", the app works without asking how you feel, and nothing about it is saved. You can change your mind any time on Profile, where you can also erase your check-ins. Turning check-ins off takes effect right away. We'll never sell consumer health data, so we'll never ask you to agree to that.

Your rights

Depending on where you live (including Washington, Nevada, Connecticut, Oregon and Vermont), you can:

• confirm and see what consumer health data is processed. It's all in the app: Today, Patterns, and "Print or save".
• get a list of the specific third parties it's been shared with. We haven't shared it with anyone.
• get a copy you can take with you: "Print or save" on Patterns saves it as a file.
• opt out of its sale, targeted advertising and profiling. We don't do any of these.
• withdraw your consent or ask us to stop processing it: turn off check-ins on Profile.
• delete it: tap "Erase my check-ins" on Me, or "Delete my data" on Me to remove everything at once, or delete the app to remove it from your phone. If your phone backs up to iCloud, you can delete old backups in your iPhone's settings.
• correct it: erase your check-ins and start over, or email us and we'll help.

To ask, email hotflashkitchenapp@gmail.com with "Health data request" in the subject. It's free. We'll answer within 45 days, and if we need more time we'll tell you why and take at most 45 more days. Deletion requests are done within 30 days. Since we hold no health data about you, our answer will usually confirm that and show you how to see or delete what's on your phone. We won't treat you differently for asking.

Appeals

If we turn down a request, you can appeal by replying with "Appeal" in the subject. We'll answer in writing within 45 days and explain what we did and why. If we deny your appeal, you can contact your state's Attorney General:

• Washington: atg.wa.gov/file-complaint
• Nevada: ag.nv.gov/Complaints/Consumer_Complaint
• Connecticut: portal.ct.gov/ag complaint form
• Oregon: doj.state.or.us consumer privacy
• Vermont: ago.vermont.gov complaint form

Changes

If this policy changes, we'll update the date above and tell you in the app before the change takes effect. We won't process new kinds of health data, or use it in new ways, without asking you first.

Contact

Hot Flash Kitchen · hotflashkitchenapp@gmail.com