Consumer Health Data Privacy Policy

Why this is a separate policy

Washington State’s My Health My Data Act, and similar laws including Nevada SB 370, require any business handling consumer health data to publish a policy devoted to it. This is that policy. It sits alongside our main Privacy Policy, which applies to everything else.

It applies to everyone in the United States, not only residents of the states that require it. We would rather hold one standard than several.

What counts as consumer health data here

These laws define health data broadly — it covers health, wellness and nutrition, and anything from which health status could reasonably be worked out. In fufu that means:

• Allergies and intolerances recorded on a household profile, and their severity.
• Age groups that describe a physical state: pregnancy, breastfeeding, and the infant, toddler and senior bands.
• Diet preferences, where they relate to health, and the faith rulesets on a profile.
• Your scan history — the products and dishes checked, and what was flagged for whom.
• Where a scan happened, if you have switched location on. It is off by default.

How we collect it

Only from you, and only when you enter it. We ask for your consent to collect health information separately from anything else — it is not bundled into accepting our terms, and agreeing to the terms does not agree to this.

We do not buy health data, we do not receive it from data brokers, advertising networks or partners, and we do not infer it from anything other than what you type in.

What we use it for

One purpose: running the safety check you asked for. Specifically:

• Comparing a scanned product or menu item against each profile in your household.
• Showing you why something was flagged, and suggesting alternatives.
• Telling you if a product you scanned is later recalled.

That is the complete list. We do not use it to build a profile of you, to target advertising, to train models, or to work out anything about you that you did not tell us directly.

We do not sell it

fufu has never sold consumer health data and will not sell it. We have no advertising business and no data partners. Because we do not sell it, we will never ask you for the signed authorisation these laws require before a sale — if anyone ever asks you for one in fufu’s name, it did not come from us.

Who we share it with

Only the service providers needed to run fufu, each under a written agreement that forbids using your data for their own purposes:

• Supabase — the database that stores your household and history.
• Our hosting provider — runs the website and its servers.
• Our email provider — sends sign-in links and safety recall notices.

Our payment provider never receives health data. It handles your payment and billing address only, and has no access to your household, your profiles or your history.

We disclose health data to law enforcement only where a valid legal order compels it, and we will tell you unless we are legally prohibited from doing so.

How long we keep it

• Household profiles: while your account is open.
• Scan history: erased automatically after 24 months. You can shorten this to one month, and the change applies to history you already have.
• Scan locations: erased the moment you switch location off.

Your rights over health data

You may, at any time:

• Ask what consumer health data we hold about you, and who we shared it with.
• Get a copy of it.
• Have it deleted — including from our backups and from our service providers, who we will instruct to do the same.
• Withdraw your consent, which stops any further collection.

Much of this you can do yourself in the app: delete a profile, clear your history, or close your account. For anything else, email privacy@getfufu.app. We respond within 45 days, and we will tell you if we need the one extension the law allows.

Deleting your health data does not delete records of payments, which we are legally required to keep. Those contain your name, billing address and what you paid, and never anything about your health.

How we protect it

Health data is stored encrypted, access is restricted at the database level so one account can never read another’s, and only staff who need it for support can reach it. We do not keep a separate copy of past results — when you view an old scan, it is recalculated from the profiles as they stand now, so there is only ever one copy of the sensitive information and deleting a profile removes it everywhere.

Complaints

Email us first at privacy@getfufu.app — we would rather fix it. If you are not satisfied, Washington residents may contact the Washington State Attorney General, and residents of other states may contact their own Attorney General.