Consumer Health Data Privacy Policy
Kahsay LLC
Version: 1.0
Last Updated: May 1, 2026
Effective Date: May 1, 2026
This Consumer Health Data Privacy Policy ("Health Data Policy") is provided as a standalone disclosure required by the Washington My Health My Data Act (MHMDA), RCW 70.372, and applies to Kahsay LLC's collection and handling of consumer health data. It supplements our Privacy Policy and applies to all users of the Kahsay mobile application and related services (collectively, the "Service").
Section 1. What Is Consumer Health Data?
Under the Washington My Health My Data Act and similar state laws (including Nevada SB 370), "consumer health data" means personal information that identifies or is reasonably linkable to a physical health condition or status. In the context of the Kahsay Service, this includes:
-
Food allergy information you voluntarily provide (e.g., peanut allergy, shellfish allergy, tree nut allergy, or other diagnosed or self-reported food allergies)
General dietary preferences that are not linked to a diagnosed or self-reported health condition (e.g., "I prefer Italian food," "I don't like spicy food," or "I follow a vegan diet as a lifestyle choice") are not consumer health data and are handled as standard preference data under our Privacy Policy.
Section 2. What Consumer Health Data We Collect
Kahsay collects the following consumer health data, and only when you voluntarily submit it:
-
Food Allergy Information: Includes peanut, tree nut, shellfish, dairy, egg, wheat, soy, sesame, and fish allergies.
We do not collect consumer health data through passive means. All consumer health data in the Service is information you proactively enter into your flavor profile.
Section 3. How We Collect It
Before you enter any consumer health data into the Service, Kahsay will present a consent screen that:
-
Identifies the specific data you are about to enter as health-related consumer health data;
-
Explains clearly how it will be used (see Section 4 below);
-
Requires your affirmative tap to proceed before any such data is recorded.
You will not be required to provide consumer health data to use the Service. Providing this data is always voluntary. If you decline, you will still be able to use the Service, including the flavor profile and dish discovery features, without allergen filtering.
Section 4. How We Use Consumer Health Data
Consumer health data is used exclusively for the following purpose:
In-app personalization: To filter dish recommendations, surface allergen warnings when viewing dishes, and exclude dishes containing your declared allergens from your personalized feed.
We do not use consumer health data for any of the following:
-
Targeted advertising or marketing
-
Sale to third parties
-
Inclusion in de-identified commercial data shared with business partners or licensees
-
Profiling for purposes unrelated to your in-app food discovery experience
-
Any purpose beyond providing the personalization features described above
Section 5. How We Share Consumer Health Data
Kahsay does not sell, share, or disclose consumer health data to third parties, except in the following limited circumstances:
Service providers: We may share consumer health data with third-party vendors who process data on our behalf solely to operate the Service (e.g., cloud infrastructure providers). These vendors are contractually prohibited from using consumer health data for any purpose other than providing services to Kahsay.
Legal requirements: We may disclose consumer health data when required by law, court order, or government authority.
With your consent: We may share consumer health data for other purposes only with your explicit, separate authorization.
Section 6. How We Protect Consumer Health Data
Consumer health data receives heightened protection within our infrastructure:
-
Encrypted in transit (TLS) and at rest
-
Virtual private cloud (VPC) for all cloud infrastructure
-
Access-controlled to only those personnel and systems that require it to deliver the allergen filtering feature
-
Never included in data exports, commercial data sets, analytics pipelines, or advertising systems
Section 7. Retention
Consumer health data is retained for the duration of your active account and deleted within 30 days following account deletion, except where retention is required by law. Precise retention details are set out in the Privacy Policy, Section 5.
Section 8. Your Rights Regarding Consumer Health Data
You have the following rights with respect to your consumer health data under the Washington My Health My Data Act, Nevada SB 370, and other applicable state laws:
Right to Access: You may request a copy of the consumer health data we hold about you.
Right to Delete: You may request deletion of your consumer health data at any time by:
-
Removing the specific allergy or health-restriction entries from your profile within the app (Settings > Profile > Dietary and Allergy Information), or
-
Submitting a deletion request to support@kahsay.app, or
-
Deleting your account entirely.
Right to Withdraw Consent: You may withdraw your affirmative authorization for collection of consumer health data at any time without penalty. Withdrawal does not affect the lawfulness of processing prior to withdrawal. To withdraw, delete your allergy and health-restriction data from your profile or delete your account.
Right to Non-Discrimination: We will not deny you access to the Service, degrade your experience, or charge you different rates because you exercised any right under this Policy.
Section 9. How to Submit a Request
To exercise any right described in Section 8, contact us at:
Email: support@kahsay.app Subject line: "Consumer Health Data Request"
Your request must include your name and the email address associated with your Kahsay account. We may verify your identity before processing your request by confirming your registered email address through a secure verification link.
Response timeline: We will respond substantively within 45 calendar days of receipt. Where necessary, we may extend this by an additional 45 days; we will notify you if an extension is required.
Right to Appeal: If we deny your request, we will explain the reason. You may appeal by submitting a written appeal to support@kahsay.app with the subject line "Consumer Health Data Appeal" within 30 days of our decision. We will respond within 45 days. If your appeal is denied, we will provide information about how to submit a complaint to the Washington State Attorney General or the Attorney General in your state of residence, as applicable.
Section 10. Contact
Kahsay LLC
Address: 3400 Cottage Way, Ste G2 #34436, Sacramento, CA 95825
Email: support@kahsay.app
For our full privacy practices, see our Privacy Policy.
© 2026 Kahsay LLC. All rights reserved.