Consumer Health Data Privacy Policy
Last updated November 4, 2026 · Version 2026-11-04
Washington's My Health My Data Act, and similar laws in Nevada and Connecticut, protect information about your health. In Stock & Savor, that's mainly the diets and allergies you can choose to save, plus any health details people include in other things they send us. This page explains how we handle them. It adds to our Privacy Policy.
The short version
- We collect diets and allergies only if you choose to save them. Right above Save, the app says they're kept as health data and links this page; tapping Save after that is your consent.
- We use them to mark and hide recipes, and to warn your family only if you agree to share them.
- We never sell them, use them for ads or give them to advertisers, and we don't add your saved choices to what we send to AI services. If you type health details into a question or recipe you send to AI, they go with it, so leave them out.
- You can clear them, stop sharing them or ask for a copy at any time.
Who this is from
Stock & Savor LLC, a Washington limited liability company ("we", "us"), which makes the Stock & Savor app.
What we collect, and why
| Information | How we use it |
|---|---|
| Allergies and intolerances you choose (like peanuts, shellfish or gluten), or a "No Allergies" answer | To mark recipes that list those foods, hide those recipes if you choose, and keep your choices the same on your phones when you're signed in. |
| Diets you choose. Some, like gluten-free, can relate to health; we treat every diet choice the same careful way. | |
| Whether you share them with each family kitchen | To warn that kitchen's members when a family recipe or meal request lists one of your foods. |
We get diets and allergies only from you, in the app. Without an account they stay on your phone and aren't sent to us. We don't buy them, infer them from other data or collect them from anyone else. They're never put in notifications, and your saved choices aren't added to what we send to AI services.
Health details in other content
Health details can also turn up elsewhere, from you or from other members of your family kitchen:
- a family comment, meal request or meal note that mentions someone's allergy, which members see and which can appear in the notifications of members who turn on Show Meal Names;
- a recipe photo, recipe video, recipe text or Ask Stocky question you send, or (when it launches) a grocery photo or clip, which is read by Google's Gemini AI; if you report an Ask Stocky answer, we keep your question, the answer, the changes it suggested and your reason, linked to your account, for about 90 days to review it;
- a problem report or recording you send us, which our admins read and hear; and
- Premium voice audio, when it launches, which Google's speech service turns into text.
We use these only to provide the feature they were sent for (family sharing, notifications, AI reads, transcription or support), share them only with the recipients below and as our Privacy Policy describes, and handle requests about them the same way as below.
Who we share it with
- Family kitchens you choose. If you turn on sharing for a family kitchen, the people in it, including any Visiting Squirrel during their stay, see your name with the diets and allergies you've chosen. Sharing is off until you turn on that kitchen's Share with This Family Kitchen switch, and stops when you turn it off, leave, or clear all your choices. Members' phones read your choices from our servers when needed and don't save them.
- Google Firebase, our service provider, which stores diets and allergies, and the rest of your account data, for us in the United States (Iowa).
Health details in other content can also go to these service providers of ours:
- Google Cloud Vertex AI and Firebase AI Logic (Gemini), for the photos, videos, recipe text and Ask Stocky questions you send us to read or answer. They may process it wherever Google operates and may keep it for a limited time, as Google's terms describe.
- Google's Firebase Cloud Messaging, and Apple's push service on iPhone when push launches there, which carry family notifications to members' phones. Meal names and comments are included only for members who turn on Show Meal Names.
- Google Cloud Speech-to-Text, for Premium voice, when it launches, in the United States.
Our own admins can see problem reports, and the owner account that runs our servers can access what's stored there, only for the purposes in our Privacy Policy. We have no affiliates that receive it. We never sell it, use it for ads or give it to advertising partners.
How long we keep it
This section is about your saved diets and allergies. Health details inside other things you send follow those things' times in our Privacy Policy (for example, a reported Ask Stocky answer about 90 days, or a comment while the family kitchen keeps it). Our cloud copy of your saved choices is kept until you clear them in the app or delete your account; clearing them keeps an empty profile and your sharing settings while your account exists, and you can email us to delete that too. Changes made without a connection reach our servers the next time your phone syncs. After deletion we keep only a record that your diet data was deleted (your account ID and the date), so it isn't refilled by mistake.
On your phone, your choices are kept until you clear them. Deleting your account in the app also erases the copy saved on that phone. Your other phones erase theirs the next time they open signed in to the account and our servers confirm it's deleted; on a phone that doesn't open again, clear the app's data or uninstall to remove it. Phone backups (Android's and iPhone's) leave out the file they're saved in. After a verified deletion request, copies in Google's backup systems are removed within six months.
Your rights
You can:
- ask whether we collect, share or sell your health data (we never sell it);
- get a copy of it, and a list of everyone we've shared it with and how to contact them (for a family kitchen, through that kitchen in the app);
- withdraw consent: turn off a family's Share with This Family Kitchen switch to stop sharing with it, or clear your choices, which stops us using them and stops sharing with every family;
- delete it by clearing it in the app, deleting your account or asking us. On a verified request, we delete it from our records, including health details in other content you point us to, and tell Google and anyone else we shared it with to delete it; and
- appeal if we turn down a request.
To ask, email privacy@stockandsavor.app from your account's email with the subject "Health data request". We'll confirm it's you and reply within 30 days. If a request is complex, we may take up to 45 more days and will tell you why. We won't treat you differently for asking.
To appeal, reply to our answer with "Appeal" in the subject. We'll respond within 45 days. If we still turn it down, you can complain to the Washington Attorney General or your own state's attorney general.
Security
This information is encrypted between your phone and our servers, and when Google stores it. In the app, only you and the family kitchens you share with can see your diets and allergies (the people who run our servers can reach stored data, as our Privacy Policy describes), and our servers check your sharing choice each time.
Contact
Questions about health data: privacy@stockandsavor.app.