Consumer Health Data Privacy Policy

Some US state laws, including Washington's My Health My Data Act and Nevada's consumer health data law, protect information that could reveal something about a person's health. This policy explains how MSC-Lumina handles that information. It applies to everyone who uses MSC-Lumina, wherever they live. MSC-Lumina is operated by Fruitful Faith Productions Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ (company no. 17347664).

1. What we collect

We treat your dietary profile as consumer health data, because allergies, intolerances and some diets can reveal a health condition. It contains:

• allergens, including any you describe in your own words;
• intolerances;
• your dietary style (for example vegetarian, vegan, coeliac, halal or kosher);
• whether to avoid cross-contamination; and
• whether to leave alcohol out.

It covers you and the people you tell us you cook for. Please only add someone else's details if you have their agreement. We don't collect anything else about your health, we don't use your location, and we don't set up geofences around any place.

2. Where it comes from

Only from you, when you fill in your dietary profile. We don't buy it, infer it from other data, or get it from anyone else.

3. Why we use it

To keep those ingredients out of the recipes we generate for you, and to flag them in your timelines, shopping lists and service sheets. We use it for nothing else: not for advertising, not for profiling, and not to train AI models. We ask for your consent before we collect it, and recipes can't be generated around your needs until you give it.

4. Who receives it

We don't sell your consumer health data, and we don't share it with any third party or affiliate. The only companies that handle it are service providers working for us, under contract, on our instructions:

• Supabase stores your account and dietary profile.
• Vercel hosts the app, so your data passes through its servers when you use it.
• Anthropic generates your recipes. It receives your allergen list and whatever you type into a recipe request, without your name or email address. It does not receive your dietary style or whether you avoid alcohol.

If we add or change one of these providers, we'll update this list before it receives any of your data. If the law ever required us to disclose your data, for example under a court order, we would only disclose what the order requires.

5. Your rights

• See it, change it, or withdraw consent: go to Account → Dietary & allergens. Withdrawing consent deletes your dietary profile straight away.
• Get a copy of everything, or delete your account: go to Account → Your data. Deleting your account removes your dietary profile with everything else.
• Ask us instead: email admin@msclumina.com from the address on your account, and tell us what you want. You can also ask us for the list of every third party and affiliate that has received your data; the answer is in section 4.

We confirm your identity by checking the request comes from your signed-in account or its email address. We answer within 45 days. If we need longer, we'll tell you why within those 45 days and take no more than 45 days more. When you delete your data, we tell our service providers to delete it too. Using your rights is free, and we won't treat you differently for using them.

6. If you disagree with our answer

Reply to our answer, or email admin@msclumina.comwith "Appeal" in the subject line, within a reasonable time. We'll look at it again and tell you, in writing, what we decided and why, within 45 days. If you live in Washington and we turn down your appeal, you can complain to the Washington State Attorney General's office.

7. Related policies

Our privacy notice covers the rest of the personal data we hold. If it ever says something different about consumer health data, this policy applies.