Consumer Health Data Privacy Policy

We collect consumer health data in two settings, and in both we collect it so that Kalina can do the one thing you ask it to do: decide which recipes your household can be shown, and build the plans and shopping lists that follow.

If you use the planner without an account, the allergy and diet selections you pick stay in your own browser and travel with each request you make. Our servers use them to filter that plan's recipes and do not write them to our database. They are excluded from the anonymous learning record we keep about recipe coverage, and they are never sent to our analytics provider. The meal request you type may also tell us something about health, in your own words. We process it to build the plan, and we keep the request text for 60 days, in a record that is not connected to you, your browser, your selections, or your IP address, so we can find weak recipe coverage. A daily process then removes it. It is never sent to our analytics provider.

If you have an account, we collect and store the allergies, diets, and other food restrictions you record for each person in your household. We use them to check every dish before it can reach you, and to build your plans and shopping lists. We also keep a record of the consent you gave when you first recorded a restriction, including the date and the policy version in effect.

We use consumer health data for nothing else. We do not use it for advertising, and we do not sell it.

Consumer health data comes to us from two sources: you, directly, when you pick a selection on the planner, type a meal request, or record a restriction; and the account holder in your household, when they record a restriction for you. We do not buy consumer health data, collect it from other companies, or derive it from outside information.

We share no consumer health data, and we sell none. No category of consumer health data is shared with any third party or affiliate. The companies that run Kalina's infrastructure process it for us as service providers under written contracts that limit them to our documented instructions, which the law treats as processing on our behalf rather than sharing. If we ever wanted to share consumer health data with anyone else, we would ask for your separate consent first, and you could say no and keep using Kalina.

There are no third parties or affiliates to list: we share consumer health data with none, and Kalina Technologies Corp. is a single company with no affiliates.

No third party collects consumer health data from your use of Kalina, over time, or across other websites or services. Kalina uses no advertising trackers and no cross-site tracking.

Consumer health data is processed in the United States, on infrastructure run by service providers under the written contracts described above: the company that hosts our servers carries it in transit, and the company that hosts our database stores it. The AI model that helps plan your week never receives your restrictions. Our own code checks every dish against them first, and the model is only ever shown dishes that already passed. That check runs in code, and an AI model is never what decides it.

Restrictions recorded on an account are kept while the account is open and deleted within 45 days after you ask us to close it, and our backups purge on a rolling 90-day cycle. Selections made on the planner without an account are not stored at all, and the meal request you type there is kept only as described above: 60 days, unconnected to you, then removed.

If you live in Washington or Nevada, your state's law gives you rights over consumer health data:

• Confirm and access. You can ask us to confirm whether we are collecting, sharing, or selling consumer health data about you, and to give you access to it, including a list of the third parties and affiliates we have shared it with or sold it to and, for each one, an active email address or other online mechanism you can use to contact them directly.
• Withdraw consent. You can withdraw your consent to our collecting or sharing consumer health data about you. In Nevada you can also ask us to stop collecting, sharing, or selling it.
• Delete. You can ask us to delete consumer health data about you, and asking is all it takes.

To exercise any of these rights, email privacy@kalinahelps.com from the email address on your account, or from the address you gave us if you do not have one. You never need to create an account to exercise a right. If we cannot tell the request is really yours using reasonable efforts, we may ask you for more information, and we use it only to check that.

We will act on your request without undue delay, and within 45 days of receiving it. If a request is unusually complex, or you have sent several, we may take up to 45 more days, and we will tell you within the first 45 if so.

You can also review and change your household's restrictions yourself, at any time, in Kalina's settings, or email us at the address above to review or change anything else.

If we refuse to act on a request, you can appeal by replying to our answer with the word "appeal." A different person reviews it, and we respond in writing within 45 days with the reasons for the decision. If we deny your appeal, we will tell you how to reach your state's attorney general: Washington residents can complain to the Washington Attorney General at atg.wa.gov, and Nevada residents can reach the Office of the Nevada Attorney General at ag.nv.gov.

When this policy changes, we will post the new version here with a new version line before the change takes effect, and if a change is material we will email account holders before it takes effect. We will not collect a new category of consumer health data, or use consumer health data for a new purpose, without first updating this policy and obtaining your consent.

Questions about this policy, or about consumer health data: our Privacy Contact, at privacy@kalinahelps.com and at Kalina Technologies Corp., PO Box 412, Victoria, MN 55386.