Legal · AllieBites

AllieBites Consumer Health Data Privacy Policy

Effective Date:

September 22, 2026

Last Updated:

September 22, 2026

Introduction

This Consumer Health Data Privacy Policy describes how Umfress Business Solutions, LLC (“AllieBites,” “we,” “us,” or “our”) handles consumer health data through AllieBites.

This policy supplements the general AllieBites Privacy Policy.

1. Consumer Health Data We Process

Depending on the features you choose to use, AllieBites may process information concerning:

• Food allergies.
• Food intolerances.
• Food sensitivities.
• Ingredient restrictions.
• Dietary restrictions that relate to health.
• Other information you intentionally enter into dedicated food-safety preference controls.

AllieBites may also determine that a recipe ingredient conflicts with one of the restrictions you selected.

2. Sources

Consumer health data processed by AllieBites comes directly from you through selections or information you intentionally enter into AllieBites.

AllieBites does not purchase consumer health data from data brokers.

3. Why We Process Consumer Health Data

We process consumer health data only for purposes associated with features you request, including:

• Remembering food restrictions.
• Comparing recipe ingredients against restrictions.
• Warning about conflicts.
• Preventing or interrupting presentation of a recipe when app-controlled safety checks identify a conflict.
• Supporting ingredient-avoidance features.
• Responding to requests relating to your AllieBites data.

We do not use consumer health data for advertising or marketing profiles.

4. Where Consumer Health Data Is Processed

The initial public version of AllieBites is designed to keep dedicated allergy, intolerance, sensitivity, and health-related dietary-profile information on the user's device.

Those dedicated health-profile selections are not intended to be included in prompts sent to Anthropic.

AllieBites applies food-restriction checks separately from third-party AI generation.

We do not intentionally log consumer health profiles in server request logs.

5. Consumer Health Data Shared With Third Parties

For the initial public version, AllieBites is designed not to share dedicated allergy, intolerance, sensitivity, or health-related dietary-profile information with Anthropic, RevenueCat, advertising networks, or data brokers.

Infrastructure providers may necessarily handle encrypted network traffic or technical system operations involved in delivering the service, but AllieBites is designed not to intentionally store consumer health-profile content in infrastructure logs.

If we later propose sharing consumer health data with an additional recipient or for a materially different purpose, we will update this Policy and obtain any consent required by applicable law before beginning the new practice.

6. No Sale of Consumer Health Data

AllieBites does not sell consumer health data.

We do not exchange consumer health data for money or other consideration for advertising or data-broker purposes.

7. No Targeted Advertising

AllieBites does not use consumer health data for targeted advertising or cross-context behavioral advertising.

8. Consent and Control

Where consent is required, AllieBites will present the relevant request before the applicable collection or sharing occurs.

Consent to consumer health-data processing will not be hidden inside acceptance of general Terms of Use.

Where separate consent for sharing is required, that request will be separate from any consent required for collection.

You may withdraw applicable consent for future processing through available app controls or by contacting us.

Withdrawal does not affect processing that lawfully occurred before withdrawal.

9. Your Consumer Health Data Rights

Where applicable law provides these rights, you may request to:

• Confirm whether AllieBites is collecting, sharing, or selling consumer health data concerning you.
• Access consumer health data concerning you.
• Obtain information concerning applicable third parties or affiliates with whom consumer health data has been shared or sold.
• Withdraw consent to future collection or sharing.
• Request deletion of consumer health data concerning you.

10. How to Submit a Request

Submit a consumer health-data request to: info@umfressbs.com

Subject: Consumer Health Data Request — AllieBites

You do not need to create a new account to exercise a consumer health-data right.

Because AllieBites does not require a traditional user account, we may request limited information reasonably necessary to authenticate a request.

Requests will be handled without undue delay and within the period required by applicable law.

For rights governed by Washington's My Health My Data Act, qualifying requests will generally be addressed within 45 days. When permitted by law and reasonably necessary because of complexity or volume, that period may be extended once for up to an additional 45 days after appropriate notice.

11. Deletion

Where applicable law requires deletion, we will delete qualifying consumer health data maintained by us and notify applicable affiliates, processors, contractors, or other recipients as required.

For information stored only on your device, deletion is performed using AllieBites' data-deletion controls or applicable device controls.

If consumer health data is not maintained on our servers, we will explain that in our response to the request.

12. Appeals

If we refuse to take action on a qualifying consumer health-data request, you may appeal the decision.

Submit the appeal to: info@umfressbs.com

Subject: Consumer Health Data Appeal — AllieBites

We will provide a written response to a qualifying appeal within the time required by applicable law.

For Washington consumers, if an appeal is denied, we will also provide information explaining how to contact the Washington State Attorney General to submit a complaint.

13. Security

We restrict access to consumer health data to the systems and service functions reasonably necessary to provide the features requested by the user.

We maintain reasonable administrative and technical safeguards appropriate to the nature and volume of the data processed.

No electronic system can guarantee absolute security.

14. Changes to Consumer Health Data Practices

We will not begin collecting, using, or sharing additional categories of consumer health data, or begin materially different uses of existing consumer health data, without updating this Policy and obtaining additional consent where required.

15. Contact