Consumer Health Data Privacy Policy
This policy covers consumer health data, as defined by Washington's My Health My Data Act and Nevada law, that the intellidip apps handle. It is published by intellidip, reachable at intellidip@gmail.com, and supplements our Privacy Policy.
What we collect, from where, and why
While recall alerts are on, apps that alert you about items you watch send those items, from you through Recall Bell, to our alert service as normalized topics to match them to recall notices and notify you. Some can be consumer health data: allergens you watch, medication or medical-device categories, and any medicine or medical device you name. We use them only for that. With recall alerts off, Recall Bell sends none of those topics to its alert service. Public feed downloads and optional NHTSA, CPSC or barcode lookups can still use the network as described in the main Privacy Policy. A user-initiated list transfer includes any allergens in the code and goes to the recipient you choose; it is not an upload to our service.
Sharing
We do not sell your selected health watch topics or provide them for independent advertising or marketing. Supabase hosts the alert service and processes those topics for us. Expo and Apple's or Google's push service receive routing tokens and notification content when alerts are enabled. Allergen-matched pushes use generic copy; other pushes may carry a public recall title. We do not send your selected health watch topics to AdMob or Firebase for targeting.
Reviewing, changing, and deleting it
Your watch list in the app is what we match against: edit it to review or change the data we hold. Turning recall alerts off stops further topic collection and requests deletion from the alert service; the app's delete control does the same and rotates the installation identifier. An offline deletion is retried until acknowledged. Inactive records expire after 12 months without use, with up to three more days for deletion. Deletion removes it from the alert service, including its associated delivery rows; copies in our hosting provider's backups expire within that provider's backup period.
Your rights and requests
You can ask whether we hold your consumer health data, get a copy together with a list of any recipients it was shared with, including the service providers described above, have it deleted, or withdraw consent. Use the controls above, or email us with the subject "Privacy request" and the request code shown in the app under Settings → Your data; we use that code to confirm the request comes from your installation. We respond within 45 days. If we decline, reply to appeal; if we deny your appeal, we will tell you how to contact your state's Attorney General.
Changes
Before a material change takes effect, we post the updated policy here with a new effective date.