AllTaken

Washington and Nevada

Washington Health Data Privacy Policy

Last updated 3 October 2026

1. Who this policy covers

This policy is provided by AllTaken, Inc. (“AllTaken”, “we”, “us”). It supplements our Privacy Policy and applies to “consumer health data” as defined by Washington’s My Health My Data Act: personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. It covers Washington residents and anyone whose consumer health data we collect in Washington, when they use AllTaken in a personal or household capacity. Section 8 explains how it also applies to Nevada consumers.

We do not sell consumer health data, we do not use it for advertising, and we do not share it with advertising partners or data brokers.

2. Consumer health data we collect

Depending on the features you use, we collect:

  • Medications, supplements and routines: the products you add, your own doses and units, schedules, start and end dates, notes, inventory counts and reminder settings, and the history of changes to each routine.
  • Intake records: whether each dose was taken, skipped, forgotten or not planned, with the time and any reason you add.
  • Goals and self-reported wellbeing: the health goals you choose (such as sleep, energy or recovery), any sleep or meditation targets, your answers to the App’s occasional question about how you have been feeling (such as sleep, energy, digestion or focus), and mood, energy and stress check-ins recorded in earlier versions of the App.
  • Scans: label and shelf photos, the text read from them and barcodes. Prescription labels you scan can show health information.
  • Questions to AI features: the health-related questions you ask Ask AllTaken and the summaries of your own records used to answer them, only when AI features are on.
  • Apple Health data, only if you allow it: daily totals or averages of steps, active energy, resting heart rate, heart rate variability, sleep and workouts. Raw Health samples stay on your iPhone.
  • Information derived from your records: patterns, adherence and weekly summaries, ingredient totals and overlaps, and goal coverage, which may reveal information about your health.

Your onboarding answers (such as your age range, height and how often you forget) stay on your iPhone and are not collected by us, except for a goal you choose, which is saved to your account.

3. Where it comes from

  • You, when you enter or submit information in the App, including scans and questions.
  • Apple Health on your iPhone, only for the categories you authorise and only while you allow it.
  • Your use of the App: the summaries and insights calculated from your own records.

We do not obtain consumer health data from other users, advertising or marketing partners, social media, data brokers or public databases.

4. Why we collect and use it

We collect and use consumer health data, with your consent and only as necessary to provide the features you ask for, to:

  • keep your routines, intake history and reminders, and show your patterns and summaries;
  • keep your records in your account so they are available across sessions and devices;
  • identify products from your scans and answer your questions, only when you have turned AI features on;
  • respond to your support requests and to requests about your information;
  • secure the Service, prevent misuse and comply with the law.

You give consent when you set up the App and agree to the processing of your health information, when you allow Apple Health access, and when you turn on AI features. We ask for new consent before using consumer health data for any other purpose.

5. Who we share it with

Each category in section 2 may be shared only with the recipients below, only as needed for the purposes in section 4:

  • Service providers (processors) that act on our behalf under contract: the providers that host and store your account, and, only when AI features are on, AI processing providers and the provider that hosts our safety check for questions. They may use the data only to provide their service to us.
  • People you choose, when you use the App’s share feature or email us: only what you decide to share.
  • Government agencies, courts and legal bodies, when the law requires it.
  • A buyer or successor of our business, in a merger, acquisition or sale of assets, subject to this policy.

We have no affiliates that receive consumer health data. The website and its beta waitlist hold no consumer health data and are kept separate from the App.

6. Your rights

You have the right to:

  1. confirm whether we collect, share or sell your consumer health data, and access it, including a list of all third parties and affiliates with whom we have shared it and an email address or other online way to contact them;
  2. withdraw your consent to our collection and sharing of your consumer health data;
  3. have your consumer health data deleted, including from our service providers.

To make a request, email [email protected]. You can also act yourself in the App: Profile › Data & Privacy › Download my data gives you a copy; Profile › Delete my account and data deletes your account and its data (our servers complete the deletion 72 hours later); and you can withdraw consent by turning off AI features in the App or Apple Health access in iPhone Settings.

We will verify your request using information connected to your account, respond within 45 days of receiving it, and tell you if we need one more 45-day period because the request is complex. Requests are free, up to twice a year.

7. How to appeal

If we decline to act on your request, you can appeal by emailing [email protected] with “APPEAL” in the subject line and a copy of, or a reference to, our decision. We will respond in writing within 45 days, explaining what we did and why. If we deny your appeal, you can submit a complaint to the Washington State Attorney General, or, for Nevada, the Nevada Attorney General.

8. Nevada consumers

This policy is also our consumer health data privacy policy under Nevada’s consumer health data law (Senate Bill 370, 2023). If you are a Nevada consumer, everything in sections 2 to 7 applies to you: the categories of data we collect, where they come from, why we use them, who receives them, and your rights to confirm, access, delete and withdraw consent, made and appealed in the same way. We do not sell consumer health data and do not use it for advertising.

9. Changes to this policy

We will update this policy before we change how we collect, use or share consumer health data, and the page will show the date it was last updated. Before collecting or sharing consumer health data in a new way, we will ask for your consent.

10. Contact us

For questions, complaints or requests about this policy, email [email protected] or write to AllTaken, Inc., Attn: Privacy/Legal, 2810 North Church Street, Wilmington, DE 19802, United States.