Consumer Health Data Privacy Policy

Pending legal review. Last updated: [the day it goes live]

The short version

Some of what you tell StockNSpoon is health information: whether you take a GLP-1 medicine, your weight, your protein goal and the meals you log.
We use it to plan your meals and work out your daily numbers. Nothing else.
We never sell it.
An AI service helps us build your meal plan and work out what's in the meals you log. It works for us and may not use your information for anything else.
You can take back your yes or delete your information any time, in the app or by email. We answer every request within 45 days.

This page covers everyone who uses StockNSpoon, wherever you live. It's the notice Washington's My Health My Data Act and similar state laws ask for. Our Privacy Policy covers everything else.

The health information we collect

Your GLP-1 answer. If you choose Basil, our meal plan for people taking a GLP-1 medicine, we save that you take one. We save it only after you say yes.
Your legend. Which one you choose (Rye, Sage, Dash, Olive or Basil), the guide your meal plan follows, and the goal that comes with it: lose, keep or gain weight.
Your body. Your weight, height, age and sex, your body fat if you add it, your goal weight and goal date if you set them, and the weigh-ins you record.
Your daily numbers. Your protein goal, and the calorie, protein, carb, fat, fiber and water targets you set or we work out for you.
What you eat and drink. The meals, snacks and water you log, and the calories and nutrients we work out for them. If you log a meal with a photo, we use the photo to see what's on the plate and don't keep it.
Food allergies and foods you avoid.
Smoking and drinking, if you answer those questions.

Where it comes from

From you, when you answer our questions, choose a legend, log meals, water or your weight, or ask the assistant.
From our own math. We work out your daily targets from your answers.

We don't buy health information or collect it from other companies.

Why we collect it

To build meal plans that fit your body, your goal and the foods you eat. For Basil, that means more protein and fiber in smaller portions.
To work out your daily calories, protein and water.
To show you what you've eaten today and how your weight is changing.
To send the reminders you turn on, like how much protein you have left for the day.
To keep StockNSpoon working, by finding and fixing errors.

We don't use your health information for ads.

Who receives it

We share your health information only with the companies that run parts of StockNSpoon for us. The law calls them processors. Each one gets only what its job needs and may use it only to do that job for us.

The AI service that builds your plan (OpenAI). It gets what it needs to plan your week: your legend and goal, your daily calorie and protein numbers, your food allergies and the foods you like, and, if you chose Basil, a note to plan for a GLP-1 medicine. It also gets the words or photo you use to log a meal and the questions you ask the assistant. It doesn't get your name or email address.
Our hosting provider (Render) stores your account and runs our servers, in Oregon, USA.
Our error reports (Sentry). If something breaks, the report can include parts of what you were saving at that moment. It carries an account number, never your name or email address.
Our app analytics (PostHog) learns which legend you chose and your goal, so we can see which ones people understand. It never learns that you chose Basil, and never gets your weight, your numbers or what you eat.
The services that deliver reminders (Expo and Apple), if you turn reminders on. A reminder can include your protein for the day.
When the law requires it, for example a court order, we may have to hand it over.

We never sell it

We have never sold your health information, and we never will. We don't share it with advertisers or data brokers.

Your choices

Take back your yes. Choose a different legend in the app and we erase your GLP-1 answer right away. Your plans stop using it from then on. You can also ask us by email.
See it. Ask us whether we have your health information, and get a copy of it, a list of every company that received it, and how to reach each one. You can also download a copy of your data in the app's settings.
Delete it. Delete your account in the app's settings and we erase it, with your health information, right away. Or email us and we'll do it for you. We also ask the companies above to delete what they have. Copies in our backups are gone within six months.

How to ask. Email support@thesaga.ai from the email address on your account and tell us what you'd like. We check it's really you, then answer within 45 days. If we need more time, we tell you why within those 45 days and take no more than 45 days more. It's free, up to twice a year.

If we say no. Reply to our answer within 45 days and ask us to look again. We answer within 45 days and explain our decision in writing. If you still disagree, you can complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

No penalty. We won't charge you more or treat you differently for using any of these choices. Without your GLP-1 answer, we just can't shape your plan around it.

If this changes

If we ever want to collect new kinds of health information, or use it for something new, we'll ask you first. Every change is posted here with a new date.

Contact us

Saga AI LLC (StockNSpoon)
254 Chapman Rd, Newark, Delaware 19702
support@thesaga.ai