Consumer health data policy

This policy explains how Comitivo, Inc. (“Comitivo”, “we”) handles consumer health data: information about your health, or that could reveal it, under laws such as Washington’s My Health My Data Act and Nevada’s consumer health data law. We give these protections to everyone, wherever they live. Our privacy policy covers everything else.

What we collect

Only the dietary needs you choose to add:

• Allergies: peanuts, tree nuts, milk, eggs, fish, shellfish, molluscs, wheat, soy, sesame, mustard, celery, lupin and sulphites.
• Diets: vegetarian, vegan, pescatarian, gluten-free and dairy-free, and the religious diets halal and kosher.
• That you don’t drink alcohol.
• A short private note, or that you have no dietary needs.
• That you agreed to this, when, and which version of the agreement.

We don’t collect health data any other way, and we never work it out from your chat, photos, location, votes or anything else you do. If you write about your health in a chat message or a question to the trip assistant, we treat it as described in the privacy policy and never use it for anything else.

Where it comes from

Only from you, on the dietary needs screen, after you agree on a separate screen.

How we use it

• To show your allergy card, which only you see.
• If you choose “Show my dietary needs to the people in my trips, with my name”: to show your diets, allergies and whether you drink, with your name, to the people going in the trips you’re going on, organizers included. Never to people who can’t go, people only invited, or anyone outside those trips.
• Otherwise: to show the organizers of your plans combined counts, such as “Vegetarian: 2”, from people going, once at least three others have added theirs (accounts newer than a week don’t count toward that yet). Never your name. In a small group of friends, people may still guess who a count is about.
• To let the trip assistant use what you chose to share (your needs by name, or only the combined counts) when someone going in your trips asks it for suggestions; it may mention them in its answer.

You make this choice when you agree, nothing is chosen for you, and you can change it at any time; turning sharing by name off removes your name straight away. Your note is never shown to anyone, whichever you choose.

We never use it for advertising, never sell it, and never send it to our analytics or error reports.

Who receives it

Other people in your trips get your needs with your name only if you chose that, and otherwise only the combined counts above. Beyond them, it reaches only these companies, which process it for us under contract and may not use it for anything else:

• Supabase stores it, encrypted a second time so that a copy of the database alone doesn’t reveal it, and runs the server function that reads it. Contact: supabase.com/privacy.
• Vercel runs the website, which passes your answers to that function when you save them on the website. Contact: vercel.com/legal/privacy-policy.
• Anthropic receives what the trip assistant needs to answer a question: the combined counts, and your diets, allergies and whether you drink with your name only if you chose to share them by name. Never your note. Contact: anthropic.com/legal/privacy.

We have no affiliates that receive it, and we never share it with advertisers, partners or data brokers. We would disclose it otherwise only if the law requires us to.

On your phone

The iPhone app keeps a copy of your allergy card on your phone so it works offline, and removes it when you sign out.

How long we keep it

Until you delete it or your account. Deleting it takes effect immediately; backups we keep in case of an outage hold it for up to 30 days.

Your rights

• See it, download it and confirm what we hold: in Settings, or by asking us. We’ll also tell you every company that received it, with how to contact them.
• Stop sharing by name, or withdraw your agreement by deleting your dietary needs, at any time. Either takes effect at once.
• Delete it: in Settings, or by asking us. We delete it at once, our backups clear it within 30 days, and we tell the companies above to delete what they hold.

To ask, email support@comitivo.com from the address on your account, so we know it’s you. We answer within 45 days, or tell you within that time if we need up to 45 more and why. Asking is free, at least twice a year.

If we turn down your request, you can appeal by replying to our answer. We’ll decide within 45 days and explain why. If we deny your appeal, you can complain to your state’s attorney general; in Washington, at atg.wa.gov/file-complaint.

Changes

Before we use your dietary needs in a new way or share them with anyone new, we ask for your agreement again. We put the date of every change at the top of this page.

Contact

Comitivo, Inc., a Florida corporation. support@comitivo.com