Washington Consumer Health Data Privacy Policy

Effective September 1, 2026Last updated September 1, 2026

This Washington Consumer Health Data Privacy Policy (“Washington Policy”) supplements the Chow Privacy Policy. It applies only to Washington residents who interact with Chow in an individual or household capacity, and only to information that qualifies as “consumer health data” under the Washington My Health My Data Act (RCW 19.373).

Capitalized terms not defined here have the meaning given in the Chow Privacy Policy.

Chow is operated by Flame Industries, Inc., a Delaware corporation. Flame Industries, Inc. is the regulated entity responsible for the consumer health data described below.

Chow is a meal-planning and grocery-planning application. It is not a medical, clinical, or health-care service, and it does not diagnose, treat, or manage any condition.

1. Categories of Consumer Health Data We Collect

Chow collects a narrow set of information that may reveal or allow someone to infer a health condition. Depending on the preferences you choose, this may include:

  • food allergies you tell us about;
  • food intolerances you tell us about;
  • medical dietary restrictions (for example, a diet followed for a diagnosed condition);
  • pregnancy-related dietary preferences;
  • dietary goals you set within the app;
  • ingredients you ask Chow to avoid, where the reason for avoiding them indicates a health condition; and
  • the contents of messages you send us if you choose to describe a health condition when contacting support.

Where a dietary preference could reasonably indicate a health status, we treat it as consumer health data under this Washington Policy even if you did not describe it as health-related.

Chow does not collect diagnoses, medications, lab results, biometric identifiers, body measurements, heart rate, glucose data, or data from wearables or connected health devices. Chow does not connect to Apple HealthKit or Google Health Connect.

2. Categories of Sources from Which We Collect Consumer Health Data

We collect consumer health data only from you. Specifically:

  • information you enter during onboarding or in your Chow preferences;
  • information you enter into a recipe, meal plan, grocery list, note, or prompt within the app; and
  • information you provide when you contact Chow support or respond to a survey.

We do not obtain consumer health data from data brokers, advertising partners, public databases, other Chow users, or any other third-party source.

3. Purposes for Collecting and Using Consumer Health Data

We use consumer health data only to operate Chow for you. Specifically, to:

  • generate meal plans, recipes, and grocery lists that reflect your restrictions;
  • exclude or flag ingredients you have told us to avoid;
  • adjust substitutions and recommendations to your stated needs;
  • remember your preferences between sessions so you do not re-enter them;
  • respond to support requests you send us;
  • investigate and address safety or accuracy problems you report;
  • secure your account and prevent fraud or unauthorized access; and
  • comply with legal obligations and defend legal claims.

We do not use consumer health data for advertising, to build advertising audiences or profiles, for cross-context behavioral advertising, or for any form of profiling that produces legal or similarly significant effects.

4. Sharing of Consumer Health Data

a. Categories of Consumer Health Data Shared

We may share the categories listed in Section 1 only where doing so is necessary to deliver the feature you requested, or where required by law.

b. Categories of Third Parties and Affiliates

Flame Industries, Inc. has no affiliates that receive consumer health data.

We share consumer health data with the following categories of third parties, each acting as a service provider or processor on our behalf and under contractual restrictions limiting their use of the data to providing services to Chow:

  • Artificial intelligence providers. When you request an AI-generated meal plan, recipe, substitution, or grocery list, the dietary restrictions and allergies relevant to that request are transmitted to the AI provider that generates it so the output can account for them. Our current AI providers are OpenAI and Google.
  • Cloud infrastructure and database providers. Your saved preferences and plans are stored on hosted infrastructure. Our current provider is Supabase.
  • Customer support providers. If you contact us and describe a health condition, that message is handled through our support tooling.
  • Legal and safety recipients. We may disclose consumer health data to law enforcement, regulators, or a court where we are legally required to do so, or where necessary to establish, exercise, or defend a legal claim.
  • Successors in a corporate transaction. If Chow or Flame Industries, Inc. is acquired, merged, financed, or reorganized, consumer health data may transfer to the successor, subject to this Washington Policy or a successor policy that provides equivalent protection.

We do not share consumer health data with advertising networks, social media platforms, attribution providers, analytics providers, data brokers, or marketing partners. Our advertising and attribution integrations, including Meta, TikTok, AppsFlyer, and PostHog, are configured not to receive allergy information, medical dietary information, pregnancy-related dietary information, or precise location.

c. Sale of Consumer Health Data

Chow does not sell consumer health data as “sell” is defined in RCW 19.373.010, and we do not seek or accept the written authorization the Act requires for a sale. If that ever changes, we will obtain a valid authorization from you first, and it will be separate from the consent described below.

d. Geofencing

Chow does not operate a geofence around any health-care facility, and we do not use location to infer that you are seeking or receiving health services. Where Chow uses a ZIP code, city, or approximate location, it is to identify nearby grocery retailers and estimate prices.

5. Consent

We ask for your consent before collecting consumer health data, and separately before sharing it with the service providers described in Section 4. These consents are requested independently of your acceptance of the Chow Terms of Service, and each is specific to the purposes described in this Washington Policy.

You may decline either consent. Declining will limit Chow’s ability to plan around your restrictions, and some features may not function as intended. You may withdraw either consent at any time using the contact details in Section 8, or by deleting the relevant preferences within the app.

Withdrawing consent does not affect processing that already took place while the consent was in effect.

6. Your Washington Privacy Rights

If you are a Washington resident, you have the right to:

  • confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data;
  • obtain a list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, along with contact information for each;
  • withdraw consent to our collection and to our sharing of your consumer health data; and
  • delete your consumer health data.

When we receive a valid deletion request, we will delete the data from our records, including from archived and backup systems, and we will notify the service providers listed in Section 4 that have received it and instruct them to delete it as well. Deletion from backups occurs no later than six months after we receive your request, in line with the Act.

You may also delete your Chow account at any time using the in-app account-deletion function, which removes the associated preference data.

How to Submit a Request

Email [email protected] with the request you want to make. Please write “Washington Health Data Request” in the subject line so we route it correctly.

We may need to verify your identity before completing a request, and we may ask you to confirm the email address associated with your Chow account. An authorized agent may submit a request on your behalf where Washington law permits, and we will verify both the agent’s identity and your authorization.

We respond within 45 days of receipt. If we need more time, we will tell you within that period and may extend once by a further 45 days. We do not charge a fee for these requests, and we will not discriminate against you for making one.

7. Appeals

If we deny your request, you may appeal by emailing [email protected] with “Washington Health Data Appeal” in the subject line. Please include or reference our original decision so we can review it.

We will respond to an appeal within 45 days with a written explanation of the outcome and our reasoning.

If we deny your appeal, you may submit a complaint to the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.

8. Contact Us

Flame Industries, Inc.
Attn: Chow Privacy
7901 4th St N, STE 300
St. Petersburg, FL 33702
United States

Email: [email protected]

9. Changes to This Washington Policy

We may update this Washington Policy as Chow changes or as legal requirements change. Where the Act requires it, we will obtain fresh consent before collecting, sharing, or selling consumer health data for a purpose not disclosed here. Material changes will be reflected in the “Last Updated” date above and, where required, communicated to you directly.