Washington Consumer Health Data Privacy Policy
This policy describes how Sonder Digital LLC (“we”) handles consumer health data, as Washington’s My Health My Data Act (RCW 19.373) defines it, collected through the Grain app and grainios.com.
1. The consumer health data we collect, why, and how we use it
- Health details you add to your profile: allergies and how severe they are; health conditions, including pregnancy or feeding an infant; ingredients you avoid in food and in beauty products; skin concerns; supplement goals; period and intimate-care preferences; a gluten-free or dairy-free eating style; a weight-loss goal; and a Gluten-Free or Crossed Grain certification preference. We use them only to check products for you: allergy and condition warnings, your personal score, fit checks, and leaving products that conflict with them out of suggestions. We do this on our own servers and in the app, and we do not send these details to our AI provider.
- What we work out from them: your personal score and fit results for the products you look at. We use them only to show them to you.
- Health details you choose to type into an Ask Grain question, a product search, a product correction you send with Submit Feedback or an email to us. We use them only to answer that question, search or email, or to check that correction. Our AI provider (Google) processes questions and searches for us to produce the answer, our email delivery provider (Resend) carries product corrections to our inbox, and our email provider (Google Workspace) holds the emails you send us and those corrections.
- Health details you record for people you shop for are stored with your account on our servers, and we use them only to check products for them in your account.
2. Where it comes from
From you, when you enter it, type it or send it to us, and from our own calculations (your personal score and fit results).
3. The consumer health data we share, and with whom
We do not share consumer health data with any third party or affiliate.
4. Your rights and how to use them
- Confirm and access: ask whether we collect consumer health data about you and get a copy of it, with a list of every third party and affiliate we have shared it with and how to contact them.
- Withdraw consent: email contact@grainios.com with “Withdraw consent” in the subject. We stop storing your health details and delete them within 15 days.
- Delete: delete any health detail in the app, delete your account (Profile tab, tap your name, Account Settings, Delete Account), or email us. We delete it from our live systems within 30 days of confirming your request, and from backups as they expire, never later than six months after your request. We tell our service providers to delete it.
- How to ask: email contact@grainios.com, preferably from the address on your Grain account, or use the app where shown. We may ask you to confirm that the request is yours; you never need to create an account. We answer within 45 days. If we need longer, we tell you why within those 45 days and answer within 45 more.
- Appeal: if we decline to act on your request, reply to our decision or email contact@grainios.com with “Appeal” in the subject. We answer in writing within 45 days and explain why. If we deny your appeal, you can complain to the Washington Attorney General at atg.wa.gov/file-complaint.
Contact: Sonder Digital LLC, contact@grainios.com.