What this notice covers
DinDin has one optional profile field called “Food allergies”. It stores foods or ingredients you want us to treat as strict exclusions when planning meals or generating recipe and drink suggestions. Certain state privacy laws may classify this narrow category of information as consumer health data, and this notice explains how we handle it.
What we intentionally collect
The Food allergies field is meant to hold food or ingredient names only — peanuts, tree nuts, shellfish, sesame, milk, eggs and the like.
We do not ask for or maintain medical records, diagnoses, symptoms, severity, medications, treatment information, laboratory results, health-insurance information or healthcare-provider records. Please do not put those details in the Food allergies field or in other free-text fields.
Where it comes from
It comes from you, or from an adult account holder authorized to manage meal planning for the household. We do not infer new allergies from your recipe history, grocery purchases, browsing or AI analysis, and we do not save an allergy back into your profile because something you typed into an AI request mentioned one.
Why we use it
Only for the meal-planning you ask for: the listed ingredients are treated as strict exclusions and applied to relevant recipe and drink suggestions. The label “Food allergies” tells DinDin to treat the exclusion more strictly than an ordinary dislike.
AI processing
When you ask for a recipe or drink suggestion that needs the rule, we may send the relevant ingredient names to an AI processor — as a list of exclusions and nothing more. We do not send your email, billing information, account identifiers or unrelated profile fields because of this field, and we do not send the list to image generation, analytics, advertising, or an AI request that does not need it.
No sale, no advertising use
We do not sell this data. We do not use it for behavioral advertising, sponsorship targeting, cross-site tracking, audience building or data-broker activity.
Your rights
You can edit or remove entries at any time in your profile. Where applicable law gives you more — access, deletion, withdrawing consent to covered collection or sharing, information about covered third parties, or an appeal of a decision — you can make a request through the Privacy Request process, choosing “Consumer health data request”.
Deletion
Removing an entry takes it out of active profile data promptly and stops it being used in planning and AI suggestions from that point on. For a covered deletion request we also notify the processors involved and make sure a deleted value is not restored into active data from a backup.
Security
Access is restricted, and we apply administrative, technical and physical safeguards appropriate to the data.
Everything else we hold
The Privacy Policy covers everything else, including how long we keep it and what closing your account does.