AllTaken

Washington and Nevada

Washington Health Data Privacy Policy

Last updated 28 October 2026

1. Who this policy covers

This policy is provided by Alltaken, Inc. (“AllTaken”, “we”, “us”). It supplements our Privacy Policy and applies to “consumer health data” as defined by Washington’s My Health My Data Act: personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. It covers Washington residents and anyone whose consumer health data we collect in Washington, when they use AllTaken in a personal or household capacity. Section 8 explains how it also applies to Nevada consumers.

We do not sell consumer health data, we do not use it for advertising, and we do not share it with advertising partners or data brokers.

2. Consumer health data we collect

Depending on the features you use, we collect:

  • Medications, supplements and routines: the products you add, your own doses and units, schedules, start and end dates, notes, inventory counts and reminder settings, and the history of changes to each routine.
  • Intake records: whether each dose was taken, skipped, forgotten or not planned, with the time and any reason you add.
  • Lab results and symptoms, only if you record them: lab tests with their values, units, report dates and your lab’s printed range, and the symptoms you track with each entry’s severity and time.
  • People you help: the name and relationship of up to two people whose lists you keep in your account, and the same kinds of records you enter for them. These are never sent to an AI processing provider.
  • Caregiver links, only if you set one up: the record of the consent you gave on your own phone, the doses a linked caregiver marks for you, and your phone’s status (when it last synced, your time zone and whether notifications are on).
  • Goals and self-reported wellbeing: the health goals you choose (such as sleep, energy or recovery), any sleep or meditation targets, your answers to the App’s occasional question about how you have been feeling (such as sleep, energy, digestion or focus), and mood, energy and stress check-ins recorded in earlier versions of the App.
  • Scans: label and shelf photos, the text read from them and barcodes. Prescription labels you scan can show health information.
  • Questions to AI features: the health-related questions you ask Ask AllTaken and the summaries of your own records used to answer them, only when AI features are on.
  • Apple Health data, only if you allow it: daily totals or averages of steps, active energy, resting heart rate, heart rate variability, sleep and workouts. Raw Health samples stay on your iPhone.
  • Information derived from your records: patterns, adherence and weekly summaries, ingredient totals and overlaps, and goal coverage, which may reveal information about your health.

Your onboarding answers (such as your age range, height and how often you forget) stay on your iPhone and are not collected by us, except for a goal you choose, which is saved to your account.

3. Where it comes from

  • You, when you enter or submit information in the App, including scans and questions.
  • Apple Health on your iPhone, only for the categories you authorise and only while you allow it.
  • Your use of the App: the summaries and insights calculated from your own records.
  • A caregiver you link with, only for the doses they mark as taken or skipped on your routine.

Apart from a caregiver you link with, we do not obtain consumer health data from other users, advertising or marketing partners, social media, data brokers or public databases.

4. Why we collect and use it

We collect and use consumer health data, with your consent and only as necessary to provide the features you ask for, to:

  • keep your routines, intake history and reminders, and show your patterns and summaries;
  • keep your records in your account so they are available across sessions and devices;
  • run a caregiver link you set up: show the person you linked with what your consent screen lists, record the doses they mark, and send them the alerts they turn on;
  • identify products from your scans and answer your questions, only when you have turned AI features on;
  • respond to your support requests and to requests about your information;
  • secure the Service, prevent misuse and comply with the law.

You give consent when you set up the App and agree to the processing of your health information, when you allow Apple Health access, when you turn on AI features, and, for a caregiver link, when you tap “Allow” on its consent screen on your own phone. We ask for new consent before using consumer health data for any other purpose.

5. Who we share it with

Each category in section 2 may be shared only with the recipients below, only as needed for the purposes in section 4:

  • Service providers (processors) that act on our behalf under contract: the providers that host and store your account, and, only when AI features are on, AI processing providers and the provider that hosts our safety check for questions (never your medications, lab results, symptoms or the records of people you help). They may use the data only to provide their service to us.
  • Apple, only to deliver a caregiver’s alerts through Apple Push Notification service: the alert names the person helped (the name they chose to be shown) and a time of day, never which item.
  • A person you choose to link as your caregiver in the App, only after your separate consent on your own device, and only the categories listed on that consent screen: your supplements and medications with their doses, schedules, history, notes and prices; the doses and their marks; skipped or added days; reminder settings; supply and refill estimates; a pharmacist sheet of your list; your phone’s status; and alerts that a time of day is still open or that your phone has not been active for a day. Never your Apple Health data, wellness answers, patterns, AI chats and scans, lab results, symptoms or the records of people you help.
  • People you choose, when you use the App’s share feature or email us: only what you decide to share.
  • Government agencies, courts and legal bodies, when the law requires it.
  • A buyer or successor of our business, in a merger, acquisition or sale of assets, subject to this policy.

We have no affiliates that receive consumer health data. The website and its beta waitlist hold no consumer health data and are kept separate from the App.

6. Your rights

You have the right to:

  1. confirm whether we collect, share or sell your consumer health data, and access it, including a list of all third parties and affiliates with whom we have shared it and an email address or other online way to contact them;
  2. withdraw your consent to our collection and sharing of your consumer health data;
  3. have your consumer health data deleted, including from our service providers.

To make a request, email privacy@alltaken.app. You can also act yourself in the App: Profile › Data & Privacy › Download my data gives you a copy; Profile › Delete my account and data deletes your account and its data (our servers complete the deletion 72 hours later); and you can withdraw consent by turning off AI features in the App or Apple Health access in iPhone Settings. To withdraw consent to a caregiver link, remove your caregiver in Profile › Care; a caregiver ends it with Profile › Care › Stop helping. Either ends the sharing at once, and the copy of your routine on the caregiver’s phone is deleted.

We will verify your request using information connected to your account, respond within 45 days of receiving it, and tell you if we need one more 45-day period because the request is complex. Requests are free, up to twice a year.

7. How to appeal

If we decline to act on your request, you can appeal by emailing privacy@alltaken.app with “APPEAL” in the subject line and a copy of, or a reference to, our decision. We will respond in writing within 45 days, explaining what we did and why. If we deny your appeal, you can submit a complaint to the Washington State Attorney General, or, for Nevada, the Nevada Attorney General.

8. Nevada consumers

This policy is also our consumer health data privacy policy under Nevada’s consumer health data law (Senate Bill 370, 2023). If you are a Nevada consumer, everything in sections 2 to 7 applies to you: the categories of data we collect, where they come from, why we use them, who receives them, and your rights to confirm, access, delete and withdraw consent, made and appealed in the same way. We do not sell consumer health data and do not use it for advertising.

9. Changes to this policy

We will update this policy before we change how we collect, use or share consumer health data, and the page will show the date it was last updated. Before collecting or sharing consumer health data in a new way, we will ask for your consent.

10. Contact us

For questions, complaints or requests about this policy, email privacy@alltaken.app or write to Alltaken, Inc., Attn: Privacy/Legal, 2810 North Church Street, Wilmington, DE 19802, United States.