Miredain LLC · A La Carte

Consumer Health Data Privacy Policy

Effective August 14, 2026

1. Who we are and what this covers

A La Carte is published and operated by Miredain LLC, a single-member limited liability company formed in California, United States.

This policy describes how we handle consumer health data as Washington's My Health My Data Act and Nevada's consumer health data law define that term. Everything else about our privacy practices is in our Privacy Policy, and this policy does not replace it.

Where this policy and the Privacy Policy describe the same thing, they say the same thing. If you find a conflict, tell us and we will fix it — the Privacy Policy governs in the meantime.

2. The consumer health data we collect

One category, and it is the one you enter yourself:

• Allergies and intolerances — the foods and ingredients you tell us to watch for.
• Medical dietary requirements — a diet you follow for a health reason, where you tell us about it.
• Dietary preferences that are not health-related, such as a cuisine you avoid by taste, are treated the same way in the App and are covered here too, because in practice the two are recorded together and we would rather over-include than under-include.

That is the whole list. We do not collect biometric data, precise location, health measurements, diagnoses, medications, reproductive or sexual health information, genetic information, or data from any wearable or connected health device. We do not infer a health condition from your recipes, your shopping, or anything else you do in the App.

3. Where it comes from

From you, directly. You enter it during onboarding or in Profile, and you can change or remove it at any time.

We do not buy it, we do not receive it from data brokers, advertising networks, or other apps, and we do not derive it from third-party sources.

4. Why we collect it

To provide the features you asked for, and only those:

• flagging ingredients in a recipe against what you have told us to watch for;
• filtering and adapting recipes, and tailoring suggestions, to your requirements;
• answering a question you ask one of our assistants, where your requirements are part of the answer.

We do not use it for advertising, for profiling, to build a marketing audience, to infer anything else about you, or to train artificial-intelligence models.

5. Who we share it with

We do not sell consumer health data. Selling it — exchanging it for money or other valuable consideration — is something we have never done and do not do. Under Washington law selling it would require your separate written authorization, and we have never asked for one because we have never needed one.

We do not share it for advertising, and we do not disclose it to data brokers, advertisers, or social platforms.

It reaches two kinds of recipient, both of them working for us:

• Hosting, database, and file storage providers — the infrastructure your profile is stored on.
• Artificial-intelligence providers — and only the relevant part, and only when it is needed to produce a result for you, such as checking a specific recipe against your restrictions.

Each of them may use it only to perform that function for us, is bound to keep it confidential, and may not use it for its own purposes. We name the current providers on request — email support@alacarte.recipes.

We may also disclose it where the law requires it, or to establish or defend a legal claim, as described in section 8 of our Privacy Policy.

6. How long we keep it

While your account is active. If you delete a restriction it stops being used immediately and is removed. If you delete your account, we delete your profile — including this data — within 30 days, and backups cycle out within 90 days.

7. Your rights

If you are a Washington or Nevada resident you may:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access it;
• Get a list of the third parties we have shared it with, and contact details for them;
• Withdraw your consent to our collection and use of it;
• Delete it.

The fastest route for most of these is the App itself: edit or remove any restriction in Profile, or delete your account entirely under Profile → Account Settings → Delete Account. You do not need to ask us.

To make a request in writing, email support@alacarte.recipes. We will respond within 30 days, and we may need to verify your identity first. Deleting consumer health data means deleting it from our live systems and directing our service providers to do the same; copies inside routine backups are removed as those backups cycle out.

Withdrawing consent stops future processing. It does not undo processing that already happened, and it means allergen flagging and diet-aware suggestions stop working for you — the App continues to work otherwise.

8. How to appeal

If we decline a request, we will tell you why within the same 30 days. You may appeal by replying to that message, or by emailing support@alacarte.recipes with "Appeal" in the subject line. A different review of the decision will be carried out and we will write to you with the outcome, and our reasons, within 45 days.

If we deny the appeal, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint, or to the Nevada Attorney General if you are a Nevada resident.

9. Who is responsible

Rob Bush, Managing Member of Miredain LLC, is the person responsible for the protection of personal information, including consumer health data.

10. Changes to this policy

We may update this policy. When we do, we will change the effective date above and post the revised policy at alacarte.recipes/consumer-health-data. If a change materially affects how we handle consumer health data, we will give notice before it takes effect.