Consumer health data privacy policy

Last updated: October 18, 2026

Trapeza hasn't launched yet, and the waitlist doesn't collect any health information. This policy describes how the app will handle health-related information when it launches.

This policy is for people in Washington, Nevada, Connecticut and anywhere else with a consumer health data law, and we apply it to every Trapeza user. It explains how Trapeza (“we”, “us”) handles information that could identify a person's past, present or future physical health. It adds to our Privacy policy, which covers everything else.

What health-related information we collect

• Food allergies and intolerances for each person in your household, and how serious they are.
• Health-related diets, such as gluten-free for celiac disease or low-sodium.
• Religious food rules: the fasting calendar you choose from Trapeza's Eastern Orthodox calendars or upload from your own church, with the days it marks and which people in your household keep it. They aren't health information in themselves, but meals left out because of them can look like a diet, so we protect them the same way.
• What can be inferred from the above, such as the meals and ingredients our system leaves out of a person's plan because of an allergy.
• Anything health-related you tell the setup assistant in a chat message.

We don't collect diagnoses, medications, medical records, precise location, biometric or genetic data, and we don't need any of them. Please don't share them in chat.

Where it comes from

From you, the account holder, about yourself and the members of your household you add, including a fasting calendar you choose or upload; and from our own systems, which derive the inferences above when they build and check your plans.

Why we collect and use it

• To plan meals that avoid each person's allergens and fit their diets, which is the service you ask us for.
• To check every plan, with automatic safety checks, against those settings before you see it.
• To build your grocery list without the ingredients your household must avoid.
• To answer your questions and keep the service secure and working.

We collect it only with your consent, which the app asks for separately before you enter any of it, and only what meal planning needs. You can withdraw your consent at any time in the app's settings. Withdrawing it closes your account: we stop collecting it and we delete your account and everything your household has added or done in Trapeza within 30 days, including allergies, diets and preferences, plans, chat history, recipes and ingredients you imported or built, photos, fasting calendars you uploaded, and your support emails. We keep only a record that you made the request, for 24 months, and your email on our unsubscribe list if you opted out, as the law requires.

Who we share it with

We don't sell consumer health data, use it for advertising, or share it with third parties. We have no affiliates. We disclose it only to these service providers, which process it for us under contracts that limit them to our instructions:

• Supabase, which hosts the app's database and server functions.
• Anthropic, which provides the AI models that run the setup conversation, choose meals for your plan, and read a fasting calendar you upload. We send the calendar file only to be read, and we don't keep it.

We never send it to Instacart, Impact, email, analytics or error-tracking providers. No other company collects consumer health data about you through our website or app, over time or across other websites and apps. We don't use geofences around places that provide health care.

Your rights

You can:

• confirm whether we collect, share or sell your consumer health data, and see it;
• get a list of every third party and affiliate we've shared or sold it to, with their contact details (today the list is only the service providers above, and we have never sold it);
• withdraw your consent to our collecting or sharing it;
• have it deleted. We delete it from our systems and tell our service providers to delete it within 30 days, and it drops out of our encrypted backups within 30 days.

How to ask: use the settings in the app or email support@trapeza.io. You don't need to create an account to ask. We'll confirm your identity, usually by asking you to reply from the email address on your account. We'll respond within 45 days, or tell you within those 45 days if we need up to 45 more and why. Requests are free, up to twice a year.

Appeals: if we turn down your request, you can appeal by replying to our answer with “Appeal” in the subject line. We'll answer in writing within 45 days and explain our decision. If we deny your appeal, you can complain to your attorney general: in Washington at atg.wa.gov/file-complaint, in Nevada at ag.nv.gov/Complaints/Consumer_Complaint, and in Connecticut at portal.ct.gov/ag.

We won't treat you differently for using these rights.

Changes

Before we collect a new kind of consumer health data, or use or share it for a new purpose, we'll update this policy and ask for your consent first.

Contact

Email support@trapeza.io or use the Support page.