Consumer Health Data Privacy Policy
This page is for people in Washington State and Nevada, whose laws (Washington's My Health My Data Act and Nevada's Senate Bill 370) ask for a separate notice about consumer health data. Our Privacy Policy has the full detail.
What we collect, and why
Sito is a nutrition tracker that parents and guardians use for their children. The consumer health data we collect is what you enter about your child, and what we work out from it:
- Birth date, gender, height, weight, and the BMI category we calculate
- Activity level, allergies and medical conditions
- Meals, portions, nutrition totals and targets, breastfeeds, bottles and vitamin doses
- Symptom notes on a meal, first foods, and reactions you record after an allergen
- Meal and label photos, meals you describe in your own words, and your messages to the AI assistant
- Food searches, the goal you set for your child, and the parenting concerns you select
We use it to run the App for you: to work out your child's targets, show what they have eaten and power the AI features. We also use it to check and improve the App, including in the quality reviews described in Section 4.1 of the Privacy Policy. On the consent screen at the start of setup, you agree to our storing it to work out your child's targets.
Where it comes from
From you, when you enter it, and from our own calculations and AI features, which work out values from what you entered. We do not buy it from anyone.
What we share, and with whom
We do not sell consumer health data. We send it only to companies that do work for us, for that work:
- Hosting and storage: Supabase
- AI features: Anthropic, Google and OpenAI
- Notifications, which can show your child's first name: Expo, Apple and Google
- Product analytics: PostHog, which receives the words of a food search and, in a few cases, your child's age in months
If you dictate a meal, the recording goes to Apple's or Google's speech service, under their own terms. Section 4.1 of the Privacy Policy names every company and exactly what each one receives. No affiliate of ours receives this data. Anyone you give a partner code signs in as you and sees everything in your account.
We do not send this data to Meta or to any other advertising network. Meta receives the events and identifiers described in Section 5 of the Privacy Policy, which say that someone with your phone started a trial or a subscription to Sito, an app for children's nutrition. They contain no name, age, measurement, allergy, condition, meal or photo. Google and Meta can connect what they receive about your use of our website and the App with your activity on other sites and apps over time; that does not include the data listed here.
Your rights
You can ask us to confirm whether we hold your consumer health data, to give you a copy and the list of companies that received it, and to delete it, and you can withdraw your consent. You can change most of this in the App and ask us to stop collecting or sharing it. You can delete in the App (Section 10 of the Privacy Policy and our account deletion page), which removes your identity from the usage records at PostHog; to have those records deleted too, or for anything else, email berkay@sitonutri.com from the address on your account. We answer within 45 days, and may take 45 more if we tell you why. Using these rights costs nothing and does not change how we treat you, although the App cannot work out your child's targets without the information it needs.
If we refuse a request, you can appeal by replying to our answer, and we answer an appeal within 45 days. If we still refuse, you can complain to the Washington State Attorney General or the Nevada Attorney General.
Changes
We post changes to this page with their date.
Contact
Invictus Logic LLC, 1444 Rhode Island Ave NW APT 212, Washington, DC 20005-5421, United States. Email: berkay@sitonutri.com.