Consumer Health Data Privacy Policy
Effective date: March 3, 2026
This Consumer Health Data Privacy Policy describes how WellScan (“we,” “us,” or “our”) collects, uses, shares, and retains consumer health data as defined under the Washington My Health My Data Act (RCW 19.373, the “Act”). This policy is separate from and in addition to our general Privacy Policy.
Categories of consumer health data collected
WellScan collects and processes the following categories of consumer health data:
- Ingredient text — the text of ingredient lists that you submit for analysis, either typed manually or extracted from photos of product labels.
- Ingredient analysis results — the safety assessments, research citations, and related information generated by our service in response to your ingredient submissions.
- Photos of product labels — images you submit for the purpose of extracting ingredient text. These images are processed and then discarded; they are not stored permanently.
Purposes for collection
We collect consumer health data for the following purposes:
- To provide ingredient analysis — processing ingredient text through AI and scientific databases to generate safety assessments.
- To cache analysis results — storing hashed ingredient text and corresponding analysis results so that repeated scans of the same product return faster results.
- To maintain and improve the service — using anonymous, aggregated usage data (scan counts, product types) to understand how the service is used.
Categories of sources
Consumer health data is collected from the following sources:
- Directly from you — when you type or paste ingredient lists into the service.
- Photos submitted by you — when you upload or capture photos of product ingredient labels for text extraction.
How consumer health data is shared
We share consumer health data with the following categories of third parties, solely for the purpose of providing the service:
- Anthropic (Claude AI) — ingredient text is sent to Anthropic's API for AI-powered analysis. Anthropic processes this data to generate safety assessments. Anthropic's use of this data is governed by their own privacy policy and data processing terms.
- PubChem and NIH databases — publicly available research databases that are queried using ingredient names to retrieve safety data and citations. These are public queries and do not involve sharing personal information.
We do not share consumer health data with any other third parties. We do not share consumer health data for advertising or marketing purposes.
Sale of consumer health data
We do not sell consumer health data. We have not sold consumer health data in the preceding twelve months. We have no plans to sell consumer health data.
Data retention
We retain consumer health data as follows:
- Photos of product labels — processed immediately for text extraction and then discarded. Not stored permanently.
- Ingredient text (hashed) — a SHA-256 hash of ingredient text is stored as a cache key for up to 90 days. The original ingredient text is not stored after analysis.
- Cached analysis results — stored for up to 90 days, after which they are automatically deleted.
WellScan does not maintain user accounts. No consumer health data is stored in connection with a personal identifier such as a name, email address, or device identifier.
Your rights regarding consumer health data
Under the Washington My Health My Data Act, you have the following rights with respect to your consumer health data:
- Right to know — you have the right to confirm whether we are collecting, sharing, or selling your consumer health data and to access that data.
- Right to delete — you have the right to request that we delete your consumer health data.
- Right to withdraw consent — you have the right to withdraw your consent for the collection and sharing of your consumer health data. If you withdraw consent, we will cease collecting your consumer health data going forward, though you may no longer be able to use the service.
Because WellScan does not require user accounts and does not store consumer health data in connection with personal identifiers, cached analysis data cannot be traced back to any individual. However, if you believe we hold consumer health data associated with you, you may exercise any of the rights above by contacting us using the information below.
How to exercise your rights
To exercise any of the rights described in this policy, or to ask questions about how we handle consumer health data, please contact us at:
We will respond to your request within the timeframes required by the Act. We will not discriminate against you for exercising your rights under the Act.
Changes to this policy
We may update this Consumer Health Data Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date. Continued use of WellScan after changes are posted constitutes your acceptance of the revised policy.