Consumer Health Data Privacy

This page covers one narrow thing: health details you choose to volunteer when you ask the assistant a question. Everything else NitrateSmart does with information is in the Privacy Policy.

Effective August 5, 2026

What this covers

NitrateSmart is an educational water-information service. It is not a health-care provider, it does not diagnose or treat anything, and it does not need your medical history to explain a water-system result. But a question like “is this level safe in pregnancy?” or “we have an infant — should we worry?” volunteers health context, and health context deserves its own set of promises. This page makes them. It exists because Washington’s My Health My Data Act asks services like this one — even small ones — to say these things separately and plainly.

What we may process

If you choose to mention pregnancy, an infant, a symptom, a diagnosis, a treatment, or a medication in a question, that mention may be consumer health data, and we may process the question and the answer needed to respond to it. Ordinary technical records — an IP address, a session cookie — may make the request linkable to a device. We do not collect medical records, insurance records, genetic information, or biometric data, and we do not want them: the assistant can answer a nitrate question without any of it. If you use the optional voice input, we receive the text it produces, never the recording. An address entered in the lookup is used to find your water system and is never used to infer a health condition or a visit to a health-care facility.

Where it comes from

From you, directly, in the question you type or speak. Nowhere else. Water-system records describe community water supplies; they say nothing about any person’s health.

Why it is processed

Only to do what you asked: answer the question with your context taken into account, keep the service secure, respond to a privacy request, or comply with the law. Never for advertising, marketing profiles, unrelated product development, or data brokerage. If that list ever needs to grow, the change comes with notice and, where the law requires it, your affirmative consent first.

Who sees it

Two processors may see a health-related question, each because the service cannot work without it: our AI provider, which produces the answer under the commitments on the Privacy page (never used to train models, held no more than 30 days), and Cloudflare, which transmits the request. The Census Bureau and Esri handle only address lookups and never receive assistant questions. We have no affiliates, we sell no consumer health data, and we disclose none to advertisers, data brokers, or anyone else outside this list.

How long it lasts

NitrateSmart keeps no account-based health profile and archives no chat transcripts; the conversation lives in your browser for the session. Our AI provider holds questions and answers for no more than 30 days under its standard terms. Correspondence about a health-data request may be kept up to 24 months to document how it was handled — and a request need not include any health details beyond what identifies the material in question.

Your rights

Subject to applicable law, you may ask us to confirm whether we collect, share, or sell consumer health data about you; to access what we hold; to name the processors who received it; to withdraw consent for future collection or sharing; and to delete it. Write to realperson@nitratesmart.com — no account needed. We may ask for limited information to authenticate the request, we respond without undue delay and within 45 days where Washington law applies, and where required we notify the processors of a valid deletion. If we refuse a request, you may appeal by replying with the subject “Consumer health data appeal”; the appeal is reviewed separately and the response explains the result and any further complaint options. Exercising these rights costs you nothing, and we will not discriminate against you for using them.

Educational information, not medical or personal safety advice. For your own tap or a private well, a certified-laboratory test is the only way to know.