Consumer Health Data Privacy Policy
This Consumer Health Data Privacy Policy is the consumer health data privacy policy of Tiny Anvil Studios LLC (“Tiny Anvil”), which operates the Nibble mobile application (“Nibble”), under the Washington My Health My Data Act. It applies to Washington residents and to anyone whose consumer health data Tiny Anvil collects in Washington. It supplements, and should be read together with, our Privacy Policy.
What Tiny Anvil collects, and why
The baby profile, the reaction log, and the picky-eating screening can include health information about your child. This includes age, feeding approach, risk factors you choose to share (for example eczema or a known egg allergy), foods introduced, supplements, symptoms you record, and screening answers about growth or weight, swallowing or choking, food restriction, mealtime distress, and pain. Tiny Anvil uses this consumer health data only to provide the Service, meaning to generate and personalize the plan, to show the right educational content and suggest you contact your pediatrician when a screening answer warrants it, to save and sync your logs across your household, and to maintain and secure the Service.
Where the data comes from
Tiny Anvil collects this consumer health data directly from you, the account holder, and from the caregivers you invite. Tiny Anvil does not buy it and does not collect it from data brokers.
Consumer health data Tiny Anvil shares
Tiny Anvil shares consumer health data only with the service providers that run the Service under contract, and only as needed for each to perform its function. Tiny Anvil does not sell consumer health data and will not sell it without your separate written authorization. Tiny Anvil does not share consumer health data for advertising.
Who receives consumer health data
The category is technology service providers that store and process data so Nibble can run. The specific provider that stores your consumer health data is Supabase, which provides the secure database, authentication, and household sync. Apple, RevenueCat, Resend, Expo, and PostHog do not receive your consumer health data, and PostHog analytics, if turned on, exclude health data. Tiny Anvil has no affiliates that receive consumer health data.
Your Washington rights
You may ask Tiny Anvil to confirm whether it collects your consumer health data, to access it, to delete it, and to withdraw your consent to its collection or sharing. To make a request, email hello@tinyanvilstudios.com. Tiny Anvil will not deny you the core Service for exercising these rights. If Tiny Anvil denies a request, you may appeal by replying to that decision, and Tiny Anvil will tell you the result. You may also contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.
Consent
Tiny Anvil collects and shares your consumer health data only with your consent or as the Act otherwise permits, and only for the purposes above. Tiny Anvil will ask for your consent before collecting or sharing consumer health data for any new purpose, and for a separate authorization before any sale.
Contact
Tiny Anvil Studios LLC · hello@tinyanvilstudios.com · 522 W Riverside Ave, Ste N, Spokane, WA 99201.