Consumer Health Data Privacy Policy

Effective: October 17, 2026 · Last updated: October 20, 2026

1. Who we are

BDM LLC, doing business as ReCult ("ReCult," "we," "us").

• Email: [email protected]
• Mail: BDM LLC (ReCult), 3639 Haven Ave, A214, Menlo Park, CA 94025

2. Consumer health data we collect

• Lab test results you import: test names, values, units, reference ranges and test dates.
• Report details: the ordering lab or provider name, and the report files you upload, email or photograph.
• Food allergies and dietary restrictions you enter, and your daily meal log and goals if you use Daily progress.
• Health inferences we generate from your confirmed results, such as a "lower sodium" focus for your Menu.
• Your connection status with health-record sources.

3. Why we collect it and how we use it

• To import your lab results and show them to you.
• With your separate permission, to personalize your restaurant Menu recommendations.
• To keep the service secure.

We do not use consumer health data for advertising or marketing, and we do not sell it.

4. Where it comes from

• You: a PDF you upload, a PDF you email or forward to your private ReCult address, or a photo or scan of a report.
• Your health system's patient portal, through a connection you authorize (for example Stanford Health Care through Epic).
• Apple Health is not currently offered; ReCult does not read or write any Apple Health data.

5. Consumer health data we share

We do not share consumer health data with third parties or affiliates.

Processors that act only on our instructions receive it to run the service:

• OpenAI, L.L.C. (AI document reading): photos and scanned PDFs you choose to have read, to copy the lab values.
• Cloudflare (cloud hosting, storage, and receiving emailed reports): all of the categories above.

Restaurants, merchants and payment processors (Stripe, and Square / Cash App run by Block) never receive consumer health data.

6. Third parties and affiliates we share with

None.

7. Your rights and how to use them

• Confirm and access whether we collect your consumer health data, get a copy, and get a list of the processors and third parties that received it. Download a copy in the app under Settings → Health data, or email us.
• Withdraw consent in the app under Settings → Health data, or by emailing us.
• Delete your consumer health data in the app under Settings → Health data → Delete, by deleting your ReCult account, or by emailing us. We also tell our processors to delete it. Backups are cleared within 6 months.

To make a request, email [email protected] with the subject "Privacy request" from the email on your ReCult account. We may ask you to confirm it from your signed-in account. We respond within 45 days, and may extend once by 45 more days if we tell you why. Requests are free up to twice a year.

Appeal: if we decline your request, email [email protected] with the subject "Appeal". We will decide in writing within 45 days. If your appeal is denied, you may contact the Washington Attorney General (atg.wa.gov) or the Nevada Attorney General (ag.nv.gov).

8. Effective date and changes

This policy is effective October 17, 2026. If we change it, we will update this page and its effective date. We will not collect new categories of consumer health data, or use or share it for new purposes, without first telling you and getting your consent.