What We Collect
- • Body measurements — stored privately, never shared.
- • Food and nutrition logs — used to power your AI Coach.
- • Workout, sleep, and wellness data — entered by you, or read from Apple Health or Health Connect if you connect it.
- • Meal and menu photos — analyzed, then not stored.
- • Device camera access — on-device rep counting and camera-based longevity tests only; video is never uploaded.
- • Usage data — app improvement, never sold.
1. Information We Collect
Account information: email address, password (encrypted), display name, age, biological sex, height, weight.
Nutrition & hydration: food logs, water logs, and daily/weekly nutrition summaries.
Workout & cardio: workout sessions, sets, exercises, cardio logs, and personal records.
Body measurements: weight entries and circumference measurements (waist, hips, arms, legs, etc.).
Meal, menu, and label photos: photos you submit for food logging or for the AI Menu / Ingredient Analyzer, plus the AI results derived from them. These photos are sent for analysis and are not stored afterwards.
Pose & landmark coordinates: geometric points (joint positions, body-part outlines) computed on your device by computer vision (MediaPipe BlazePose) from the live camera feed during rep counting and camera-based longevity tests. These coordinates are biometric data under applicable state laws. The camera feed is processed in real time on your device and is never uploaded, recorded, or stored.
Glucose readings: if you use the Glucose tracker, your CGM/finger-stick readings, meal-context tags, and AI-generated glucose insights.
Peptide protocols & dose logs: user-entered peptide protocols, dose logs, and injection-site history. These are self-reported logs only; Ravenous is not a medical record system.
Daily wellness check-ins: if you use the Daily Check-In card, the mood you select and the fatigue, soreness, and stress levels you rate (1-5 each), plus any optional note and the date. These are self-reported entries only — they are not a clinical measure, screening, or assessment of any kind.
Post-workout body checks: if you answer the "how does your body feel?" prompt after a workout, the option you select and the session it relates to.
Muscle soreness check-ins: if you use the Recovery tool, the muscle groups you flag as sore and the soreness level you report each day.
Sleep logs: if you use the Sleep card, the bedtime and wake time you enter, the sleep quality rating you assign (1-5), the duration calculated from those times, and the date. These are self-reported entries only — Ravenous does not measure your sleep, and these logs are not a sleep study or a clinical assessment.
Additional metrics (VO₂ max, grip strength, resting heart rate, daily steps): if you use the Additional Metrics log in Longevity Tests, the values you enter, their units, the date you logged them for, and whether the entry came from manual entry or (in the future) a connected health app. These are self-reported or device-estimated values only — Ravenous does not measure them, and they are not a clinical measurement or assessment.
Symptom logs: if you use the Food Sensitivity tracker, the symptoms you record and the severity you assign to them, along with the time they were logged.
Supplements: the supplements in your stack (name, dose, timing, frequency) and your daily adherence logs recording whether you took them.
Longevity test results (cognitive & physical): if you use the Longevity Tests, the results of the self-administered screen-based tasks — reaction time, working memory (digit span), and attention/color-word — including your measured response times, accuracy, digit span score, the reference band used, and your age at the time of the test. It also covers camera-based physical tests. For the push-up test we store the number of valid reps counted, the total reps attempted, whether the body-line form check could be applied, how the set ended, and the date. For the balance (one-leg stand) test we store how long you held the position in seconds, which leg you lifted, how the attempt ended, and the date. For the sit-to-rise test we store your 0-10 score, how many support points were detected going down and coming back up, the detection-confidence flag, and the date. Camera-based tests analyze the video feed on your device in real time to count reps and track body position — the video itself is never uploaded, recorded, or stored, and only the resulting numbers described above are saved. These are educational self-tests, not cognitive, fitness, balance, or medical assessments.
Dietary restrictions and allergies (optional): if you choose to fill them in — during onboarding or later from your Profile — we store the dietary categories you select and any free-text note you add. These fall into two kinds. Some are food allergies or medical-adjacent restrictions (for example nut allergy, shellfish allergy, gluten-free/celiac, dairy-free); we treat these as health data. Others are lifestyle or religious dietary preferences (for example vegetarian, vegan, kosher, halal); we treat these only as a stated food preference. We use both solely to tailor food and menu recommendations you ask for and to give the AI Coach context when your question makes it relevant. We never use them to infer your religion, never use them for advertising or targeting, never sell or share them, and never treat them as a medical diagnosis. Every field is optional, the step is fully skippable with no effect on the App, and you can edit or clear these values at any time.
Apple Health and Health Connect (optional, phone app only): if you choose to connect Apple Health (iPhone) or Health Connect (Android) in Settings, Ravenous reads your sleep (including sleep stages), resting heart rate, heart rate variability (HRV), blood oxygen (SpO2), breathing rate, steps, distance, active calories, weight, VO2 max and workouts. Access is read only: we never write anything back to Apple Health or Health Connect. Each value is stored with its source (Apple Health, Health Connect or entered by you), and a value you enter yourself is never overwritten by a later sync. We use this data only to show your own trends in the app, in your scores and your 30-day report, and, if you have Pro, as context for the AI Coach in the same way as your other logs (see section 4). It is never sold, never used for advertising, and never shared with advertising networks. You can disconnect at any time in Settings, Data sources, and choose to delete all synced history at the same time; values you entered yourself are kept unless you delete them or your account.
AI Coach conversations: messages you send to the AI Coach and its replies. For your safety, the AI Coach screens each message for signs of a medical emergency or a mental health crisis. If it detects either, it responds immediately with emergency resources — 911 for a possible medical emergency, the 988 Suicide & Crisis Lifeline for a mental health crisis — instead of normal coaching. This screening happens automatically within the conversation. No human at Ravenous monitors your messages, and we do not contact emergency services on your behalf. The AI Coach is not a crisis service and is not a substitute for emergency care.
Device & usage: basic technical info such as browser type, device type, time zone, and aggregated usage events needed to operate and improve the App.
Push notifications: if you enable them, we store a device push subscription so we can send reminders.
Account sign-up: anyone can create an account. When you sign up we collect the email address you submit and the sign-up details described above. We use them solely to create and support your account. We do not use sign-up emails for marketing, and we do not sell or share them.
2. How We Use Your Data
To provide app functionality: analyze the meal and menu photos you submit, generate AI coaching feedback, and track your nutrition and fitness progress.
We do not: sell your data to third parties, share health metrics with advertising networks, use your photos for purposes other than generating the analysis you asked for, or train AI models on your personal data.
3. Biometric Data — Illinois BIPA and State Laws
When you use the camera-based rep counter or the camera-based longevity tests (push-up, balance, sit-to-rise), Ravenous computes body-geometry data — structural coordinates such as joint positions — from the live camera feed using on-device computer vision (MediaPipe BlazePose). This processing happens entirely on your device, the video is never uploaded or stored, and only the resulting counts and scores are saved.
This data is collected only with your explicit prior consent given through our in-app Body Data Consent screen.
Under the Illinois Biometric Information Privacy Act (BIPA) and similar laws in Washington (MHMDA), Nevada, Connecticut, and other states:
• You have the right to know this data is being collected.
• You have the right to consent before collection begins.
• You have the right to have this data destroyed upon request.
• We will not sell, lease, or profit from your biometric data.
• We will destroy biometric data within 3 years of collection or within 1 year of your last interaction with the app, whichever comes first.
4. AI Processing — Google Gemini via Lovable AI Gateway
Meal photos, menu and nutrition-label photos, and coach messages are sent to Google's Gemini models through the Lovable AI Gateway for analysis. Only the content required for a specific call is sent — for example, a single menu photo plus your dietary restrictions, or your recent logs plus your question for a coaching reply. No email, password, or account identifier beyond an internal user ID is transmitted, and content is not retained by the AI processor after the analysis completes. Google's API terms govern data handling on Google's infrastructure; see policies.google.com for details.
5. Sensitive Health Information
Information you log in Ravenous (weight, body composition, peptide use, etc.) can be considered sensitive. We are not a HIPAA-covered entity and Ravenous is not a medical record system. Do not enter information you are unwilling to store in a consumer-grade app. Optional physical wellness metrics (waist, hip, neck circumference) and biological sex are used solely to improve the accuracy of AI wellness assessments within the app and are never sold or shared with third parties.
6. Sub-Processors and Data Sharing
We use the following sub-processors to operate Ravenous. Each one only receives the data required for its specific function, and none of them are permitted to use your data for advertising, profiling, or resale.
Lovable (Lovable Labs Inc.) — application hosting and the AI Gateway that routes AI requests. Lovable does not retain the content of AI requests after they complete.
Supabase (Supabase Inc.) — managed database (Postgres), authentication, and encrypted file storage for your logs, photos, and account. Data is stored in the region assigned to this project by Lovable Cloud.
Google (Google LLC — Gemini API) — AI model provider accessed through the Lovable AI Gateway for photo analysis, coaching responses, and menu / meal analysis. Only the content required for a single call is sent. Google's API terms govern handling on Google's infrastructure.
RevenueCat (RevenueCat, Inc.) — subscription and receipt management for Apple App Store and Google Play purchases. Receives your anonymous app-user ID and purchase status only. No health, nutrition, photo, biometric, or coaching data is sent to RevenueCat.
Apple App Store & Google Play — payment processing for subscriptions. No health data is shared.
We do not share data with advertising networks, data brokers, marketing platforms, or any party not listed above.
7. FTC Health Breach Notification
In the event of unauthorized access to your health or body data, we will notify affected users within the timeframe required by the FTC Health Breach Notification Rule (currently within 60 days of discovery for breaches affecting 500 or more users, and within 60 days for smaller breaches in the annual FTC log).
8. Your Rights
You have the right to:
• Access your data (export feature in Settings → Privacy & Data).
• Delete your data (deletion tools in Settings → Privacy & Data).
• Withdraw consent for biometric processing (Settings → Privacy & Data → Body Analysis Consent).
• Request account deletion (Settings → Delete account & purge all data).
Depending on your jurisdiction (e.g., GDPR in the EU/UK, CCPA in California), you may have additional rights to correct, export, or restrict processing of your personal data.
9. Data Retention
Meal and menu photos: sent for analysis and not stored after the analysis completes.
Workout and nutrition data: retained until you delete them or delete your account.
Account data: deleted within 30 days of account deletion request.
Biometric data: destroyed within 3 years of collection or 1 year after last app use, whichever comes first.
Waitlist / signup requests: pending or rejected access requests are retained for 12 months, then automatically deleted. Approved requests that become real accounts are governed by the normal account-data retention rules above.
10. Staff and Support Access
By default, our staff cannot view your identifiable content. Administrative tools show account records with email addresses and names masked, and the detailed diagnostic view of an account refuses to load at all unless you have granted access.
If you contact us for help and we need to look at your account, you grant that access yourself from Settings → Privacy & Data. A grant is:
• Explicit — only you can create it; staff cannot grant themselves access to your account.
• Time-boxed — you choose a window between 1 and 72 hours, after which access ends automatically. You can revoke it at any time before it expires.
• Limited — access is used only for the specific support issue you raised, and only for the data needed to resolve it. We do not browse accounts, and we do not use support access for analytics, marketing, or training AI models.
• Logged — every staff access during the window is written to an audit log recording who accessed your account, what was accessed, and when. You can read the log for your own account in Settings → Privacy & Data.
Separately from this, a small number of authorized personnel can access the underlying database infrastructure when required to operate, back up, secure, or repair the service, or where we are legally required to. Our sub-processors listed in §6 may also access data only as needed to provide their service.
11. Security
We use industry-standard measures including encryption in transit, row-level security on databases, and access-restricted storage. No system is 100% secure. You are responsible for keeping your password and device secure.
12. Children
Ravenous is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us data, contact us and we will delete it.
13. International Users
Your data may be processed in the United States or other countries where our service providers operate. By using the App you consent to such international transfer.
14. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated in-app or by email, and where biometric-data terms change materially, you will be re-prompted to review and re-confirm consent in the app. Continued use after a change means you accept the updated policy.
15. Contact
BioVentics LLC
Dallas, Texas
Email: support@ravenousprotein.com