This policy is provided separately from our general Privacy Policy as required by Washington's My Health My Data Act (RCW 19.373). It applies to all Washington residents and to any "consumer health data" collected through Ravenous, regardless of residency.
1. Categories of Consumer Health Data We Collect
Ravenous collects the following categories of consumer health data, all provided by you directly through the app:
• Bodily functions and measurements — height, weight, body measurements (waist, hips, arms, legs, chest), and derived metrics such as BMI, TDEE, and body-fat estimates.
• Biometric data — pose / landmark coordinates (joint positions) computed on your device from the live camera feed during rep counting and camera-based longevity tests. The video is never uploaded, recorded, or stored.
• Meal, menu, and label photos — photos you submit for food logging or menu analysis, sent for AI analysis and not stored afterwards.
• Diet and nutrition — food logs, hydration logs, macros, and daily / weekly nutrition summaries.
• Exercise and physical activity — workout sessions, exercises, sets, reps, weights, cardio activity, and personal records.
• Glucose readings (optional) — CGM or finger-stick readings, meal context, and AI-derived glucose insights, if you use the Glucose tracker.
• Medications and supplements — user-entered peptide protocols, dose logs, and injection-site history. Self- reported logs only; Ravenous is not a medical record.
• Dietary supplements — the supplements in your stack (name, dose, timing, frequency) and your daily adherence logs. Self-reported logs only.
• Sleep (optional) — bedtime, wake time, self-rated sleep quality (1-5), and the duration calculated from those times, if you use the Sleep card. Self-reported entries only; Ravenous does not measure or monitor your sleep.
• Additional fitness metrics (optional) — VO₂ max, grip strength, resting heart rate, and daily steps you enter in the Additional Metrics log, with the date and the source of the entry (manual today; a connected health app in the future). Self-reported or device-estimated only; Ravenous does not measure these.
• Bodily symptoms — symptoms you record in the Food Sensitivity tracker, including symptom name, severity, and the time logged.
• Daily wellness check-ins — the mood you select and the fatigue, soreness, and stress levels you rate (1-5 each), plus any optional note, if you use the Daily Check-In card. Self-reported only; not a clinical or diagnostic measure.
• Post-workout body checks — the answer you give to the "how does your body feel?" prompt after a workout.
• Muscle soreness check-ins — the muscle groups you flag as sore and the soreness level you report in the Recovery tool.
• Food allergies and medical-adjacent dietary restrictions (optional) — if you fill in Dietary Restrictions, the allergy or condition-related categories you select (for example nut allergy, shellfish allergy, gluten-free/celiac, dairy-free) and any free-text note. Self-reported only; not a diagnosis. Used solely to tailor food and menu recommendations you request and to give the AI Coach context when relevant. Optional, skippable, and editable or clearable at any time.
Lifestyle and religious dietary preferences you may also select (vegetarian, vegan, kosher, halal) are stored as food preferences, not as consumer health data. We never use them to infer religious belief, and never for advertising or targeting.
• Apple Health and Health Connect data (optional): if you connect it in the phone app, we read sleep and sleep stages, resting heart rate, HRV, blood oxygen (SpO2), breathing rate, steps, distance, active calories, weight, VO2 max and workouts. Read only; nothing is written back. Used only to show your own trends, scores and 30-day report, and, for Pro members, as AI Coach context in the same way as your other logs. Never sold and never used for advertising. Disconnect any time in Settings, Data sources, with the option to delete all synced history.
• AI Coach conversations — messages you send to the AI Coach and its responses. The AI Coach automatically screens each message for signs of a medical emergency or a mental health crisis and, if it detects either, replies immediately with emergency resources (911, or the 988 Suicide & Crisis Lifeline) rather than standard coaching. No human at Ravenous monitors these messages, and we do not contact emergency services on your behalf.
• Breathing sessions — if you use the Breathing Protocol, the technique you chose, how long the session ran, the number of cycles, and the date. This is an activity log of something you did, not a measurement of your body.
• Bodily functions and measurements — height, weight, body measurements (waist, hips, arms, legs, chest), and derived metrics such as BMI, TDEE, and body-fat estimates.
• Biometric data — pose / landmark coordinates (joint positions) computed on your device from the live camera feed during rep counting and camera-based longevity tests. The video is never uploaded, recorded, or stored.
• Meal, menu, and label photos — photos you submit for food logging or menu analysis, sent for AI analysis and not stored afterwards.
• Diet and nutrition — food logs, hydration logs, macros, and daily / weekly nutrition summaries.
• Exercise and physical activity — workout sessions, exercises, sets, reps, weights, cardio activity, and personal records.
• Glucose readings (optional) — CGM or finger-stick readings, meal context, and AI-derived glucose insights, if you use the Glucose tracker.
• Medications and supplements — user-entered peptide protocols, dose logs, and injection-site history. Self- reported logs only; Ravenous is not a medical record.
• Dietary supplements — the supplements in your stack (name, dose, timing, frequency) and your daily adherence logs. Self-reported logs only.
• Sleep (optional) — bedtime, wake time, self-rated sleep quality (1-5), and the duration calculated from those times, if you use the Sleep card. Self-reported entries only; Ravenous does not measure or monitor your sleep.
• Additional fitness metrics (optional) — VO₂ max, grip strength, resting heart rate, and daily steps you enter in the Additional Metrics log, with the date and the source of the entry (manual today; a connected health app in the future). Self-reported or device-estimated only; Ravenous does not measure these.
• Bodily symptoms — symptoms you record in the Food Sensitivity tracker, including symptom name, severity, and the time logged.
• Daily wellness check-ins — the mood you select and the fatigue, soreness, and stress levels you rate (1-5 each), plus any optional note, if you use the Daily Check-In card. Self-reported only; not a clinical or diagnostic measure.
• Post-workout body checks — the answer you give to the "how does your body feel?" prompt after a workout.
• Muscle soreness check-ins — the muscle groups you flag as sore and the soreness level you report in the Recovery tool.
• Food allergies and medical-adjacent dietary restrictions (optional) — if you fill in Dietary Restrictions, the allergy or condition-related categories you select (for example nut allergy, shellfish allergy, gluten-free/celiac, dairy-free) and any free-text note. Self-reported only; not a diagnosis. Used solely to tailor food and menu recommendations you request and to give the AI Coach context when relevant. Optional, skippable, and editable or clearable at any time.
Lifestyle and religious dietary preferences you may also select (vegetarian, vegan, kosher, halal) are stored as food preferences, not as consumer health data. We never use them to infer religious belief, and never for advertising or targeting.
• Apple Health and Health Connect data (optional): if you connect it in the phone app, we read sleep and sleep stages, resting heart rate, HRV, blood oxygen (SpO2), breathing rate, steps, distance, active calories, weight, VO2 max and workouts. Read only; nothing is written back. Used only to show your own trends, scores and 30-day report, and, for Pro members, as AI Coach context in the same way as your other logs. Never sold and never used for advertising. Disconnect any time in Settings, Data sources, with the option to delete all synced history.
• AI Coach conversations — messages you send to the AI Coach and its responses. The AI Coach automatically screens each message for signs of a medical emergency or a mental health crisis and, if it detects either, replies immediately with emergency resources (911, or the 988 Suicide & Crisis Lifeline) rather than standard coaching. No human at Ravenous monitors these messages, and we do not contact emergency services on your behalf.
• Breathing sessions — if you use the Breathing Protocol, the technique you chose, how long the session ran, the number of cycles, and the date. This is an activity log of something you did, not a measurement of your body.
2. How Consumer Health Data Is Used
We use consumer health data only for the following purposes:
• To provide the fitness, nutrition, and coaching features you request in the app.
• To generate AI analyses of photos and logs that you submit.
• To compute progress metrics, insights, and reminders.
• To secure your account and prevent abuse.
We do not sell consumer health data, share it for targeted advertising, or use it to infer characteristics unrelated to your fitness, nutrition, and body-composition goals.
• To provide the fitness, nutrition, and coaching features you request in the app.
• To generate AI analyses of photos and logs that you submit.
• To compute progress metrics, insights, and reminders.
• To secure your account and prevent abuse.
We do not sell consumer health data, share it for targeted advertising, or use it to infer characteristics unrelated to your fitness, nutrition, and body-composition goals.
3. Sources of Consumer Health Data
All consumer health data is collected directly from you when you use the app, or, only if you choose to connect it, read from Apple Health or Health Connect on your own phone. We do not purchase, license, or receive consumer health data from third parties, data brokers, or advertising networks.
4. Sharing with Sub-Processors
We share consumer health data only with the sub-processors identified in our Privacy Policy §6 — Lovable (hosting and AI Gateway), Supabase (database and storage), and Google (Gemini AI). Each sub-processor is contractually restricted to processing data only to provide its service and may not use consumer health data for advertising, profiling, or resale. RevenueCat and the Apple / Google payment systems receive purchase data only and do not receive consumer health data.
5. Sale of Consumer Health Data
We do not sell consumer health data as defined by the My Health My Data Act. No consent to sale is requested and no such sale occurs.
6. Your Rights Under MHMDA
You have the right to:
• Confirm whether we are collecting, sharing, or selling your consumer health data (we do not sell).
• Access a copy of your consumer health data via the export tool in Settings → Privacy & Data.
• Withdraw consent to further collection or processing of biometric data at any time via Settings → Privacy & Data → Withdraw Consent.
• Delete your consumer health data by using "Delete My Account" in Settings, or by visiting /delete-account. Deletion removes all rows and photos from every user-scoped table and storage bucket, and deletes your account.
• Appeal a denied request by emailing us at the address below.
Requests are handled within 45 days as required by MHMDA. We do not discriminate against consumers for exercising these rights.
• Confirm whether we are collecting, sharing, or selling your consumer health data (we do not sell).
• Access a copy of your consumer health data via the export tool in Settings → Privacy & Data.
• Withdraw consent to further collection or processing of biometric data at any time via Settings → Privacy & Data → Withdraw Consent.
• Delete your consumer health data by using "Delete My Account" in Settings, or by visiting /delete-account. Deletion removes all rows and photos from every user-scoped table and storage bucket, and deletes your account.
• Appeal a denied request by emailing us at the address below.
Requests are handled within 45 days as required by MHMDA. We do not discriminate against consumers for exercising these rights.
7. Consent for Biometric Data
Before Ravenous processes a photo you submit for AI analysis (menu and meal photos) or uses the camera for on-device body-geometry tracking (rep counting, camera-based longevity tests), the app presents an in-appconsent screen that describes what will be processed and by whom. The exact consent text and version you agreed to are stored with your account and can be reviewed at any time in Settings → Privacy & Data → "View consent you agreed to". Withdrawing consent disables future biometric processing.
8. Retention
Consumer health data is retained for as long as your account is active. Historical food entries older than 365 days are automatically summarized into daily totals and the raw rows are deleted. When you delete your account, all consumer health data is removed from live systems immediately and from backups within our standard backup rotation.
Sign-up details. Account sign-up is open to anyone. A sign-up contains only the email address and account details you submit before any health data exists; it does not identify your physical or mental health status, so we do not treat it as consumer health data under MHMDA. We disclose it here for transparency.
Sign-up details. Account sign-up is open to anyone. A sign-up contains only the email address and account details you submit before any health data exists; it does not identify your physical or mental health status, so we do not treat it as consumer health data under MHMDA. We disclose it here for transparency.
9. Staff and Support Access to Consumer Health Data
Our staff cannot view your identifiable consumer health data by default — administrative tools mask email addresses and names, and the detailed account view refuses to load without your permission. If you ask for support and we need to look at your account, you create a time-boxed access grant yourself in Settings → Privacy & Data (1 to 72 hours, revocable at any time). Access is used only for the support issue you raised, and every access is written to an audit log you can read for your own account. Consumer health data is never accessed for advertising, profiling, or resale. See Privacy Policy §10 for full detail.
10. Contact and Appeals
BioVentics LLC — Dallas, Texas
Email: support@ravenousprotein.com
To exercise MHMDA rights or appeal a denial, contact us at the email above with the subject line "MHMDA Request". If you are not satisfied with our response, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.
Email: support@ravenousprotein.com
To exercise MHMDA rights or appeal a denial, contact us at the email above with the subject line "MHMDA Request". If you are not satisfied with our response, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.