NutravaeThis is a separate, standalone policy required by Washington's My Health My Data Act (and aligned to Nevada SB370 and Connecticut's consumer-health-data law). It is provided in addition to the general Nutravae Privacy Policy. This policy has been populated for Nutravae LLC; have legal counsel review it before launch — the Washington law carries a private right of action.
This Consumer Health Data Privacy Policy describes how Nutravae LLC ("Nutravae," "we," "us") collects, uses, shares, and protects consumer health data, and the rights available to consumers in Washington, Nevada, and Connecticut. It applies to consumer health data we process about residents of those states and, for Washington, about anyone whose consumer health data is collected in Washington.
What "consumer health data" means
Consumer health data is personal information that identifies your past, present, or future physical or mental health status. In Nutravae, this includes the health information you choose to enter, such as your health conditions and diagnoses, food allergies and intolerances, medications and supplements, laboratory values, dietary restrictions tied to health, health goals, and any inferences we derive from these to personalize the app.
The consumer health data we collect, and where it comes from
We collect consumer health data directly from you when you enter it into the app (your profile, food log, fridge, lab entries, or scans you choose to run). We do not purchase consumer health data, and we do not collect it from data brokers. If you scan a lab report or label, the built-in reader performs the reading on your device. If you choose optional AI reading, the scanned image is sent to our AI provider (Google’s Gemini API) to be read; because lab reports are consumer health data, you can keep lab reading on-device only so that no lab image is ever sent to the AI provider.
Why we collect and use it
We collect and use your consumer health data only to provide the features you ask for — personalizing recipes, menu and dish guidance, and the health barometer to your conditions and allergies; interpreting lab values in a nutrition context; checking food–medication interactions; and operating features you enable. We do not use consumer health data for advertising or marketing, and we do not use it to profile you for third parties.
Who we share it with
We do not sell your consumer health data. We share consumer health data only with service providers/processors who help us operate the app under contract (for example, encrypted cloud storage for optional sync), and only as necessary to provide the service; these providers are contractually restricted from using it for their own purposes. Because optional sync is end-to-end encrypted, any consumer health data stored with our infrastructure providers is encrypted such that they — and we — cannot read it. We may also disclose data where required by law. A current list of the categories of recipients is available on request by emailing support@nutravae.net.
Your consent
- We collect your consumer health data only with your consent, obtained through a clear, affirmative opt-in before collection — never through pre-checked boxes, bundled terms, or deceptive design.
- We obtain separate consent before sharing your consumer health data with a processor beyond what is necessary to provide a feature you requested.
- We do not sell consumer health data. We would only ever do so with your separate, valid written authorization as required by law — and our current practice is that we do not sell it at all.
- You may withdraw your consent at any time; withdrawal stops future processing and, on request, triggers deletion.
Your rights
If you are a resident of Washington, Nevada, or Connecticut, you have the right to:
- Confirm whether we are processing your consumer health data and access it.
- Delete your consumer health data. On a deletion request, we will delete it from our records and notify any processors holding it on our behalf to do the same.
- Withdraw consent to our collection and sharing of your consumer health data.
- Not be discriminated against for exercising these rights.
How to exercise your rights. Use the in-app controls (Profile → Privacy & your data), or email support@nutravae.net. We will respond within the timeframe required by law (generally within 45 days, extendable as permitted). If we deny a request, you may appeal by contacting support@nutravae.net; if we deny your appeal, you may contact your state Attorney General.
How we protect it
Your consumer health data is stored encrypted on your device, and any optional cloud sync or backup is end-to-end (zero-knowledge) encrypted so that it cannot be read by us or by anyone accessing our servers. We apply data minimization (collecting only what a feature needs), restrict internal access on a least-privilege basis, encrypt data in transit and at rest, and maintain audit logging and a security-incident response process.
Data minimization and retention
We limit collection, use, and sharing of consumer health data to what is necessary to provide the features you request. We retain it only while your account is active or as needed to provide the app, and delete it upon account deletion except where a specific, disclosed legal or security obligation requires limited retention.
No geofencing
We do not use geofencing to track your presence at, or to collect consumer health data based on your proximity to, any facility that provides health-care services.
Contact
Nutravae LLC · 11841 S Inglewood Avenue, Hawthorne, CA 90250 · support@nutravae.net · Appeals: support@nutravae.net