Consumer Health Data Privacy Policy

Last updated: 2026-11-15

This policy explains how ELVISION LLC (“we”) handles consumer health data in RawLift. It supplements our Privacy Policy.

Consumer health data we collect

bodyweight entries and their dates;
food diary entries: foods, amounts, calories and macronutrients, and your nutrition targets and goal (lose, maintain, gain);
training logs: workouts, exercises, sets, weights, repetitions, duration and notes;
profile data used for the energy estimate: sex, birth year, height and activity level;
if you connect WHOOP: recovery, heart-rate variability, resting heart rate, sleep, day strain, calories burned, steps and workouts, as WHOOP records them;
values we derive from the above, such as estimated daily energy expenditure, trends, personal records and suggested targets.

Sources

All consumer health data comes directly from you, as you enter it, or from WHOOP if you connect your WHOOP account in Settings (you can disconnect at any time). Product nutrition values may come from Open Food Facts when you scan or search a product; that request contains only the barcode or search term. If you use an AI estimate (describing or photographing a meal, or reading a product label from a photo), the calories and macronutrients it suggests come from our AI provider; you check and edit them before anything is saved.

Why we collect and use it

Only to provide the features you ask for: storing your logs, showing your progress and trends, and calculating suggestions. We do not use it for advertising, we do not sell it, and we never will.

Consent

We collect and process consumer health data only with your consent, which you give when you create an account. You can withdraw consent at any time by deleting your account (Settings → Delete account) or by emailing us; we then delete your consumer health data.

Who we share it with

We do not sell consumer health data and do not share it with third parties or affiliates, except with processors that store or transmit it on our behalf under contract and only to provide the service:

our hosting provider (Hostinger, servers in Frankfurt, Germany);
our transactional email provider (account emails only; no health data is included in emails);
our AI provider, Anthropic, PBC, only when you use an AI estimate: it receives the meal description or photo you submit, nothing else, and does not use it to train its models. We do not store the photo.

We would disclose it to authorities only if legally required, and would tell you unless prohibited.

Your rights

Confirm and access: see the data we hold and the list of processors above — Settings → Export my data.
Delete: Settings → Delete account removes it from our systems immediately (and from backups within 30 days).
Withdraw consent at any time, as described above.
Appeal: if we decline a request, reply with “Appeal”; if the appeal is denied you may contact the Washington, Nevada or Connecticut Attorney General as applicable.

Send requests to privacy@rawlift.app from the email address on your account. We respond within 45 days. We will not discriminate against you for exercising these rights.

Geofencing

We do not use geofences or location data of any kind.