CRAVELESS — CONSUMER HEALTH DATA PRIVACY POLICY (Washington My Health My Data Act and similar consumer health data laws)
App: CraveLess: GLP-1 Shot Tracker
Effective date: 18 June 2026
Last updated: 18 June 2026
This is a separate, standalone policy that applies to "consumer health data" as defined under the Washington My Health My Data Act (MHMDA) and comparable laws (such as Nevada SB 370). It supplements, and where consumer health data is concerned controls over, our general Privacy Policy. It contains only the disclosures required by those laws. CraveLess is operated by Khandker Tafiqul Islam, an individual developer based in Bangladesh ("we," "us," "our").
CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT, AND THE PURPOSE
We collect the following categories of consumer health data that you choose to enter, for the purpose of providing the logging, tracking, reminder, estimate, and insight features you use within the App:
GLP-1 medication details (medication type, dose amounts, schedule/cadence, injection-site rotation);
Body measurements and goals (weight, height, target/goal weight);
Nutrition logs (e.g., protein, fiber, calories, foods added manually or by barcode);
Hydration logs;
Side-effect logs (type, severity, and any notes you write);
Related preferences and settings (units, reminders);
If you enable Apple Health (HealthKit): the specific health data types you authorize (e.g., body weight, dietary protein, water).
We collect this data only to provide the features you choose to use. We do not use it for advertising, and we do not sell it.
CATEGORIES OF SOURCES
Directly from you, when you enter information into the App;
From Apple Health (HealthKit) on your device, only if and to the extent you grant permission.
HOW THE DATA IS STORED
Consumer health data you log is stored only on your own device. It is not synced to the cloud, not uploaded to or stored on our servers, and not backed up by us. We cannot see or access it.
CATEGORIES OF CONSUMER HEALTH DATA THAT IS SHARED
We do not sell consumer health data, and we do not share it for advertising. The only consumer health data that ever leaves your device is the optional AI Insights snapshot: if you choose to enable and use the AI Insights feature, a minimized, pre-summarized snapshot of your recent activity (for example, weekly trends in weight, protein adherence, and side-effect patterns) is transmitted to generate a short text summary. We do not transmit your full logs or directly identifying information such as your name. If you do not use AI Insights, no consumer health data is shared.
We do not share consumer health data with our analytics or subscription providers; those tools are configured to exclude the content of your health logs.
CATEGORIES OF THIRD PARTIES, AND SPECIFIC AFFILIATES, WITH WHOM WE SHARE CONSUMER HEALTH DATA
We share consumer health data only with the following, and only to provide the optional AI Insights feature you request:
AI processing providers: Anthropic, PBC (Claude) and Google LLC (Gemini) — generate the natural-language summary from the minimized snapshot, under their API/business terms, and do not use the submitted data to train their general models.
Infrastructure provider: Cloudflare, Inc. — operates the secure serverless proxy that routes the request; processes it only transiently.
We have no corporate affiliates with whom we share consumer health data. We do not share consumer health data with any other third parties except as required by law or valid legal process, or in connection with a business transfer (in which case we will require the recipient to honor this policy or notify you of material changes).
YOUR RIGHTS
You have the right to:
Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data;
Withdraw consent to our collection and sharing of your consumer health data;
Have your consumer health data deleted.
We do not sell consumer health data; accordingly, no separate authorization to sell is sought or processed.
HOW TO EXERCISE YOUR RIGHTS (SECURE METHOD)
Because your consumer health data is stored only on your own device and is not held by us:
Access: view all of your data directly in the App at any time.
Delete: use the in-app "Delete all data" option, delete individual entries, or remove the App — this permanently deletes the on-device data. To delete HealthKit data, use iOS Settings > Privacy & Security > Health.
Withdraw consent: turn off the AI Insights feature (and Apple Health access in iOS Settings) at any time; this stops any further sharing.
For any request you cannot complete in the App, contact us at info.drongo@gmail.com. We will verify and respond as required by applicable law, and you may use an authorized agent where the law permits. We will not discriminate against you for exercising these rights.
If you are in Washington State, you may also contact the Washington State Office of the Attorney General regarding the My Health My Data Act.
CHANGES
If we begin collecting additional categories of consumer health data, or sharing it for new purposes, we will first update this policy and obtain your affirmative, opt-in consent before doing so.
CONTACT
Khandker Tafiqul Islam Developer of CraveLess
Email: info.drongo@gmail.com
Location: Bangladesh