This policy is provided under the Washington My Health My Data Act (chapter 19.373 RCW) and applies to consumer health data that Vercue collects about Washington consumers, and to consumer health data collected in Washington.
Vercue is operated by Pavel Movilean, an individual resident in the Republic of Moldova.
| Category | Purpose, and how it is used |
|---|---|
| Bodily measurements you enter: age, gender, height, current weight, and weight over time | To calculate your daily calorie and protein targets, to show progress against them, and to adjust those targets as your weight changes. We do not ask for a goal weight. |
| Diet and nutrition: the meals you log, and the dish names, calories and macronutrients estimated from your food photos, plus any correction or context you add | To produce a nutrition estimate for a meal, to build your daily and weekly totals, and to generate the next-step suggestion the App shows you. |
| Your goal and how you train for it: whether you want to lose fat while keeping strength, build muscle, get leaner and stronger, hold steady and eat better, or simply get food off your mind; how fast you want to go, or what a calmer relationship with food means to you, which can include wanting to break a cycle of restricting and then overeating; training frequency and intensity and which days you usually train; daily movement; meal pattern and late-night eating; sleep quality; stress patterns; how in control of food you feel; creatine use; and any dietary preference you select (vegetarian, vegan, gluten-free, halal, kosher, or none) | To set your starting targets, to choose which suggestions are relevant to you, and to exclude foods you do not eat. |
| One derived setting: a language and progress-display preference computed from your quiz answers | To choose the wording the App uses and whether numbers are displayed. It is not a diagnosis, a screening result or a health assessment, and it is not shared with anyone. |
| Data the App works out from the above: your daily calorie and protein targets, your day and week totals, your weight trend, the weekly read-back and the suggestions in it, and which of those suggestions you accepted or rejected | To show you where your day and your week stand, to keep your targets moving with your weight, and to choose which suggestion to offer next. These are calculations, not clinical findings. |
| Any of the categories above, together with whether you told us a scan was accurate and any correction you sent | To check how accurate our estimates are and fix what they get wrong, and to understand in aggregate how the App is used. This is done by the operator alone; it is never used for advertising and never sold. |
| Food photographs | Sent for a nutrition estimate and then removed: from your phone once our server accepts the upload, and from the processing job when that job finishes or its retries are used up. We keep no photo library and no image archive, and we do not extract biometric identifiers or facial geometry from them. |
We do not collect precise location, and we do not use geofencing of any kind. We do not ask about medical conditions, medications, pregnancy, reproductive health, or gender-affirming care.
From you, and only from you: what you enter in the App, and the photographs you choose to take with it. The derived data in the table above is calculated by the App out of what you gave it — nothing else feeds it. We do not purchase consumer health data, obtain it from data brokers, or take it from any third-party source.
Before the App asks anything about your body, it shows a screen that says, in short, what it is about to collect (your body, habits, meals and food photos), what it is for (your targets and estimates), who else handles it (an outside AI service reads your photos, and our hosting providers store your data), that it is never sold or used for ads, and that you can delete all of it from Settings, with links to this policy and our Privacy Policy. Tapping “I agree” on that screen is your consent, and it is asked separately from accepting our Terms of Use — accepting the Terms is not, and never stands in for, consent to collect your health data. We keep a record that you gave it and when that record reached our server.
We also rely, where the law allows it, on the fact that this data is necessary to provide the very thing you asked the App to do: you cannot get a calorie estimate for a meal without the App seeing the meal.
None. We do not share consumer health data, as the Act defines sharing, and we do not sell it. We disclose the bodily measurements, the diet and nutrition data, the goal and behavioural inputs, the derived data and the derived setting described above, and food photographs transiently, only to the processors listed below. Each handles it on our instructions and only to provide the App to you, and not every processor receives every category — the table says what each one gets. If we ever intend to share consumer health data with anyone who is not our processor, we will first ask for your separate consent, distinct from your consent to its collection.
Vercue has no affiliates, and there are no third parties with whom we share consumer health data. The processors that handle it for us are:
| Processor | Category | What it receives |
|---|---|---|
| Google LLC | AI processing provider | The food photograph, transiently, and the context needed to produce an estimate: the text you typed, your goal, any dietary preference, your eating pattern, whether you asked to see numbers, the calories and protein left for the day, your recent meals and your corrections. For the weekly read it can also receive the days you usually train, your sleep and stress answers, and your responses to earlier suggestions. Not your name, your email or your account identifier. |
| Railway Corp. | Cloud hosting and database provider | Your account, quiz answers, weights and food logs, stored at rest |
| Cloudflare, Inc. | Backup storage provider | Copies of the whole database — the same account, quiz answers, weights and food logs — stored in the European Union so the service can be restored after a failure, and deleted automatically after 30 days |
| Functional Software, Inc. (Sentry) | Error monitoring provider | Technical error data only; request bodies and credentials are filtered out |
| Zoho Corporation (Zoho Mail) | Email provider for support@vercue.app | Only what you choose to write to us. The App never sends your health data by email — but if you describe it in a support message, it is in that mailbox, which is why the provider is named here |
If you ask us for the list of everyone who has received your consumer health data from us, including these processors, we will give you that list together with a current online contact route for each of them, so you can take the matter up with them directly.
Google receives this data under Gemini API Paid Services, whose terms do not allow Google to use your requests or its responses to improve its products. Google may keep them for a limited time to detect abuse and to meet legal obligations; that is Google’s own retention and not something we control. Each of these providers handles the data to do the job we engaged them for and for nothing else.
We do not share consumer health data with advertising networks or data brokers, and the Vercue app contains no advertising or analytics SDK. Two other companies are involved in running the App but receive no body, meal or quiz data, and are named here for completeness: RevenueCat, Inc. manages subscriptions and receives a pseudonymous user ID and purchase events; and Apple Inc. handles Sign in with Apple, App Store payments and push delivery as an independent company under its own privacy policy. Our push notifications contain no health data. We have never sold consumer health data and we do not sell it. A sale would require your separate, written, valid authorization; we do not seek one.
If you are a Washington consumer, you have the right to confirm whether we collect, share or sell your consumer health data and to access it, including a list of all third parties and affiliates with whom we have shared it; to withdraw your consent to our collection and sharing of it; and to have it deleted.
In the App: Settings › Delete account. This deletes your account and your consumer health data from our systems and, in doing so, withdraws your consent.
By email: support@vercue.app. Tell us what you want and enough about your account for us to find it. You do not need an account to make a request, there is no charge, and we will not discriminate against you for making one. If you want to withdraw your consent without deleting your whole account, say so and we will do that instead; the parts of the App that depend on that data will stop working for you.
We respond within 45 days of receiving a request. Where reasonably necessary, we may extend once by a further 45 days and will tell you why within the first 45 days.
When you withdraw consent we stop the collection and processing that depends on it. When you request deletion we delete your consumer health data from our live database, which is where our hosting provider holds it. If any of it sits with another provider we control — for example, in a support email you sent us — we delete it there too. Backups and our AI provider’s own retention are explained next.
Two honest notes about what that does and does not reach. We keep daily copies of the whole database so the service can be restored after a failure. A copy is not edited after it is made; each one is deleted automatically 30 days after it was made, so your data can remain in a backup for up to 30 days after you delete it — well inside the six-month outer limit Washington law allows for backups. Separately, our AI provider’s own short-term retention, described above, is not ours to erase. Nobody can honestly promise that every copy everywhere disappears the instant you press the button, and we are not going to be the first to say it.
What we keep afterwards is not health data: purchase records with their link to you removed, and a record that the deletion happened — a request number, timestamps and counts.
Nevada’s consumer health data law (SB 370, NRS 603A.400 to 603A.550) gives Nevada consumers rights of the same shape: to confirm whether we collect, share or sell your consumer health data, to access it, to have it deleted, and to withdraw your consent. Everything on this page — the categories, the sources, the purposes, the recipients, and the fact that we do not sell consumer health data — applies to you in the same way, and the same 45-day response period and appeal route apply. This document is published separately because Washington law requires a standalone one, not because Nevada consumers are treated differently. A denied appeal can be raised with the Nevada Attorney General at ag.nv.gov.
No third party collects consumer health data about you over time and across different websites or online services when you use the App or our website. You can review your profile, targets and log in the App; to change or remove anything already saved, email support@vercue.app and we will make the change and confirm it to you.
If we refuse to act on your request, we will tell you why within the response period above. You may appeal by replying to that message, or by emailing support@vercue.app with the subject line “Appeal” — the same route as the original request, at no cost. We will decide your appeal and explain the decision in writing within 45 days. If we deny the appeal, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.
Pavel Movilean — Vercue
Email: support@vercue.app