Krates — Consumer Health Data Privacy Policy

Effective 26 October 2026

This policy is for residents of Washington, under the My Health My Data Act (RCW 19.373), and of Nevada, under its consumer health data law (NRS 603A). It applies to the Krates iPhone app, made by Lizwise Elv LLC for adults 18 and over. Our full privacy policy describes every data flow in detail; this page sets out what those laws ask for.

Most of what Krates handles never reaches us. Your records, food log and profiles are stored only on your iPhone, and Lizwise Elv cannot read them. The consumer health data described below is what leaves your iPhone, and only when you allow it.

Categories of consumer health data we collect, and why

Health results sent for wording and chat, if you allow insight wording: the results a finding is about (test, value, unit, range and date), the conditions and medications involved, your age in years, sex at birth and, where your profile has them, country of birth, work and smoking status, and the questions you type. Purpose: to phrase findings in plain English and answer your questions.
Food information, if you allow food photo analysis: photos of labels and meals you choose, meals you describe, barcode numbers, and a food's verdict and nutrition numbers. Purpose: to read labels and meals, look products up, and word the result.
Diet and allergy information, if you allow recipe ideas: foods logged today, nutrition goals still short or nearly used, food choices, ingredients you avoid, and allergy names from your records. Purpose: to suggest recipes that fit.
Usage information: daily counts of AI requests and their estimated cost, under a pseudonymous code. Because using a health app can itself suggest something about your health, we treat this as consumer health data too. Purpose: to run the service, prevent abuse and keep it within budget.
Feedback counts, only if this is turned on (it is off today): thumbs up or down by type, with nothing linking them to you. Purpose: to improve the wording.

We use consumer health data only for these purposes, to provide the features you ask for. We do not use it for advertising, and we never sell it.

Where it comes from

You, through what you type, photograph and choose in the app.
Your iPhone's Krates storage, which holds records you connected from Apple Health, your health system (through Epic MyChart), and Polar or Withings.

How it is used and kept

Content sent to an AI feature passes through our relay to Google and is not stored by us. Google keeps it up to 55 days to detect abuse and does not use it to improve its products. Usage counts are kept 35 days; the pseudonymous code and its first-seen day up to 400 days. Details are in the privacy policy.

Sharing

We do not sell consumer health data, and we do not share it with anyone except the processors below, who handle it on our behalf to provide the service.

Third parties that receive consumer health data

Google LLC (Gemini API, paid service): health results, food and diet information sent by the AI features you allow.
Cloudflare, Inc.: runs our relay, which carries those requests, and stores the usage counts on Lizwise Elv's own account.
Open Food Facts: receives barcode numbers from our relay, with nothing about you.

We have no affiliates that receive consumer health data. Your health system (Epic MyChart), Apple, Polar and Withings are where your records come from; Krates reads from them and sends them none of your consumer health data.

Consent

Each feature that sends consumer health data off your iPhone asks for your consent first, on a screen that shows exactly what would be sent: insight wording, food photo analysis, and recipe ideas, each separately. You can withdraw any of them at any time in the app (the profile card, or Eat or Skip settings), and it takes effect at once.

Your rights, and how to use them

You have the right:

to confirm whether we collect, share or sell your consumer health data, and to see it, with a list of every third party it was shared with;
to withdraw your consent;
to have your consumer health data deleted, including by our processors.

Most of this is in your hands in the app: switch an AI feature off, disconnect a source, use Delete all food data, or delete the app to remove everything. To make a request to us, email [email protected] with "Consumer health data request" in the subject. We answer within 45 days (we may extend that once, by 45 days, and will tell you why), free of charge up to twice a year.

The usage counts hold nothing that links them to you, so we cannot find yours to delete or show them; they expire on schedule. Content already sent to Google is deleted by Google within 55 days.

Appeals. If we decline your request, you may appeal by replying to our answer with "Appeal" in the subject. We will answer the appeal in writing within 45 days and explain our decision. If you are not satisfied, you may contact the Washington State Attorney General (atg.wa.gov/file-complaint) or, in Nevada, the Nevada Attorney General.

Contact

Lizwise Elv LLC · [email protected]

Changes

A change to this policy will be dated above and called out in the app before it takes effect. 26 October 2026: first published.

Krates · Privacy policy · Terms of use · Support