Revely
Consumer Health Data Privacy Policy
Last updated 26 August 2026
This policy is required by the Washington My Health My Data Act and applies to consumer health data that Dozy Labs LLC collects through Revely. It covers Washington residents and anyone whose consumer health data we collect in Washington. It is separate from our general Privacy Policy, which covers everything else.
1. What consumer health data we collect, and why
| Category | Why we collect it, and how it is used |
|---|---|
| Health conditions you record in a profile — including pregnancy, breastfeeding, an infant under twelve months, kidney disease, high blood pressure, diabetes, and coeliac disease | To decide which ingredients on a label matter for the person that profile describes. Used only to produce that answer. |
| Allergies and intolerances you record, and how severe each one is, including anaphylaxis | To flag matching ingredients and set how strongly a result is stated. Used only to produce that answer. |
| Dietary rules you record | Same purpose. Some rules imply a health status, so we treat all of them as health data rather than sorting them. |
| Your scans and their results, which can indicate a health status by what you were checking for | To show you the result, and to keep your history available to you when you are signed in. |
We do not use consumer health data for advertising, marketing, or profiling, and we do not use it to make any decision about you beyond answering the question you asked about a label.
We do not collect location data of any kind. Revely has no location permission and no location capability, so we cannot and do not infer anything about health services you visit.
2. Where it comes from
One source: you. Every category above is entered by you in the app or produced by a scan you took. We do not buy consumer health data, and we do not receive it from data brokers, advertising networks, health care providers, or any other outside source.
3. What consumer health data we share
We share the categories in section 1 only with the infrastructure providers in section 4, and only so that the app can store and serve your own data back to you. We share no consumer health data for any other purpose.
Your profiles and conditions are not sent to our ingredient-reading provider. A scan sends the label photo to OpenAI, which reads the ingredients out of it. Matching those ingredients against your profile happens afterwards on our own servers. OpenAI does not receive your allergies, your conditions, your dietary rules, or your identity.
We do not sell consumer health data as the My Health My Data Act defines selling, and we have never done so. If that ever changes, the Act requires us to obtain your signed authorization first, separately from any other consent.
4. Who receives it
| Category of recipient | Who | What they do with it |
|---|---|---|
| Database hosting | Neon Inc. | Stores the database on our instructions. No independent use. |
| Application hosting | Fly.io Inc. | Runs our servers, so the data passes through their infrastructure. No independent use. |
That is the complete list. Dozy Labs LLC has no affiliates, and no advertiser, analytics provider, data broker, or marketing partner receives consumer health data from us.
Our other providers — OpenAI, Apple, Google, RevenueCat, and Resend — receive no consumer health data. What each of them does receive is described in our general Privacy Policy.
5. Your rights, and how to use them
Write to hello@dozylabs.net to exercise any right below. We will confirm we received your request and respond within 45 days. If we need more time we may take up to 45 additional days, and we will tell you why before the first period ends.
- Confirm and access. Ask whether we collect, share, or sell your consumer health data, and get a copy of it, along with a list of every third party and affiliate we have shared it with and how to contact them.
- Withdraw consent. Withdraw your consent to our collecting your consumer health data, to our sharing it, or to both separately. Withdrawing stops future processing; it does not undo processing that already happened.
- Delete. Ask us to delete your consumer health data. We will delete it from our live systems, our archives, and our backups within 30 days, and we will tell every provider in section 4 that received it to do the same. You can also delete it yourself at any time from the Account screen in the app, which is immediate.
6. If we refuse
If we decline a request, we will tell you why, and you may appeal by replying to that message or writing again to hello@dozylabs.net with the word "appeal". We will decide the appeal and write to you within 45 days, explaining the reasons.
If we deny the appeal, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint. We will include that link in any denial we send you.
7. Contact
Dozy Labs LLC — hello@dozylabs.net