Nevada Consumer Health Data Privacy Notice
Effective date: August 7, 2026
1. Scope of This Notice
SJL Craig LLC (“BareVue,” “we,” “us,” or “our”) provides the BareVue mobile application, the barevue.app website, and related support services. This notice supplements BareVue’s general Privacy Policy and describes BareVue’s practices for consumer health data covered by Nevada Revised Statutes 603A.400–603A.550.
This notice applies to a Nevada resident who requests a BareVue product or service, and to a person whose consumer health data is collected in Nevada, to the extent the Nevada law applies. BareVue is a nonmedical nutrition and wellness service. References to Nevada’s statutory terms do not turn BareVue into a medical provider, diagnostic or treatment service, or medical device.
When this notice describes an action performed by an account holder, the same data practice applies if an authorized adult household member operates that account and performs the action. Information available through the shared account can be accessible to its authorized adult operators.
2. Consumer Health Data Collected, Used, and Processed
Depending on the BareVue features an authorized account operator chooses to use, BareVue can collect and process the following categories of consumer health data:
| Category | Examples | How and why BareVue processes it |
|---|---|---|
| Profile and demographic information | Profile identifier, profile name, birth date or age, sex, height, activity level, allergies, and dietary restrictions | Create and distinguish profiles; calculate and display age-, sex-, activity-, and diet-related nutrition information; maintain account and profile continuity |
| Body measurements and goals | Weight, body composition, height, measurements, goals, and related trends | Record and display measurements; calculate trends, targets, and summaries; generate requested reports |
| Nutrition and dietary information | Food and water records, nutrient intake, meal information, nutrition targets, product or ingredient activity, recipes, supplements, saved meals, and dietary preferences | Provide food logging, nutrition analysis, product and ingredient matching, meal and recipe features, configured targets, and reports |
| Reproductive information | Pregnancy, lactation, trimester, and menstrual information | Adjust applicable nutrition standards, display reproductive-state context, and provide requested tracking features |
| Symptoms and wellness observations | Symptoms, bowel movements, stress, sleep, food-mood entries, elimination-diet information, and related notes | Provide the symptom, food-mood, and elimination-diet records, comparisons, and reports requested by the account operator |
| Derived health and nutrition information | Nutrition-standard results, energy estimates, nutrient totals, trends, correlations, summaries, and guidance derived from information entered into BareVue | Produce the calculations, comparisons, guidance, and reports requested through BareVue |
| Health-linked reminder and notification information | Reminder settings, schedules, task-related text, and, if remote delivery is introduced and selected, the delivery information described in the general Privacy Policy | Schedule, synchronize when supported and enabled, or deliver a reminder or service notification selected by an authorized operator |
| Linked account and profile identifiers | BareVue account identifier, persistent profile identifier, account-to-profile association, timestamps, and record identifiers associated with the categories above | Keep records associated with the correct account and profile, resolve nutrition standards, provide optional synchronization and restoration, and process authenticated privacy or deletion requests |
Most app records are stored and processed on the device by default. BareVue also processes limited profile information through its nutrition-standard service even when optional Cloud Sync is off. If an eligible account enables Cloud Sync, supported profile, nutrition, health, recipe, and preference records are also processed in BareVue’s cloud systems to provide synchronization and restoration.
BareVue can process selected consumer health data when an authorized operator uses a requested catalog lookup, search, barcode or label scan, Recipe Import, backup, restore, export, report, sharing, printing, support, or account operation. The processing method depends on the feature: it can occur on the device, through BareVue’s cloud services, through a provider acting for BareVue, or through a website or destination selected by the operator.
3. Sources of Consumer Health Data
BareVue collects consumer health data from:
- the adult account holder or another authorized adult operating the account, including information entered for the account holder or a managed profile;
- activity within BareVue, such as logging, measuring, searching, scanning, importing, configuring a reminder, generating a report, or using a nutrition or wellness feature;
- calculations and inferences BareVue produces from information entered into the app, such as nutrition standards, nutrient totals, trends, targets, and energy estimates;
- records restored from optional BareVue Cloud Sync or an account-operator-selected backup;
- BareVue-operated catalog and search services, and the product-data sources those services consult, when an operator requests a product search, barcode lookup, or related result;
- a website, file, application, or other source selected by an authorized operator for an import, restore, or related action; and
- information a person chooses to include in a support or privacy message.
4. Consumer Health Data Shared and Recipient Categories
BareVue can make consumer health data available to the following recipient categories for the stated purpose:
| Recipient category | Current or conditional recipient | Purpose and data boundary |
|---|---|---|
| BareVue cloud and database provider | Supabase and its infrastructure providers | Process the bounded nutrition-standard request; provide optional Cloud Sync and restoration; perform authenticated account, profile, and deletion operations |
| BareVue catalog and search providers | Cloudflare, Typesense, Open Food Facts, and the applicable product-data source | Process a requested search term, barcode, lookup, result, and the provider-specific request context needed for that operation, which can include market, locale, app version, authentication, or integrity information. This row applies as consumer-health sharing only when a particular request itself identifies a consumer’s health status |
| Operating-system backup provider selected through device settings | Apple or Google | Perform platform backup or device transfer when applicable BareVue files are eligible under platform and device settings |
| Destination selected by an authorized account operator | A file provider, email service, share destination, printer, or other selected application | Complete a requested backup, export, restore, share, print, or report operation |
| Website selected for Recipe Import | The entered website and any host it uses for the requested recipe content | Deliver the recipe page or image requested by the operator |
| Support and privacy communications provider | The sender’s email service and BareVue’s email provider | Deliver and respond to a support, privacy, or rights message the person chooses to send |
| Notification delivery provider, if remote delivery is later introduced and selected | Apple or Google notification services | Process the token, limited account-or-installation association, delivery metadata, and payload needed for the selected remote notification |
The categories shared through these flows can include:
- the bounded profile, demographic, reproductive, nutrition-standard, account, and profile identifiers used for the requested nutrition-standard service;
- supported profile, measurement, nutrition, dietary, recipe, reproductive, symptom, wellness, reminder, derived, preference, and linked-identifier records included in optional Cloud Sync or restoration;
- the consumer-health content included in an eligible operating-system backup or in a backup, export, report, share, print, email, file, or other destination selected by an authorized operator;
- a search, barcode, lookup, or Recipe Import request when that particular request identifies the consumer’s health status;
- health information a person voluntarily includes in a support, privacy, or rights message; and
- if remote notifications are later introduced and selected, a health-identifying notification payload and the linked token, limited account-or-installation association, and delivery metadata needed to deliver it.
BareVue does not intentionally supply profile information, food records, measurements, symptoms, reproductive information, searches, scans, notes, or other content entered into BareVue to advertising systems for ad targeting.
SJL Craig LLC has no corporate affiliates and therefore does not share Nevada consumer health data with an affiliate. If BareVue’s corporate structure changes, this notice will be reviewed before any such sharing begins.
5. Required Consent and Sale Authorization
BareVue collects or shares Nevada consumer health data without a separate consent only to the extent necessary to provide a product or service requested by the consumer to whom the data relates, or where another law authorizes the sharing. If BareVue wants to collect consumer health data for another purpose, it will first ask for affirmative, voluntary consent that identifies the categories, purpose, use, and withdrawal method. If BareVue wants to share consumer health data outside the requested-service or legal boundary, it will first ask for a separate affirmative, voluntary sharing consent that also identifies the recipient categories.
Under the current practices described in Sections 2 through 4, BareVue limits its collection and sharing of Nevada consumer health data to the nutrition and wellness features an authorized operator chooses to use, the optional synchronization or restoration the operator enables or requests, and the lookup, import, backup, export, sharing, printing, support, privacy, or account operation the operator initiates. BareVue does not use that consumer health data for an unrelated purpose.
Nevada law requires a separate written authorization before a person sells consumer health data, prohibits conditioning a service on that authorization, and gives the consumer a right to revoke it. BareVue has no implemented Nevada sale-authorization flow.
BareVue does not sell Nevada consumer health data.
6. Nevada Consumer Rights and Requests
Subject to Nevada law, a Nevada consumer may ask BareVue to:
- confirm whether BareVue is collecting, sharing, or selling consumer health data concerning the consumer;
- provide the list of third parties with whom BareVue has shared or to whom it has sold that consumer health data;
- cease collecting, sharing, or selling that consumer health data; and
- delete that consumer health data.
An authorized account operator can review, correct, or delete many current records through the applicable BareVue feature. A signed-in account holder can use the in-app account-deletion control. To request another review, correction, cessation, recipient list, or deletion, email privacy@barevue.app and describe the request and the BareVue account or other interaction involved.
An account-linked request will ordinarily be authenticated through fresh control of the same Apple or Google sign-in used for the account. BareVue may request only the additional information reasonably necessary to authenticate a request it cannot otherwise verify. BareVue may decline to act if it cannot authenticate the request after commercially reasonable efforts.
BareVue will respond without undue delay and no later than 45 days after authenticating a request. If reasonably necessary because of the complexity and number of requests from the same consumer, BareVue may extend the response period once by up to 45 additional days and will provide the required notice and reasons during the first period. Required information is free at least twice per year and for additional requests that are not manifestly unfounded, excessive, or repetitive.
For an authenticated deletion request, BareVue will delete the covered consumer health data from BareVue-controlled records and networks within 30 days and notify applicable affiliates, processors, contractors, and other third parties as required by Nevada law. Deletion from archived or backup systems may be delayed as necessary to restore those systems, but for no longer than two years after the request is authenticated. Copies independently created by an account operator outside BareVue, or controlled by a user-selected destination, may require deletion through that operator or destination.
If BareVue refuses to act on a request, the consumer may appeal by emailing
privacy@barevue.app with Nevada Privacy Appeal in the subject line. BareVue
will respond in writing within 45 days and, if the appeal is denied, provide
the Nevada Attorney General’s contact information.
BareVue will not discriminate against a consumer for exercising a right provided by Nevada’s consumer-health-data law.
7. Security and Access
BareVue limits access by its personnel and processors to consumer health data reasonably necessary for the purpose the consumer consented to or the product or service the consumer requested. BareVue maintains, directly and through service providers, administrative, technical, and physical safeguards intended to protect the confidentiality, integrity, and availability of consumer health data, taking account of the nature and amount of the data.
BareVue does not use geofences around health-care facilities to identify or track consumers, collect consumer health data, or send health-related notifications, messages, or advertisements.
8. Material Changes, Cross-Service Collection, and Effective Date
BareVue will notify affected consumers of material changes to this notice through an in-app notice, the BareVue website, or another direct method appropriate to the change. Before BareVue collects, uses, or shares an additional category of consumer health data, shares it with an additional third party or affiliate, or uses it for an additional undisclosed purpose, BareVue will update the notice and obtain affirmative, voluntary consent where Nevada law requires it.
Under BareVue’s current practices, no third party may collect Nevada consumer health data over time and across different Internet websites or online services when a consumer uses BareVue. This answer is limited to consumer health data under Nevada law. The general Privacy Policy separately describes technical, analytics, subscription, identity, integrity, and advertising information.
The effective date of this notice appears at the top.