Privacy Policy

Raag ("Raag," "we," "us") provides a personal health record and AI assistant product. This policy explains what we collect, why, how it's protected, and the controls you have - in plain language, matching what the product actually does, not aspirational claims.

Raag is informational only and is not a substitute for professional medical advice, diagnosis, or treatment. Nothing in this policy changes that.

1. What we collect

• Account information - name, email address, password (stored as a salted hash by our auth provider, never in plain text).
• Health data you provide - vitals, medications, symptoms, nutrition logs, goals, appointments, family medical history, and any documents you upload (lab reports, prescriptions, imaging, visit summaries, vaccination records).
• AI-extracted data - when you upload a document, our AI provider extracts structured facts (e.g. a lab value) from it. Every extracted fact is linked back to the original document and marked unverified until you confirm it. The original file is never discarded or overwritten.
• Conversations with Raag's AI assistant - your questions and the assistant's answers, stored so you can revisit them.
• Connected device data - if and when you connect a wearable or health platform, the metrics that integration shares with us (this feature is not yet live).
• Usage data - basic technical logs (timestamps, error reports) needed to operate and secure the service.

2. How we use it

We use your data only to:

• Provide the product - store your records, render your dashboard, log medication adherence, and so on.
• Power the AI assistant and document parsing - your question or document content is sent to our AI provider (Anthropic) at the moment you ask something or upload something, scoped to what's needed to answer that specific request. We do not send your entire record set to the model on every call.
• Secure the product - detect abuse, debug failures, maintain audit trails on sensitive record access.
• Communicate with you - service notices, and only the notification types you've opted into in Settings.

We never sell your data. We never use your data to train third-party AI models. We never share your health data with advertisers. The only sharing that happens is: (a) with the service providers below, strictly to operate the product, and (b) with anyone you explicitly grant access to via Raag's sharing controls - nothing is shared by default.

3. Who processes your data

We keep the list of sub-processors deliberately short:

• Supabase - our database, file storage, and authentication provider. Your records, documents, and account credentials live here, encrypted at rest and in transit.
• Anthropic - our AI provider (Claude models). Receives only the specific content needed for a given AI request (e.g. a document you just uploaded, or the context needed to answer a question you asked) - not your full record set, and not shared with anyone else. Per Anthropic's commercial API terms, data submitted through the API is not used to train their models. (We encourage you to review Anthropic's own terms directly if this matters to your decision to use Raag.)

We do not use ad networks, analytics trackers, or data brokers of any kind.

4. How your data is protected

• Encrypted in transit (TLS) and at rest.
• Row-level data isolation enforced at the database level - not just hidden in the app's interface - so your records are inaccessible to other accounts by construction, not by convention. We test this directly (attempting cross-account access and confirming it's blocked) as part of how we verify the product, not just assume it.
• An append-only audit trail on sensitive record activity.
• Granular consent controls - you decide whether Raag can reference your family history for AI insights, whether de-identified data can help improve the product (off by default), and whether a summary is shared with your care provider.
• You can export everything or permanently delete your account at any time - both are real, working features you can use today in Settings, not requests that go into a queue.

5. Your rights

Regardless of where you live, you can, at any time, from Settings:

• Access & export - download a complete copy of everything Raag has stored about you.
• Correct - edit any entry you've logged, and confirm or correct any AI-extracted fact before it's treated as verified.
• Withdraw consent - turn off any optional data use (de-identified improvement data, AI use of family history, provider sharing) independently, at any time.
• Delete - permanently delete your account and everything under it. This is irreversible and removes your profile, records, documents, and health history from our active systems.

These rights are offered to every user globally, in the spirit of frameworks including the EU's GDPR, India's DPDP Act, and the US's HIPAA - we are not currently formally certified under any of them (a milestone we're building toward), but the underlying rights above are live today, not aspirational.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your records, documents, and profile are removed from our active database and file storage. Routine infrastructure backups may retain deleted data for a limited operational window as part of standard disaster-recovery practice before cycling out - this is not a mechanism for retaining your data against your wishes, and we don't currently have a formal published backup-retention SLA; ask us directly if this specific detail matters to you.

7. Family & dependent profiles

Raag supports an adult account holder managing health records for a dependent (e.g. a child or an aging parent) who doesn't have their own login. If you add a dependent's information, you're confirming you're their parent, legal guardian, or otherwise authorized to manage their health data. A family member with their own account only ever sees data you've explicitly and revocably granted them access to.

8. Children

Raag accounts are intended for adults (18+). We don't knowingly allow children to create their own account. Children's health information may only be added by a parent or guardian through that adult's own account, as described above.

9. Changes to this policy

If we make a material change to how we handle your data, we'll notify you (email, or an in-app notice) before it takes effect. Continuing to use Raag after a change takes effect means you accept the update; if you don't, you can export and delete your account beforehand.

10. Contact

Questions about this policy or your data: privacy@raag.app (replace with your real support address before launch).