Privacy Policy
Raul handles sensitive health information, so the bar for clarity has to be high. This page explains what Raul collects, why it is processed, which providers help run the service, and what rights you have.
Controller and scope
Raul is operated by Shubham Dogra EI (SIRET 109 126 631 00018), 21 Boulevard Berd de St Julien, 92190 Meudon, France, which is the data controller for the personal data described here. You can reach the controller at support@askraul.app. This policy covers the account, logging, dashboard, briefing, and coaching features of Raul.
What Raul collects
Raul can collect account details like your email address, plus the wellness information you choose to log. That can include food, hydration, sleep, workouts, body measurements, goals, profile preferences, chat messages, and photos you send in the chat (a meal, a nutrition label, a screenshot); Raul keeps a small preview of each photo with the message, and the full photo is sent to the AI model only to read it. If you connect Apple Health, Raul also reads the data listed under Apple Health below. If you use voice input in the iOS app, your speech is turned into text by Apple's speech recognition under Apple's privacy policy; Raul receives only the text, never the audio. If you subscribe, Raul stores your subscription status.
Why Raul processes that data
Raul uses your data to run your account, save logs, update dashboards, generate summaries, and tailor coaching responses. Health and wellness logs are processed only so Raul can provide the tracking, analytics, and coaching features you asked it to deliver.
Legal bases
Raul relies on explicit consent for the health and wellness data you choose to log, because that data can be sensitive, and names its AI provider in that same consent before any of it is sent there. Product analytics runs only if you opt in, and you can change that choice at any time. Raul also relies on contract or pre-contract steps to run your account, plus legitimate interests for service security, debugging, and abuse prevention.
AI and service providers
Raul uses third-party providers to run the service. Your chat messages, logs, profile and Apple Health data are sent to Anthropic, which provides the AI model that reads your logs and writes coaching replies and briefings; Anthropic processes this data to generate responses and does not use it to train its models. Other providers: Supabase (accounts and database), Google and Apple (only if you choose to sign in with them; Raul receives your name and email, or Apple's private relay address), Vercel (hosting), Apple, RevenueCat and Stripe (payments; Raul never sees your card details), Resend (briefing emails), PostHog (product analytics, only if you opt in, which never receives your health data), and Langfuse (AI quality monitoring, which stores the conversations it monitors). These providers process data on Raul's behalf so the product can work. Raul does not sell your data or use it for advertising.
Apple Health
If you connect Apple Health in the iOS app, Raul reads steps, active energy, workouts, distance, sleep, resting heart rate, heart rate variability, VO2 max, weight, body fat, mindful minutes, and nutrition totals (calories, macronutrients, fibre and water), including what other apps you use save to Apple Health, so you do not have to log them by hand. Raul only reads this data and never writes to Apple Health. Apple Health data is used only to provide Raul's tracking and coaching features, is never used for advertising or marketing, and is never shared with or sold to data brokers or advertisers. You can turn off access at any time in the iOS Settings app under Health → Data Access & Devices.
Payments
Subscriptions bought in the iOS app are processed by Apple, and Raul uses RevenueCat to confirm them; Raul receives your subscription status and renewal dates, never your payment details. Subscriptions bought on the web are processed by Stripe; Raul stores your subscription status, plan, renewal dates and a Stripe customer reference, and card details are handled by Stripe. Apple, RevenueCat and Stripe handle this data under their own privacy policies.
International transfers
Some providers process data outside the European Economic Area, mainly in the United States: Anthropic (the AI model), Vercel (hosting), Stripe, RevenueCat and Resend. Those transfers rely on the European Commission's Standard Contractual Clauses in each provider's data processing agreement, or on the EU-US Data Privacy Framework where the provider is certified under it. PostHog processes analytics in the EU. You can ask for a copy of the safeguards at the contact address below.
Retention
Raul keeps your account and log data while your account remains active. When you delete your account in the app, your data is kept for 30 days so you can change your mind: signing back in with the same account during that time restores it. After 30 days it is permanently erased, including the copies held by PostHog and Langfuse, and Sign in with Apple access is revoked. If you want it erased straight away, email the contact address below. Operational logs and debugging data may be retained for shorter periods where needed for security and reliability.
Your rights
If GDPR applies to you, you can ask for access, correction, deletion, restriction, portability, or object to certain processing. You can also withdraw consent for health-data processing at any time, without affecting processing that already happened before withdrawal. You also have the right to complain to your local supervisory authority, such as the CNIL in France.
Medical boundary
Raul is for fitness and wellness support. It is not a medical device, not a diagnostic tool, and not appropriate for emergencies or urgent health concerns.
Contact
Privacy or deletion requests can be sent to support@askraul.app, or by post to Shubham Dogra EI, 21 Boulevard Berd de St Julien, 92190 Meudon, France.
US residents
Washington, Nevada and some other US states have specific rules for consumer health data. See the Consumer Health Data Privacy Policy.