Privacy Policy

1. Introduction

Wellbody Inc. ("we," "our," or "us") operates the Wellbody mobile application (the "App") and the website at wellbody.me (the "Website"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use them. Sections 3 through 9 describe the App; Section 10 describes the Website, which collects far less.

By using Wellbody, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the App.

2. Age Restrictions

Wellbody is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@wellbody.me.

3. Information We Collect

We collect the following types of information:

3.1 Account Information

When you create an account, we collect your email address. You may also optionally provide your name and upload a profile photo (avatar).

3.2 Intake Information

When you first use the App, you complete an intake process to help us assign you a personalized goal. We collect the responses you provide during this intake.

3.3 Journal Entries

The App allows you to write journal entries in response to prompts. These entries may contain personal information you choose to share. Journal entries are encrypted on our servers to protect your privacy. We only decrypt this data in limited circumstances, such as to investigate a security incident affecting our systems or your account. Journal entries are not shared with third parties.

3.4 Nutrition and Food Logging Data

We collect nutrition and dietary information that you log within the App, including details about the foods you consume. This health-related data is collected solely to provide you with nutrition tracking features and is not shared with third parties.

3.5 App Usage Data

We collect information about how you interact with certain features of the App, such as your responses to actions (e.g., "done" or "skipped"). This helps us personalize your experience and track your progress.

3.6 Recipe Requests

When you use our recipe creation feature, we send your recipe request to OpenAI to generate recipe suggestions. Only the recipe prompt you submit is sent to OpenAI; no other personal data is included. OpenAI's use of this data is governed by their privacy policy, available at https://openai.com/privacy.

3.7 Feedback and Device Information

If you submit feedback through the App, we collect your feedback along with technical information including your device operating system (iOS or Android), OS version, device model, and App version. This information helps us diagnose issues and improve the App.

3.8 Push Notification Tokens

If you enable push notifications, we collect a device token to send you notifications. You can disable notifications at any time through your device settings.

3.9 Camera

With your permission, the App may access your device's camera to allow you to take photos for your profile avatar and to log meals by photographing your food. Photos you take are stored as part of your account data. We do not access your camera without your permission, and you can revoke camera access at any time through your device settings.

3.10 Photo Library

With your permission, the App may access your device's photo library to allow you to upload existing photos for your profile avatar or to log meals. We only access photos you specifically select; we do not scan or access your entire photo library. You can revoke photo library access at any time through your device settings.

3.11 Microphone

With your permission, the App may access your device's microphone to allow you to dictate journal entries using speech. Audio recordings are processed to convert your speech to text for your journal entries. We do not store raw audio recordings; only the resulting text is saved. You can revoke microphone access at any time through your device settings.

3.12 Health and Fitness Data from Apple Health and Health Connect

With your permission, the App reads a limited set of workout, daily activity, sleep and recovery data from Apple Health on iOS, and from Health Connect on Android. We request nothing beyond the following:

• Workouts — the sessions recorded on your device, including the type of activity, when it started, how long it lasted, the distance covered, the energy it burned, and the average and maximum heart rate recorded during that session
• Step count
• Active energy burned
• Exercise minutes (iOS only)
• Sleep — the sleep periods recorded by your device or app, including when you fell asleep, when you woke, and how long you slept
• Body weight — the weigh-ins recorded by your scale or app
• Resting heart rate — the single resting figure your device works out for a day
• Heart rate variability — the daily variability figure your device works out for a day, in milliseconds

Heart rate itself is read only as part of a workout you completed; we do not read it continuously, or as a standalone daily reading. Resting heart rate and heart rate variability are read only as the one figure per day your device has already worked out. Distance is read only for the span of a workout you recorded, from the same health app that recorded the workout. Wellbody does not request or read your location at any time. We do not read blood glucose, blood oxygen, blood pressure, VO2 max, body temperature, body composition of any kind — including body fat, lean mass and BMI, and we never read your height — reproductive health, mental health, symptoms, clinical or medical records, or any other health category.

This access is read-only. The App declares no permission to write to Apple Health or Health Connect, and it never writes, changes, or deletes anything in them.

When you first connect, we read up to the previous 90 days so that your plan starts from the training you have actually been doing; after that, each sync re-reads only a short trailing window. What we read is stored with your Wellbody account on our servers alongside your other account data. We do not store it in iCloud.

We use this data for two purposes and no others: to build and adjust your coaching plan around the activity you actually do, and to show your own recorded readings back to you inside the App. Sleep is used the same way your activity is — to shape how demanding your plan is on a given day, not to diagnose anything or to draw conclusions about your health. Body weight, resting heart rate and heart rate variability do not shape your plan at all. They are shown back to you as recorded, on your own progress screen, and nothing else in the App reads them: we do not score them, rate them, compare them to other people or to any published range, set targets from them, or tell you what to do about them. The App is not a medical device and does not diagnose, treat or monitor any condition. We do not sell this data, we do not share it with data brokers, we do not use it for advertising or marketing, and we do not include it in analytics or product-usage tracking.

You can stop this at any time. In the App, open Settings, go to the Health section, and choose Disconnect — we will stop reading new data. To withdraw our access at the source, open the Health app, tap your profile picture, then Apps, and turn off Wellbody's access (on Android, use the Health Connect app's permission settings). Disconnecting stops future reads; data we have already read remains with your account so that your plan does not lose its history. Deleting your Wellbody account deletes that data along with the rest of your account data, as described in Section 6.

3.13 Automatically Collected Information

Our service providers may automatically collect certain technical information, such as IP addresses, in server logs for security, operational, and troubleshooting purposes.

3.14 Saved Recipes

When you save recipes generated by the App, we store them in your account so you can access them later.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Create and manage your account
• Personalize your experience and assign goals based on your intake
• Enable nutrition tracking and journaling features
• Generate recipe suggestions using OpenAI
• Build and adjust your coaching plan around the workout and activity data you choose to share from Apple Health or Health Connect
• Send push notifications (if enabled)
• Respond to your feedback and support requests
• Ensure the security and integrity of our services

5. How We Share Your Information

We do not sell your personal information. Health and fitness data read from Apple Health or Health Connect is subject to a further restriction: the measurements themselves are stored only with the database provider named below, and are never sold, never used for advertising or marketing, and never shared with data brokers. The only thing derived from them that leaves our servers is the short activity summary described under OpenAI in Section 5.1.

We may share your information in the following limited circumstances:

5.1 Service Providers

We use third-party service providers to help us operate the App. These providers only have access to your information as necessary to perform their functions and are obligated to protect your data:

• Supabase: Provides database and authentication services. Their privacy policy is available at https://supabase.com/privacy.
• OpenAI: Processes recipe requests, the content of your conversations with your coach, and the context used to generate and adjust your plan. We do not send OpenAI the health measurements themselves — no heart rate, step counts, calorie figures, or workout durations ever leave our servers for OpenAI. We do use those readings to work out which days you usually train and what kind of activity you do, and that summary — for example "Tuesday: tennis, evening" — forms part of the context used to build your plan. Their privacy policy is available at https://openai.com/privacy.
• RevenueCat: Manages subscription and payment processing. They may collect platform information and device identifiers for subscription management. Their privacy policy is available at https://www.revenuecat.com/privacy.
• PostHog: Provides product analytics that tell us which features are used and where people run into problems. We do not send PostHog your journal entries, your conversations with your coach, or any health and fitness data read from Apple Health or Health Connect. Their privacy policy is available at https://posthog.com/privacy.

5.2 App Stores

Apple and Google handle payment processing for subscriptions purchased through their respective app stores. Their data collection practices are governed by their own privacy policies.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as a court order or government investigation.

6. Data Retention and Deletion

6.1 How Long We Keep Your Data

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete all of your associated data from our systems.

6.2 How to Delete Your Account

You can delete your Wellbody account directly from the app:

1. Open the Wellbody app
2. Go to Settings (gear icon)
3. Tap Delete Account
4. Confirm your decision when prompted

6.3 What Happens When You Delete

Immediate Actions:

• You will be logged out of the app

30-Day Grace Period:

• Your account is scheduled for permanent deletion in 30 days
• During this period, you can cancel the deletion by logging back into the app
• When you log in, you'll see a prompt asking if you want to cancel or continue with deletion

After 30 Days:

• Your account and all associated data is permanently deleted
• This action cannot be undone

6.4 What Data Is Deleted

When your account is permanently deleted (after 30 days), the following data is removed:

• Profile information (name, email)
• Journal entries
• Nutrition logs and food entries
• Goal progress and preferences
• Saved recipes
• All other personal data

6.5 How to Cancel Deletion

If you change your mind within 30 days:

1. Open the Wellbody app
2. Log in with your existing credentials
3. You'll see a "Pending Deletion" notice
4. Tap Cancel Deletion to restore your account

If you're unable to access the app or need assistance, contact us at privacy@wellbody.me.

7. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. All data transmitted between the App and our servers is encrypted in transit. Journal entries are additionally encrypted at rest on our servers. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Users

Wellbody is available worldwide. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the App, you consent to such transfer and processing.

9.1 For Users in the European Economic Area (EEA)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, port, and erase your data, as well as the right to restrict or object to certain processing. Our legal basis for processing your data is your consent (which you provide when creating an account) and the performance of our contract with you (providing the App's services). To exercise your GDPR rights, please contact us at privacy@wellbody.me.

9.2 For California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information. To exercise your rights, please contact us at privacy@wellbody.me.

10. The Website: Cookies and Analytics

This section covers wellbody.me, our marketing website. You do not need an account to browse it, and it does not collect any of the health, journal, nutrition, or coaching information described above.

The Website uses two analytics services to understand which pages people find useful and where they lose interest: Google Analytics and PostHog. Between them they record pages viewed, approximate location derived from IP address, device and browser type, the site that referred you, and which links and buttons you click. This is used to improve the site and to measure which content and campaigns work.

When you first visit, we ask for your choice about analytics cookies. PostHog is loaded only if you accept. Google Analytics loads on all visits; if you would rather it did not run at all, you can block it with a browser setting, an extension, or Google's own opt-out add-on. Your cookie choice is stored in your browser, so clearing site data will prompt you again.

If you take the quiz on the Website, your answers are sent to our server so that your result can be calculated, and are used for nothing else. We do not store them, we do not attach them to your account, and we do not send them to the analytics services above. They exist only for the moment it takes to work out your result. Website analytics are never combined with health and fitness data from Apple Health or Health Connect, which the Website never receives.

Google's privacy policy is at https://policies.google.com/privacy, and PostHog's at https://posthog.com/privacy.

10.1 Creator Programme Applications

If you apply to our creator programme at wellbody.me/creators, we collect the name, social media handle and email address you enter, an optional link to your own work, and your confirmation that you are 18 or over. Unlike the quiz above, these answers are stored, because we need them to contact you about your application.

We use them for one thing: running that hiring round and getting in touch with you about it. We do not add you to any marketing list, we do not use your application for advertising, and we do not send it to the analytics services described above. It is stored in a database run by Cloudflare, who also host this Website, and is not shared with anyone else. Cloudflare's privacy policy is available at https://www.cloudflare.com/privacypolicy/.

We delete applications once the hiring round has closed and everyone who applied has been told the outcome. You can ask us to delete yours sooner, or ask what we hold, by emailing privacy@wellbody.me.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Effective Date" at the top of this policy and, where appropriate, through the App or by email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Wellbody Inc.
Email: privacy@wellbody.me