Privacy Policy
Version 1.1.0 · Effective date: [set on publication]
WellB (“we”, “us”, or “our”) operates the WellB mobile application (the “App”). This Privacy Policy describes how we collect, use, and share information when you use our App.
1. Information We Collect
Account information: When you create an account, we collect your email address and the information you provide during onboarding (e.g., age, dietary restrictions, health goals).
Physical data: We collect and update physical health data you provide, including weight, height, activity level, and health goals. We also store derived metrics such as BMI, BMR, TDEE, and recommended daily calorie targets.
Usage data: We collect information about how you use the App, including food scans, calorie logs, progress data, and hydration records.
Supplement data: If you use the supplements feature, we collect supplement names, dosages, timing, frequency, and consumption logs.
Biomarker data: If you use biomarker tracking, we store the test values you enter or import, with their dates and units.
Lab reports: If you upload a lab report (PDF) and give the consent described in Section 4, we read the test results from it as described in Section 3 and store the test values, the test date and the laboratory name with your account. We do not keep the PDF file once it has been read. Lab report upload is available only to users aged 18 and over.
Voice and text input: When you use voice or text meal input, your speech is transcribed on-device and only the resulting text is sent to our backend for nutritional analysis. Audio recordings are never transmitted or stored by us.
Device information: We collect basic device identifiers and operating system information to provide and improve the App.
Sign in with Apple: If you sign in with Apple, we receive only the information Apple shares with us (typically a unique identifier and, optionally, your email address).
2. How We Use Your Information
- To provide, maintain, and improve the App and its features.
- To personalise your health recommendations and progress tracking.
- To read the test results in lab reports you upload and show your results and insights.
- To process your subscription payments via Apple In-App Purchase.
- To send you service-related notifications (e.g., hydration reminders).
- To respond to your support requests.
3. Sharing of Information
We do not sell your personal data. We may share data with:
- Apple: For in-app purchase verification and authentication.
- OpenAI (meals): Food images you scan and meal descriptions (including text from on-device voice transcription) are sent to OpenAI’s API for nutritional analysis. User-submitted content may also be checked using OpenAI’s moderation API. We keep meal photos, descriptions and analysis results with your account.
- MongoDB Atlas (MongoDB, Inc.): We use MongoDB Atlas, a managed database service, to store your account information and the data you record in the App.
- Google Cloud Platform: We use Google Cloud Platform to host our backend services, Google Cloud Storage to store meal photos, and Google Cloud Storage to keep backup copies of our database.
These providers process data only on our instructions and are bound by contract to protect it at least as well as this policy describes. OpenAI does not use data we send through its API to train its models; it may keep it for up to 30 days to monitor for abuse and then deletes it. These providers may process data outside your country, including in the United States.
Lab reports are not shared with OpenAI or any other AI provider. We read them on our own servers with software that recognises test names, values and units. On iPhones that support Apple Intelligence, the result lines our servers could not recognise are returned to your phone and read there by Apple’s on-device model; this happens entirely on your device, and neither Apple nor anyone else receives those lines. You check every value before anything is saved.
Residents of Washington, Nevada and other states with consumer health data laws: see our Consumer Health Data Privacy Policy.
4. Health Data and Your Consent
Before your first lab report upload, we ask you to confirm that you are 18 or older and to give your consent for WellB to read your lab reports and store the test values as described in Sections 1 and 3. We record when you gave your consent and which version of this policy it applied to.
You can withdraw your consent at any time in the App under Settings › Lab report permissions. After you withdraw, you can no longer upload lab reports. When withdrawing consent for health data, you can also choose to permanently delete your lab reports and the values imported from them; values you entered yourself are kept. Withdrawing consent does not affect processing that took place before you withdrew it.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the App. You may delete your account and associated data at any time from within the App settings.
Lab report PDF files are not kept after the test results have been read. Test values imported from lab reports are kept until you delete them, choose to delete them when withdrawing consent, or delete your account.
To protect against data loss, we make automated backups of our database. Backups are kept for up to 30 days and then automatically deleted. When you delete your account, your data is removed from our active systems, but it may remain in these backups, including backups kept by our database provider, until they expire. We use backups only to restore our service. If we ever restore from a backup, we delete again any accounts that were deleted after that backup was made.
6. Security
We use industry-standard security measures, including HTTPS/TLS for data in transit and encrypted storage for sensitive credentials. Database backups are encrypted at rest and stored in private storage that only authorised systems and personnel can access. We do not implement proprietary encryption.
7. Children’s Privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us. Lab report upload is available only to users aged 18 and over.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@trywellb.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, through in-app notifications.
10. Contact Us
If you have questions about this Privacy Policy, contact us at:
privacy@trywellb.com