Privacy Policy
Last updated: December 2025
1. Introduction
Wellie ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("the App"). Please read this policy carefully. By using the App, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Personal Information
When you create an account, we collect:
- Email address: Required for account creation and communication
- Name: First and last name (optional)
- Phone number: Optional contact information
- Profile photo: Optional avatar image
- Authentication method: How you sign in (email, Apple, or Google)
2.2 Pet Information
To provide wellness tracking, we collect information about your pets:
- Pet name, type (dog/cat), and breed
- Age, weight, size, and birthday
- Health conditions and medical history
- Pet profile photos
- Supplement and medication schedules
- Activity and wellness preferences
2.3 Health and Activity Data
With your permission, we collect wellness-related data:
- Activity logs: Walks, runs, play sessions, grooming, feeding, vet visits, training, and medications
- Activity details: Duration, distance, calories burned, and timestamps
- Wellness scores: Calculated metrics across physical, mental, social, environmental, medical, nutrition, and activity dimensions
- Nutrition data: Meal logs, feeding schedules, and dietary information
- Supplement tracking: Names, dosages, frequencies, and adherence
2.4 Apple HealthKit Data
With your explicit permission, we access the following from Apple HealthKit:
- Workout data (type, duration, distance)
- Walking and running distance
- Step count
- Active energy burned
- Workout routes (GPS location data)
Important: HealthKit data is used solely to provide wellness tracking features for your pet. We never sell HealthKit data to third parties or use it for advertising purposes, in compliance with Apple's HealthKit guidelines.
2.5 Chat and Communication Data
When you use our AI chat feature, we collect:
- Chat messages and conversation history
- Voice recordings (when you send audio messages)
- Transcriptions of voice messages
- Photo, document, and video attachments uploaded in chat
- Extracted topics and entities from conversations (to improve responses)
2.6 Device and Usage Data
We automatically collect certain technical information:
- Device type and operating system version
- App preferences (theme, notification settings)
- HealthKit sync timestamps and preferences
- Authentication tokens (stored securely on device)
2.7 Barcode Scan Data
When you scan product barcodes, we query third-party databases for:
- Product name and brand
- Ingredient lists
- Nutritional information
- Product images
3. How We Use Your Information
We use the information we collect to:
- Provide our services: Track pet wellness, manage supplements, log activities, and sync with HealthKit
- Power AI features: Generate personalized responses in the chat assistant
- Send notifications: Deliver reminders for supplements, feeding, activities, and milestones
- Improve the App: Analyze usage patterns to enhance features and fix issues
- Communicate with you: Send account-related emails (password resets, verification)
- Provide support: Respond to your questions and requests
4. How We Share Your Information
We share your information with the following third parties, solely to provide our services:
4.1 AI Service Providers
- OpenAI and Anthropic: Chat messages are processed by these AI providers to generate responses. They may use this data according to their privacy policies but do not use it to train their models.
4.2 Authentication Provider
- Stack Auth: Handles account authentication, including Sign in with Apple and Google.
4.3 Product Information
- Barcode Lookup API: Receives barcode data to retrieve product information. Only the barcode number is sent; no personal information is shared.
4.4 Email Service
- Mailjet: Processes transactional emails such as password resets and account verification.
4.5 Infrastructure
- Render: Our backend servers are hosted on Render, where your data is stored in a PostgreSQL database.
4.6 We Do NOT:
- Sell your personal information to third parties
- Share your data with advertisers
- Use your HealthKit data for marketing or advertising
- Use third-party analytics or tracking services
5. Data Storage and Security
5.1 Where Data Is Stored
- On your device: Authentication tokens are stored securely in the iOS Keychain with device-specific encryption. Preferences are stored in UserDefaults.
- On our servers: Account data, pet profiles, activities, chat history, and wellness data are stored in our PostgreSQL database hosted on Render (US-based servers).
5.2 Security Measures
We implement the following security measures:
- Encryption in transit: All data is transmitted using TLS 1.2 or higher (HTTPS)
- Secure storage: Sensitive data is stored in the iOS Keychain with "WhenUnlockedThisDeviceOnly" protection
- No iCloud sync: Authentication credentials are explicitly excluded from iCloud backup
- Token-based authentication: We use JWT tokens with expiration and refresh mechanisms
- Secure logging: Sensitive information is automatically redacted from logs
6. Device Permissions
The App requests the following permissions, all of which are optional:
- Camera: To scan supplement barcodes and take profile photos
- Photo Library: To select profile images and upload photos
- Microphone: To record voice messages in chat
- Speech Recognition: To transcribe voice messages to text
- Notifications: To send reminders for supplements, feeding, and activities
- HealthKit: To read and write activity data
You can manage these permissions at any time in your device Settings. Denying permissions may limit certain App features.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.
- Account data: Retained until you request deletion
- Chat history: Retained to provide conversation continuity
- Activity logs: Retained to provide historical wellness tracking
- HealthKit data: Can be deleted directly through the Apple Health app
8. Your Rights and Choices
You have the right to:
- Access your data: Request a copy of the personal information we hold about you
- Correct your data: Update inaccurate or incomplete information through the App
- Delete your data: Request deletion of your account and associated data
- Revoke permissions: Disable camera, microphone, HealthKit, or notification access in device Settings
- Opt out of emails: Unsubscribe from non-essential communications
To exercise these rights, contact us at privacy@wellie.io.
9. Children's Privacy
Wellie is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our servers.
10. International Data Transfers
Our servers are located in the United States. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the App, you consent to the transfer of your information to the United States.
11. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed and to whom
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to delete personal information
- Right to non-discrimination for exercising your privacy rights
12. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
The legal basis for processing your data includes: your consent, performance of a contract (providing our services), and our legitimate interests in improving the App.
13. Third-Party Links
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@wellie.io
- Website: wellie.io
16. Apple App Store Privacy Details
In accordance with Apple's App Store requirements, here is a summary of our data practices:
Data Used to Track You
None. We do not use your data for tracking purposes.
Data Linked to You
- Contact Info (email, name)
- Health & Fitness (HealthKit data, pet wellness data)
- User Content (photos, chat messages, voice recordings)
- Identifiers (user ID)
Data Not Linked to You
- Usage Data (app interactions)
- Diagnostics (crash data, performance data)