Privacy Policy

At a glance

You choose which Apple Health categories to allow. WELLY uses them only for your statistics and the wellness recommendations you request. We do not sell health data, use it for advertising, or allow advertising tracking.

1. Who processes your data

WELLY is the controller of data received through the WELLY app, app.welly.biz, and the WELLY Telegram bot. For privacy questions, visit our support page.

2. Data we receive

• Apple Health: the steps, active energy, workouts, heart rate, resting heart rate, heart rate variability, sleep, and blood oxygen saturation you choose to share.
• Account and connection: your personal WELLY token, internal identifier, language, connected source details, and synchronization time.
• Information you provide: messages to the bot, profile settings, goals, and food photos.
• Technical information: synchronization results, source type, consent version, and diagnostic information without an advertising identifier.

WELLY requests read-only access to Apple Health and does not write health data to Apple Health.

3. How we use data

• To show your statistics and trends.
• To synchronize measurements between your device and WELLY account.
• To provide personalized wellness recommendations at your request.
• To maintain security, fix errors, and prevent abuse.

WELLY does not diagnose conditions, replace a doctor, or serve medical emergencies.

4. Consent and Apple Health

Before the system HealthKit dialog appears, the app separately explains how data is processed. You then select categories in Apple’s interface. You can change permissions at any time in Apple Health settings. Withdrawing permission stops new access. Previously synchronized server data can be deleted separately in WELLY settings.

5. Artificial intelligence

If you request a personalized recommendation or food photo analysis, AI model providers may process the minimum content necessary for that request. WELLY does not include a direct Apple Health identifier or personal token in the transfer. This processing is only to answer your request, never for advertising or to build an advertising profile.

6. Third parties

Infrastructure, database, automation, and AI model providers may process data strictly to operate WELLY. We do not sell or share health data with advertising networks, data brokers, or for insurance or credit risk assessment. Disclosure may also occur when required by applicable law.

7. Storage and security

Data is transmitted over HTTPS. Your personal token is stored in the secure Keychain on iPhone; the server stores its cryptographic fingerprint. Data is retained while your account and its features are needed, or until you delete it. WELLY does not store HealthKit data in iCloud.

8. Your choices and deletion

In app settings, you can:

• Delete all synchronized health measurements.
• Disconnect your phone and remove the local token.
• Delete your account and associated user data entirely.

Certain de-identified records may be retained only when, and for as long as, necessary for legal requirements, fraud prevention, or confirmation that deletion occurred.

9. Children

WELLY is not intended for independent use by children below the digital age of consent in their country without a parent or legal representative’s involvement.

10. Policy changes

If the purposes of processing change materially, WELLY will show an updated notice and request new consent when required.