Privacy Policy
ES

Privacy Policy for Wellcue

Last Updated: January 20, 2025

1. Introduction

Welcome to Wellcue. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). We are committed to protecting your privacy and ensuring the security of your personal and health information.

Wellcue is a comprehensive health tracking application that helps users monitor various aspects of their health and wellness. This policy describes our practices regarding the collection and use of information through our App.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

  • Email address (required for account creation)
  • First name, last name, nickname (optional)
  • Birthday and age (optional)
  • Profile picture (optional)

Health and Fitness Data

  • Food intake records (calories, meal types)
  • Water consumption (volume measurements)
  • Exercise activities (duration, type)
  • Medication schedules (name, dosage, timing)
  • Blood pressure readings (systolic/diastolic values)
  • Sleep records (duration, quality)
  • Body measurements (weight, height, waist circumference, etc.)
  • Custom health entries (user-defined categories)

Preferences and Settings

  • Theme preferences (light/dark/system)
  • Language selection (English/Spanish)
  • Unit preferences (metric/imperial for measurements)
  • Entry type enablement/disablement and associated reminders
  • Notification preferences

Location Data (Limited)

  • General location data for timezone detection (if enabled)
  • Not used for tracking or targeted advertising

2.2 Third-Party Services

Supabase

  • Cloud database service for data storage and synchronization
  • Authentication services
  • Real-time data synchronization

Pushy (Notification Service)

  • Push notification delivery
  • Device token management for notifications
  • Notification engagement tracking

Audio Service Integration

  • Audio playback for reminder notifications
  • Local audio file management

3. How We Use Your Information

3.1 Core App Functionality

  • Health Data Management: Store and organize your health records
  • Progress Tracking: Calculate and display health trends and insights
  • Reminder System: Send personalized notifications for medications and health tracking
  • Data Visualization: Generate charts and reports from your health data

3.2 App Performance and Improvement

  • Bug Fixes: Analyze crash reports to improve app stability
  • Performance Optimization: Monitor usage patterns to enhance app performance
  • Feature Development: Understand user needs to develop new features

3.3 Communication

  • Account Notifications: Send important account-related communications
  • Service Updates: Notify users of app updates or service changes
  • Support Responses: Respond to user inquiries and support requests

3.4 Legal Compliance

  • Legal Obligations: Comply with applicable laws and regulations
  • Safety Protection: Protect the safety and security of users and services
  • Fraud Prevention: Detect and prevent fraudulent activities

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes.

4.2 Limited Sharing Scenarios

We may share your information only in the following circumstances:

Service Providers

  • Supabase: Cloud infrastructure and database services
  • Pushy: Push notification delivery services
  • Analytics Providers: Aggregated, anonymized usage data only

Legal Requirements

  • Court Orders: When required by law or legal process
  • Safety Concerns: To protect against imminent harm or illegal activities
  • Business Transfers: In case of merger, acquisition, or asset sale

With Your Consent

  • When you explicitly authorize us to share specific information
  • For integration with third-party health services (if implemented)

4.3 Data Anonymization

When sharing data for analytical purposes, we ensure it is:

  • Fully anonymized (no personally identifiable information)
  • Aggregated (combined with other users' data)
  • Used only for app improvement purposes

5. Data Security

5.1 Security Measures

We implement multiple layers of security to protect your data:

Encryption

  • Data in Transit: All data transmitted using TLS 1.3 encryption
  • Data at Rest: Sensitive data encrypted using industry-standard algorithms
  • Local Storage: Health data encrypted on device using Flutter Secure Storage

Access Controls

  • User Authentication: Secure login with email/password
  • API Security: Token-based authentication for all API requests
  • Database Security: Row-level security (RLS) policies in Supabase

Infrastructure Security

  • Cloud Security: Enterprise-grade security provided by Supabase
  • Regular Audits: Security assessments and vulnerability testing
  • Incident Response: 24/7 monitoring and rapid response protocols

5.2 Data Retention

  • Active Accounts: Data retained while account is active
  • Deleted Accounts: Personal identifiers permanently deleted within 30 days of account deletion
  • Anonymized Health Data: Health tracking data (blood pressure, body measurements, exercise, nutrition, medication, sleep quality, hydration) may be anonymized and retained as orphaned records
  • Purpose of Anonymized Data: Used exclusively for improving suggestion systems that help users with data entry patterns, personalized recommendations, and notifications based on age groups, time of day, and regional patterns
  • Legal Holds: Some data may be retained longer if required by law
  • Backup Retention: Encrypted backups maintained for disaster recovery

5.3 Anonymized Data Usage for App Improvement

5.3.1 Purpose of Anonymized Data

When users delete their accounts, health tracking data is anonymized and may be retained to:

  • Improve Suggestion Systems: Analyze patterns by age group, time of day, and regional data
  • Enhance Auto-completion: Provide better data entry suggestions based on typical user patterns
  • Personalized Recommendations: Offer more relevant notifications and reminders
  • App Feature Development: Develop new features based on aggregated usage patterns

5.3.2 Data Anonymization Process

  • Personal Identifiers Removed: All information linking data to specific users (names, emails, profile pictures) is permanently deleted
  • Orphaned Records: Health data becomes unlinked records without any personal association
  • No Personal Reconstruction: Anonymized data cannot be re-associated with individual users
  • Aggregate Analysis Only: Data is used only in aggregated form for statistical analysis

5.3.3 User Benefits

The anonymized data retention enables:

  • More accurate health entry suggestions
  • Better timing for notifications and reminders
  • Age-appropriate recommendations
  • Improved overall user experience for the community

6. Your Rights and Choices

6.1 Data Access and Control

You have the following rights regarding your data:

Access Rights

  • View Data: Access all your health data through the app interface
  • Export Data: Request a complete export of your data in standard formats
  • Data Summary: Receive summaries of data processing activities

Modification Rights

  • Update Information: Edit your profile information and health records
  • Correct Data: Request correction of inaccurate data
  • Delete Data: Request deletion of specific data or entire account. Note: Health tracking data will be anonymized rather than permanently deleted to support app improvement features

Consent Management

  • Withdraw Consent: Opt out of non-essential data processing
  • Notification Control: Manage notification preferences
  • Marketing Communications: Opt out of promotional communications

6.2 Account Deletion

  • Self-Service Deletion: Delete your account through app settings
  • Personal Data Removal: All personal identifiers and account information permanently deleted within 30 days
  • Health Data Anonymization: Health tracking data is anonymized (removing all personal identifiers) rather than deleted
  • Anonymized Data Retention: Orphaned records may be retained to improve suggestion systems for future users
  • Process Time: Account deletion and personal data removal completed within 30 days
  • Confirmation: Email confirmation of deletion and data anonymization process

6.3 Data Portability

  • Export Format: Data provided in JSON or CSV format
  • Complete Dataset: Includes all health records and profile information
  • Third-Party Transfer: Data can be transferred to other health apps

7. Health Data Specific Considerations

7.1 Special Category Data

Health data is considered "special category" personal data under privacy laws. We handle this data with additional protections:

Purpose Limitation

  • Health data used only for the health tracking purposes you authorize
  • Not used for insurance underwriting or employment decisions
  • Not shared with healthcare providers without explicit consent

Security Measures

  • Enhanced encryption for health records
  • Strict access controls and audit logging
  • Regular security assessments specific to health data

User Control

  • Granular privacy controls for different health data types
  • Ability to disable specific tracking features
  • Clear consent mechanisms for health data collection

7.2 Medical Disclaimer

  • Wellcue is not a medical device or healthcare provider
  • Health data should not be used for medical diagnosis or treatment
  • Users should consult healthcare professionals for medical advice
  • App does not provide medical recommendations or treatments

8. International Data Transfers

8.1 Data Storage Location

  • Primary data storage: Supabase cloud infrastructure
  • Data may be stored in multiple geographic regions for redundancy
  • Transfers comply with applicable data protection laws

8.2 Cross-Border Transfers

  • Transfers protected by adequate safeguards
  • Standard contractual clauses where required
  • Compliance with international privacy frameworks

9. Children's Privacy

9.1 Age Restrictions

  • Users must be at least 13 years old to use the App
  • Users under 18 require parental consent
  • We do not knowingly collect data from children under 13

9.2 Parental Controls

  • Parents can review and manage their child's data
  • Account creation requires age verification
  • Parental consent mechanisms for users under 18

10. Cookies and Tracking Technologies

10.1 App-Based Tracking

  • No Cookies: Mobile apps do not use browser cookies
  • Device Identifiers: Used only for app functionality and security
  • Analytics: Anonymous usage tracking for app improvement

10.2 Third-Party Analytics

  • Aggregated Data Only: No personally identifiable information
  • Opt-out Options: Users can disable analytics collection
  • Purpose: App performance and user experience improvement

11. Changes to This Privacy Policy

11.1 Updates and Notifications

  • Privacy Policy may be updated periodically
  • Users notified of material changes via app notifications
  • Continued use constitutes acceptance of updated policy
  • Previous versions archived for reference

11.2 Material Changes

  • Significant changes require explicit user consent
  • Grace period provided for users to review changes
  • Right to delete account if disagreeing with changes

12. Contact Information

12.1 Privacy Inquiries

For privacy-related questions or concerns:

13. Complaints and Dispute Resolution

13.1 Privacy Complaints

  • Internal Resolution: Contact our privacy team first
  • Escalation Process: Independent review for unresolved complaints
  • External Oversight: Right to lodge complaints with supervisory authorities

13.2 Dispute Resolution

  • Mediation: Optional mediation for privacy disputes
  • Arbitration: Binding arbitration for legal disputes
  • Class Action Waiver: Individual arbitration only

14. Additional Information

14.1 Open Source Components

  • App uses open source libraries and frameworks
  • Third-party licenses available in app settings
  • Security updates applied regularly

14.2 Accessibility

  • Privacy information available in multiple languages
  • Accessible format for users with disabilities
  • Clear and understandable language used

This Privacy Policy is designed to be transparent and user-friendly. If you have any questions about how we handle your data, please don't hesitate to contact us.

By using Wellcue, you acknowledge that you have read and understood this Privacy Policy.