Privacy Policy

Last Updated: September 29, 2026

1. Introduction

Welcome to WellFit ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

  • Profile Information: Age range, biological sex, height, weight, activity level, fitness goals, diet preferences, and equipment access
  • Food Log Data: Food names, nutritional information, meal types, timestamps, and optional food photos
  • Weight Tracking: Weight measurements, dates, and optional notes
  • Workout Data: Completed workouts, exercises, sets, reps, and weights (when logged)
  • Water Intake: Daily water consumption logs
  • Apple Health Data (Optional): If you enable Apple Health sync, the app reads active calories, step count, and weight entries from Apple Health, and writes weight, height, nutrition, water intake, and workout data to Apple Health. All syncing happens locally on your device. You can enable or disable individual data categories at any time.

2.2 Automatically Collected Information

  • Device Information: Device type, operating system version, app version

We do not collect crash reports or advertising data. The only automatically collected information that leaves your device is anonymous subscription information and a small set of anonymous app-usage events, both processed by RevenueCat (see Section 5.1).

2.3 Photos, Camera Access, and Barcode Scanning

When you use the food recognition or barcode scanning features, we request access to your device's camera and photo library. Photos are:

  • Stored locally on your device only
  • Never uploaded to our servers
  • Sent to Google Gemini AI when you use the AI photo scanning feature (see Section 5.1)

2.4 Voice Logging and Recipe Import

The Speak feature lets you describe a meal by voice or by typing. If you speak, WellFit asks for microphone and speech recognition permission and uses Apple's Speech framework to turn your voice into text. Depending on your device and language, Apple recognises speech on the device or sends it to Apple's servers, under Apple's privacy policy. WellFit does not record, store or upload your audio. The resulting text (or the text you type, or a recipe you paste) is sent to Google Gemini to estimate foods and nutrition, and you review the result before anything is saved. Each use counts as one AI scan in your daily limit. Saved recipes are stored only on your device.

The app offers two food recognition modes:

  • Cloud AI recognition (Google Gemini) — online: Sends a photo to Google's Gemini API for food identification and nutrition estimation. Used automatically when you are connected to the internet and tap the photo scan button.
  • On-device recognition (Apple Vision) — offline fallback: Uses Apple's Vision framework, which runs entirely on your device. Used automatically when you have no internet connection. No photo or data leaves your device. Offline scans do not count against your daily limit.

No API keys or account credentials are required from you. WellFit uses its own developer API credentials to access these services on your behalf.

When you use the barcode scanner:

  • The camera is used to detect barcodes on food products
  • No images or video are stored — only the decoded barcode number is used
  • The barcode is sent to Open Food Facts to look up product information (see Section 5)

2.5 Meal Plans and Grocery Lists

The meal planner (version 1.30) writes a week of meals for you. To do that, WellFit sends Google Gemini your daily calorie and protein targets, your diet preference (for example "vegetarian"), the foods you asked to avoid, the days and meals you chose, how many people you cook for and the app language. Swapping a meal or redoing a day sends the same, plus the names of the meals already in your plan. Your name, weight, height and food diary are not sent. Plans, grocery lists and what you tick off are stored only on your device. Creating a plan, swapping a meal or redoing a day each counts as one AI scan in your daily limit. Plans are AI-generated estimates: check ingredients and labels yourself, especially for allergies.

2.6 Apple Health (HealthKit)

If you enable Apple Health integration in Settings, the app accesses HealthKit data on your device. This includes:

  • Data written (WellFit Pro): Weight, height, nutrition (calories, protein, carbs, fat, fiber, sugar, sodium), water intake, and completed workouts
  • Data read: Active calories burned, step count, and weight entries from external sources (smart scales, other apps)

All HealthKit data is exchanged locally between WellFit and Apple Health on your device. It is never sent to our servers or any third party. You can enable or disable individual read and write categories at any time in Settings → Apple Health.

2.7 Website Contact Form

If you send us a message through the contact form on getwellfit.app, we receive your name, the topic you pick, your message, and your email address only if you choose to enter it. Messages are stored by our website host, Netlify, and used only to answer you and improve WellFit. We delete them when they are no longer needed; to have yours deleted sooner, email us (see Section 11). The website does not use advertising or tracking cookies.

3. How We Use Your Information

We use the collected information to:

  • Provide personalized nutrition plans based on your profile
  • Generate custom fitness programs tailored to your goals
  • Track your daily nutrition intake and progress toward goals
  • Display analytics and trends about your health data
  • Understand how WellFit Pro subscriptions perform (trial starts, renewals, cancellations)
  • Provide customer support when requested

4. Data Storage and Security

4.1 Local Storage

All your health data is stored locally on your device using Apple's SwiftData framework. This includes:

  • Profile information
  • Food logs and nutrition data
  • Weight history
  • Workout logs
  • Photos (stored in app-specific directory)

4.2 No Cloud Backup

We do not keep your health data in any cloud database. Your health data is stored on your device and is backed up only through your device's iCloud or iTunes backup (if enabled).

4.3 The WellFit AI Relay

Since version 1.30, the app's AI requests (food photos, meal and recipe text, meal-plan requests, recipe links) pass through a small WellFit server hosted by Cloudflare on their way to Google Gemini, so that our Gemini key is not stored inside the app. The relay forwards each request and returns Gemini's answer; it does not store or log the content. To limit use, it counts requests per day for a random install ID created by the app (kept in your device's keychain, not linked to your name, email or Apple ID); these counters are deleted automatically within two days. When you import a recipe from a link, the relay loads that public web page and passes its text to Gemini. Like any web server, Cloudflare receives your device's IP address.

5. Third-Party Services

5.1 Services Used by WellFit

WellFit communicates with the following third-party services on your behalf. None of them receives your name or email address. Meal-plan requests to Google Gemini include your calorie and protein targets and diet preference (Section 2.5); no other part of your health profile is sent.

Google Gemini AI

  • Purpose: AI-powered food recognition and nutrition estimation
  • Data Sent: Food photos (when you use the photo scan feature); the text of a meal you speak or type, of a recipe you paste, or of a recipe page you link to (never audio); and, for meal plans, the details listed in Section 2.5. Since version 1.30 these requests pass through the WellFit AI relay (Section 4.3)
  • When Used: Only when you explicitly tap the photo scan button, find foods in the Speak tab, import a recipe, or create or change a meal plan, and are connected to the internet
  • Google's Privacy Policy: https://policies.google.com/privacy

USDA FoodData Central

  • Purpose: Accurate nutritional information from a verified government database
  • Data Sent: Food search queries and food IDs (no personal data)
  • When Used: When you search the USDA database in the Food tab
  • USDA Privacy Policy: https://www.usda.gov/privacy-policy

Open Food Facts

  • Purpose: Product identification and nutritional data from a crowd-sourced food database
  • Data Sent: Food search queries and/or product barcodes (no personal data)
  • When Used: When you search Open Food Facts or scan a barcode
  • Open Food Facts Privacy Policy: https://world.openfoodfacts.org/privacy

Apple Health (HealthKit)

  • Purpose: Sync health and fitness data between WellFit and Apple Health
  • Data Exchanged: Weight, height, nutrition, water intake, workouts, active calories, steps (all locally on-device)
  • Apple Privacy Policy: https://www.apple.com/privacy/
  • Your Control: Disabled by default. You must explicitly enable sync in Settings, and can toggle individual data categories on or off at any time.

Apple StoreKit (Subscriptions)

  • Purpose: Processing and managing WellFit Pro subscription payments
  • Data Handled: Subscription purchases are processed entirely by Apple via your Apple ID. WellFit does not receive or store any payment information.
  • Apple Privacy Policy: https://www.apple.com/privacy/

RevenueCat (Subscription and Usage Analytics)

  • Purpose: Measuring subscription activity — free-trial starts, conversions to paid, renewals, and cancellations — so we can understand how WellFit Pro is performing. RevenueCat does not process payments; Apple does.
  • Data Sent: App Store subscription information (product, price and currency, purchase, renewal and expiration dates, trial status, and Apple transaction identifiers); your App Store country; your device model, operating system version, preferred languages, and app version; Apple's identifier for vendor (IDFV), a device identifier that is shared only among apps from the same developer; and a random anonymous user ID generated by RevenueCat. As with any internet request, RevenueCat also receives your device's IP address.
  • Anonymous usage events (since version 1.25): how far the first-time setup got, the fitness goal chosen (for example "fat loss"), whether a first meal was logged, how many foods were logged and by which method (photo, search, barcode, manual, voice, recipe, template, meal plan), how many meal plans were created or shared and how often the grocery list was opened, whether the WellFit Pro offer was shown or closed, and on how many days the app was opened. These are counts only, never the foods or values. They are stored as attributes of the same random anonymous user ID, so we can see where new users stop and improve the app.
  • Not Sent: Your name, email address, Apple ID, health or profile data (weight, height, age, calories, macros), food logs, photos, or anything else you enter in the app
  • When Used: When the app is opened and when you purchase a WellFit Pro subscription
  • Not Used For: Advertising, or tracking you across apps and websites owned by other companies
  • RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

5.2 No Advertising or Tracking

We do not display advertisements, and we do not track you across apps or websites owned by other companies. No advertising or tracking SDKs are included in the app. The only third-party SDK in the app is RevenueCat (see Section 5.1), used solely for anonymous subscription analytics.

6. Data Sharing

We do not sell, rent, or share your personal data with any third parties, except:

  • When you explicitly use optional third-party features (Gemini AI food scanning, USDA search, Open Food Facts/barcode scanning, Apple Health)
  • Anonymous subscription information and anonymous app-usage events processed by RevenueCat (see Section 5.1)
  • If required by law or legal process
  • To protect our rights, property, or safety

7. Your Rights and Choices

7.1 Access Your Data

You can view all your data within the app at any time:

  • Profile: View/edit in Settings → My Profile
  • Food logs: View in the Today and Food tabs
  • Weight history: View in Progress → Weight Tracking
  • Workout logs: View in the Training tab
  • Progress and analytics: View in the Progress tab

7.2 Export Your Data

Pro subscribers can export all their data in JSON format:

  • Go to Settings → Data Management → Export Data
  • Receive a complete copy of all your health information

7.3 Delete Your Data

You can delete your data at any time:

  • Go to Settings → Data Management to delete data by category
  • Deletion is permanent and cannot be undone
  • Uninstalling the app removes all locally stored data
  • Subscription records held by RevenueCat are tied only to an anonymous ID, not to your identity. To have them deleted, email us (see Section 11) and we will help identify and remove them.

7.4 Manage Your Subscription

You can manage or cancel your WellFit Pro subscription at any time through Apple's App Store:

7.5 Opt-Out of Third-Party Services

You can stop using third-party services at any time:

  • Avoid the Photos tab to stop sending food images to Google Gemini, the Speak tab and recipe import to stop sending meal and recipe text, and the meal planner to stop sending plan requests (it can be hidden in Settings → App Preferences)
  • Avoid the Open Food Facts and Scan Barcode tabs to stop querying Open Food Facts
  • Turn off Apple Health sync in Settings → Apple Health (or disable individual categories)
  • Use only manual food entry and local features

8. Children's Privacy

WellFit is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us to delete it.

9. International Users

WellFit stores all data locally on your device. If you use features that contact third-party services, your data may be transmitted to servers in other countries (Google servers for Gemini AI, USDA servers in the US, Open Food Facts servers in France, RevenueCat servers in the US). Apple Health data always stays on your device and is never transmitted externally.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected with a new "Last Updated" date at the top. We will notify you of significant changes through the app or via the app store update notes.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

  • Email: apphealthyliving@gmail.com
  • App Store: Leave a review or contact through App Store Connect

12. Legal Compliance

GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

  • Right to Access: Request a copy of your data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Delete your data
  • Right to Data Portability: Export your data
  • Right to Withdraw Consent: Stop using third-party features at any time

CCPA (California Users)

If you are a California resident, you have rights under CCPA:

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of data sales (we do not sell data)

13. Health Data Disclaimer

Important: WellFit is not a medical device and should not be used as a substitute for professional medical advice, diagnosis, or treatment. The nutritional calculations and fitness recommendations are for informational purposes only. Always consult with a qualified healthcare provider before starting any diet or exercise program.