Privacy Policy

Your Privacy, Designed With Care

We believe wellness technologies should be transparent by default. This policy explains what data we collect, why we collect it, and the controls you always have.

Last updated: January 14, 2026

Privacy-first by architecture, not by promise

WellnessAI Digital uses data minimization, short retention windows, and encrypted transit/storage as defaults. We only process information needed to deliver requested services.

Data minimization Encryption in transit Retention controls

Quick Summary

  • We do not sell personal data.
  • You can request access, correction, or deletion.
  • Only vetted sub-processors are used for hosting and support.
  • Cookie choices can be updated anytime.

1. Information We Collect

We collect information in three categories to operate and improve our services:

  • Account data: name, email, role, company, and authentication metadata.
  • Usage data: device/browser information, session metrics, and product interaction events.
  • Support data: messages, attachments, and troubleshooting logs when you contact us.

2. How We Use Information

Data is used only for legitimate service operations and customer experience improvements:

  • Provisioning and securing your account.
  • Delivering analytics, dashboards, and AI-enabled wellness insights.
  • Detecting abuse, preventing fraud, and enforcing platform safety.
  • Communicating updates, incident notices, and critical product changes.

3. Legal Bases for Processing

Contract

To provide the services defined in your subscription or agreement.

Legitimate Interests

To secure, improve, and analyze platform performance responsibly.

Consent

For optional analytics/cookies and select marketing communications.

4. Data Sharing & Sub-processors

We only share data with providers needed to run our service, under contractual safeguards.

  • Cloud infrastructure and database hosting.
  • Transactional email delivery and support tooling.
  • Payment processing partners for billing operations.

Each vendor is reviewed for security posture and data protection commitments.

5. Data Retention

We retain data only for as long as necessary to operate services and satisfy legal obligations.

  • Account records: retained while account is active.
  • Operational logs: rotated and deleted on schedule.
  • Support records: retained for service continuity and compliance.
  • Deleted-account data: removed or anonymized per legal timelines.

6. Your Rights and Choices

Depending on your region, you may have rights to access, correct, delete, restrict, or export your data.

Access & Export

Request a copy of your personal data in a portable format.

Correction

Update inaccurate profile or operational information.

Deletion

Request account removal and deletion where legally permitted.

Marketing Preferences

Opt out of non-essential communications anytime.

7. Security, Cookies, and International Transfers

Security Controls

TLS encryption, least-privilege access, audit logging, and regular vulnerability reviews.

Cookie Use

Essential cookies support core functionality. Optional analytics cookies require consent where required.

Data Transfers

For cross-border processing, we use contractual safeguards and recognized transfer mechanisms.

If we make material changes to this policy, we will post updates on this page and revise the “Last updated” date above.

Privacy Support

Questions about your data?

Our privacy team can help with rights requests, policy clarifications, or account-level data concerns. We typically respond within 2 business days.

satish@wellnessai.digital Submit a data request

For urgent security matters: satish@wellnessai.digital