Privacy Policy

Wellva is the provider of the Wellva App and the controller of your personal data for the purposes described in this Privacy Policy, unless stated otherwise.

Controller:
Wellva OÜ
Ahtri tn 12
10151 Tallinn, Estonia

Contact:
contact@wellva.one

Wellva is built with privacy as a core principle.

1. Your data exists to serve you.
2. We do not sell your personal data.
3. We do not sell or share your personal data as defined under applicable U.S. privacy laws.
4. We do not use your health data for advertising, profiling, or ad targeting.
5. We do not share health data with advertising platforms, data brokers, or ad networks.
6. We collect only the minimum personal data necessary to provide the functionality you choose to use.
7. We design our systems to keep as much data as possible under your control.
8. We apply privacy-by-design and data minimization principles in building Wellva.
9. You remain in control of your data and may request access, correction, or deletion as described below.

This Privacy Policy applies to personal data processed in connection with:

1. The Wellva mobile application.
2. Related backend, authentication, synchronization, partner-sharing, and content-delivery services.
3. Customer support and operational communications.
4. Account-based features, including login and multi-device sync, where those features are available.

This Privacy Policy does not apply to third-party services, websites, or apps that may be linked from Wellva or used as sign-in providers, such as Apple or Google. Those third parties operate under their own privacy policies and terms.

Wellva is a health and wellness app. Depending on how you use it, we may process personal data relating to reproductive health, menstrual health, fertility, pregnancy, symptoms, and related wellness information.

This may include:

1. Period and cycle history.
2. Fertility-related information.
3. Ovulation-related information.
4. Pregnancy-related information.
5. Symptoms, mood, and wellness entries.
6. Sexual activity or intimacy-related tags, if you choose to log them.
7. Weight and temperature entries.
8. Medication reminders and intake information.
9. Fetal movement or kick count information.
10. Personal notes you choose to enter.

Under some laws, this information may be treated as health data, sensitive personal data, special category data, or consumer health data.

Where required by law, we process this type of data based on your explicit consent. You provide that consent by choosing to enter and store such information in the App or by using features that rely on it. You may withdraw your consent at any time by deleting the relevant data, deleting your account, or contacting us, subject to legal and technical limitations.

If you are a U.S. resident, including a resident of Washington State, certain health-related information may also be treated as consumer health data under applicable law. We process such data only as permitted by law, including on the basis of your consent where required, and we do not sell it or share it for advertising purposes.

For more information, see our Consumer Health Data Privacy Notice.

You are not required to provide personal data, but certain features of the App may not function properly without it.

Wellva is not a medical provider, and the App is not a substitute for medical advice, diagnosis, or treatment.

We do not require you to provide information beyond what is necessary for the features you choose to use. We collect personal data directly from you, automatically from your use of the App, from your device, and in some cases from sign-in providers.

5.1 Information you provide directly

You may provide the following categories of personal data when using Wellva:

1. Account information, such as your email address and password.
2. Sign-in information from Apple or Google if you choose those login methods.
3. Profile and preference information, such as year of birth, language, units, theme, and display settings.
4. Cycle, fertility, pregnancy, perimenopause, and reproductive health information that you choose to enter into the App.
5. Symptom, mood, body, medication, and wellness information that you choose to track.
6. Notes, logs, checklists, and other entries you make in the App.
7. Partner-linking information if you choose to use partner features.
8. Information you provide when contacting support.

5.2 Information collected automatically

When you use Wellva, we may collect or generate technical and usage information such as:

1. An app-generated installation or client identifier.
2. Device name and platform information.
3. App session and sync metadata.
4. Device activity timestamps used for account security and device management.
5. Notification permission status.
6. Cache and update state for downloaded content.
7. Technical information needed to operate, secure, and troubleshoot the App and related services.

5.3 Information from sign-in providers

If you use Apple Sign-In or Google Sign-In, we may receive information from those providers, such as:

1. A provider-specific user identifier.
2. Your email address, if provided by the sign-in provider.
3. Authentication or verification tokens needed to sign you in securely.

5.4 Information we derive or infer

We may create derived or inferred health and wellness insights from the information you provide in order to operate the App and deliver personalized features. This may include cycle predictions, fertile window estimates, ovulation estimates, pregnancy progress information, cycle trend insights, and similar personalized wellness insights.

We use personal data to provide, operate, maintain, secure, and improve Wellva.

We may use your personal data to:

1. Store your settings, entries, logs, and preferences.
2. Provide cycle, fertility, pregnancy, symptom, medication, and wellness tracking features.
3. Generate predictions, insights, and personalized health-related app features.
4. Deliver educational, chat, self-care, translation, and pregnancy-related content.
5. Authenticate your account and keep you signed in.
6. Register and manage devices associated with your account.
7. Support login using email, Apple, or Google.
8. Synchronize your data across devices where sync features are available.
9. Detect and manage sync conflicts.
10. Provide partner-sharing features where you choose to enable them.
11. Schedule and manage local reminders and notifications on your device.
12. Provide customer support.
13. Maintain service integrity, security, and reliability.
14. Detect, prevent, and investigate misuse, fraud, unauthorized access, and security incidents.
15. Comply with legal obligations and protect our legal rights.

We process personal data only to the extent necessary for the features and services you choose to use.

Wellva uses both local device storage and backend services.

Some of your information may be stored locally on your device so the App can function efficiently, preserve your settings and entries, and support certain offline behaviors.

Some information may be sent to our servers to provide important app functions. Depending on the features you use, this may include:

1. Requests for predictions, trends, and related insights.
2. Cycle settings, logs, and other input data needed to provide those services.
3. Requests for translations, educational content, self-care content, pregnancy tips, chat content, and similar in-app content.
4. Account authentication data, where login is available.
5. Synchronization data, where sync is available.
6. Partner-linking data, where partner-sharing features are available.

If you use the App without signing in, some server requests may still be associated with a pseudonymous app-generated identifier that is not directly linked to your real-world identity.

Where account features are available, Wellva may allow you to sign in using:

1. Email and password.
2. Apple Sign-In.
3. Google Sign-In.

When you sign in, we may:

1. Create or link your user account.
2. Register the device you are using.
3. Issue and manage authentication tokens.
4. Maintain device records associated with your account for security and device management.
5. Use security controls to help keep account access secure.

If you use email login, passwords are stored in hashed form and not in plaintext.

Where account sync is available, Wellva may synchronize your app data across devices associated with your account.

Depending on the features you use, synchronized data may include settings, logs, notes, medication-related entries, pregnancy checklist progress, chat state, preferences, and related app state needed to restore and maintain your experience across devices.

We use synchronization to:

1. Restore your data on additional devices.
2. Keep your data consistent across devices.
3. Reduce the risk of accidental data loss.
4. Detect meaningful conflicts between device data and server data.
5. Allow conflict resolution where necessary.

Where partner-sharing features are available, Wellva may allow you to link a partner account and share limited information intentionally selected or enabled through the App.

Partner features are designed to provide a restricted, read-only experience. The exact information visible to a linked partner may depend on the mode you are using, such as cycle tracking, trying to conceive, pregnancy, or perimenopause mode.

Partner mode does not provide a linked partner with unrestricted access to your full account or all of your stored data.

Wellva may request permission to send notifications.

Where available, notification features may be used for reminders you configure in the App, such as medication reminders. You can control notification permissions through your device settings and, where applicable, in-app settings.

We do not use your health data for advertising, ad targeting, or marketing profiling. We do not share health data with advertising platforms, ad networks, or data brokers.

We do not use third-party advertising SDKs in the App to monetize your health data or to build advertising profiles based on your health information.

We may use limited technical logs or operational analytics strictly for app performance, reliability, security, debugging, and service improvement. Where we use such analytics, we do not use your health data for advertising purposes.

If we introduce new tracking, analytics, or advertising technologies that materially change how your personal data is processed, we will update this Privacy Policy and, where required, ask for your consent.

Wellva uses automated processing to generate predictions, trends, insights, and personalized app features based on the information you choose to provide.

These predictions and insights are intended to support app functionality and your personal use of the App. They are not medical decisions and do not produce legal or similarly significant effects about you and are not used to make decisions that have legal or similarly significant effects about you in the sense used by applicable privacy laws.

If the GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:

1. Consent, where required for health or other sensitive data that you choose to provide.
2. Contract, where processing is necessary to provide the services and features you request.
3. Legitimate interests, where processing is necessary for service operation, security, troubleshooting, improvement, and fraud prevention, provided those interests are not overridden by your rights.
4. Legal obligation, where processing is required by applicable law or legal process.

In particular, we generally rely on explicit consent for health and other sensitive data, contract for the core operation of the App and the features you request, and legitimate interests for security, fraud prevention, service reliability, and troubleshooting.

We do not sell or share your personal data as defined under applicable U.S. privacy laws.

We may share personal data only in the following circumstances:

1. With service providers and processors acting on our behalf, such as cloud hosting providers, authentication providers, storage providers, infrastructure providers, security services, and customer support tools.
2. With sign-in providers such as Apple or Google when you choose those login methods.
3. With a linked partner when you intentionally enable a partner-sharing feature.
4. Where required to comply with law, legal process, or enforceable government requests.
5. Where reasonably necessary to protect the rights, safety, security, or integrity of Wellva, our users, or others.
6. In connection with a merger, acquisition, restructuring, sale of assets, financing, or similar corporate transaction, subject to appropriate safeguards where required.

All processors acting on our behalf are required to process personal data under appropriate contractual protections and data protection obligations. We enter into data processing agreements with our service providers as required by applicable law.

We retain personal data for as long as reasonably necessary to provide Wellva, maintain account and sync functionality, comply with legal obligations, resolve disputes, enforce our agreements, and protect the security and integrity of our Services.

In general:

1. Data stored locally on your device may remain there until deleted, overwritten, or removed when you uninstall the App.
2. Account and synchronization data may be retained while your account is active and for a limited period afterward, unless longer retention is required by law, security needs, fraud prevention, dispute resolution, backup management, or technical recovery processes.
3. Device and authentication records may be retained for as long as reasonably necessary for security and account management.
4. Some data may remain in backups or disaster recovery systems for a limited additional period.
5. If you request deletion, we will delete or de-identify personal data as required by applicable law, subject to lawful exceptions.

Deleting your account may result in permanent loss of data that cannot be recovered.

Your personal data may be stored or processed in countries other than the country in which you live.

Where required by law, and especially where personal data is transferred from the EEA, the UK, or similar jurisdictions, we will use appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.

We use technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, alteration, and disclosure.

These measures may include account authentication controls, token-based session management, password hashing, device management controls, restricted access to data, encryption in transit and, where appropriate, at rest, and other security measures appropriate to the nature of the data we process.

No method of transmission or storage is completely secure. You are responsible for protecting your device and login credentials, including by using a device passcode or biometric protection where available.

Wellva is not intended for children below the minimum age permitted by applicable law.

At a minimum, users must be at least 13 years old to use Wellva, unless a higher age threshold applies in the country where they live. If we learn that we have collected personal data from a child in violation of applicable law, we will take appropriate steps to delete or otherwise handle that data as required.

Depending on where you live, you may have the right to:

1. Access your personal data.
2. Correct inaccurate personal data.
3. Delete your personal data.
4. Restrict or object to certain processing.
5. Withdraw consent where processing is based on consent.
6. Request portability of your personal data.
7. Appeal a privacy-related decision where applicable.
8. Lodge a complaint with a regulator or supervisory authority.

Additional rights may apply depending on your location, including under U.S. state privacy laws and consumer health privacy laws.

To exercise your rights, contact us at contact@wellva.one. We may need to verify your identity before responding.

You may also delete your account directly within the App settings, if that feature is available, or by contacting us.

If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority.

We may update this Privacy Policy periodically.

If we make material changes, we may notify you through the App, by email, or by other appropriate means, depending on the nature of the change and the legal requirements that apply.

The latest version of this Privacy Policy will always be available through Wellva and any official Wellva website where it is published.

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal data, please contact us at:

Wellva OÜ
Ahtri tn 12
10151 Tallinn, Estonia

Contact: contact@wellva.one

If you live in a jurisdiction that gives you the right to contact a privacy or data protection regulator, you may also contact that authority directly.