Legal

Privacy Policy

Effective as of 2025-12-03

This privacy policy applies to the Wellion app (hereby referred to as "Application") for mobile devices that was created by Deep Saha (hereby referred to as "Service Provider") as a freemium service. This service is intended for use "AS IS".

Privacy-First, On-Device Architecture

Wellion is built with your privacy at its core. Your personal health data — including dose logs, weight entries, check-in responses, and generated insights — is processed and stored entirely on your device. This data never leaves your device, is not transmitted to external servers, and is not shared with any third parties. We do not sell, rent, or share your personal health data for advertising or data brokering purposes.

1. Information Collection and Use

The Application collects minimal information when you download and use it. Because Wellion uses an on-device architecture, the vast majority of your data never leaves your phone.

Data Stored On Your Device Only (Never Collected)

  • Dose logs and medication tracking data
  • Weight entries and body measurements
  • Check-in responses and daily patterns
  • Insights, trends, plateau detection, and side-effect analytics
  • Weekly intelligence reports

This health data is never transmitted, collected, or accessible by the Service Provider or any third party.

Limited Data Collected by Third-Party Services

SDK / Service Data Collected
PostHog Analytics Screen views, user behavior patterns, device info (anonymized)
RevenueCat Purchase history, subscription status

Data the Application Does NOT Collect

  • Your device's IP address
  • Precise location data
  • Time spent on pages or in the Application
  • Operating system details beyond basic device type

The Application does not gather precise information about the location of your mobile device. No geolocation services are used.

Account Data (Optional)

If you create an account, the Service Provider may collect your email address for authentication and subscription management purposes. For a better experience, the Service Provider may request certain personally identifiable information, including but not limited to email and display name. This information is retained and used as described in this privacy policy.

2. Third-Party Services

The Application uses the following third-party services, each with their own privacy practices. No personal health data is shared with any of these services.

  • RevenueCat — Subscription and payment management (purchase history, subscription status). Privacy Policy
  • PostHog — Anonymized product analytics (screen views, user behavior, device info). Privacy Policy

The Service Provider may disclose limited, non-health information:

  • As required by law, such as to comply with a subpoena or similar legal process
  • When they believe in good faith that disclosure is necessary to protect their rights, your safety, or the safety of others, investigate fraud, or respond to a government request
  • With trusted service providers who work on their behalf, do not have independent use of the disclosed information, and have agreed to adhere to this privacy policy

3. Data Retention and Deletion

On-device health data remains entirely on your device. You can delete all health data at any time from within the app settings. When you delete data or uninstall the app, this data is permanently removed from your device.

Account data (if applicable) will be retained for as long as you use the Application and for a reasonable time thereafter (typically up to 30 days after account deletion for backup and legal compliance purposes). Automatically collected analytics data may be retained by third-party services according to their respective retention policies.

Upon your request for deletion, we will remove or anonymize your personal data from our systems within 30 days. Note that third-party services (PostHog, RevenueCat) may retain data according to their own policies; we recommend reviewing their privacy policies for deletion options.

4. How to Request Data Deletion

You have the right to request deletion of your account and associated data at any time. You can do this in two ways:

Option 1: In-App Account Deletion

  1. Open the Wellion application on your phone
  2. Log in to your account
  3. After logging in, you will be redirected to the home screen
  4. Tap on More in the bottom bar
  5. The Settings screen will open — scroll to the bottom
  6. Tap on Delete Your Account to proceed

Option 2: Request via Form

You may also submit an account deletion request through our official form:

Delete Account Request Form

If you need assistance with the deletion process or have any questions, contact us at [email protected]. We will respond within a reasonable timeframe (typically within 30 days).

5. Revoking Consent & Your Rights

You can revoke your consent and stop all collection of information by the Application by:

  • Using the in-app "Delete Your Account" option or submitting the Delete Account Request Form
  • Uninstalling the Application using the standard uninstall processes available on your mobile device or via the app store

6. Regulatory Compliance

The Service Provider is committed to complying with applicable data protection laws:

  • GDPR (EU/EEA): Users in the European Union have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You may exercise these rights by contacting us or using the deletion options above.
  • CCPA (California): California residents have the right to know what data we collect, request deletion, opt-out of sale (we do not sell personal information), and non-discrimination for exercising these rights.
  • COPPA: The Application does not knowingly collect information from children under 13. We comply with the Children's Online Privacy Protection Act.

To exercise your rights under these regulations, contact us at [email protected].

7. Children's Privacy

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application does not address anyone under the age of 13. In the case the Service Provider discovers that a child under 13 has provided personal information, the Service Provider will immediately delete this from their systems. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider at [email protected] so that they can take the necessary actions.

8. Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information that is processed and maintained. Your on-device health data benefits from your device's built-in security features including encryption.

Health Data Disclaimer

Wellion is a health tracking and insights tool — not a medical device. The health data you enter and the insights generated are for personal tracking purposes only and should not be used as a substitute for professional medical advice. Always consult your physician or qualified healthcare provider before making any changes to medication, dosage, or treatment plans.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

10. Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

11. Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider via email at [email protected] or visit our Support page.