Last updated: June 2026
WellMate ("we", "our", "us") is committed to protecting your privacy. This policy explains what we collect, why, how we safeguard it, and your rights. By using the App you consent to this policy, including the processing of sensitive health-related information you choose to provide.
Account information: name, email, and password (stored hashed by Firebase Authentication). If you sign in with Google, we receive your name and email. Phone sign-in uses your phone number.
Health & diet data (sensitive): meals and foods logged, calorie and macro entries, water, sleep, exercise, weight, height, age, gender, diet plan, and — only if you choose to provide them — medical conditions (e.g. diabetes, thyroid, PCOS, blood pressure, cholesterol). You are not required to enter medical conditions.
Photos (AI food scan): when you use "Find food with photo," the image is sent for AI analysis and is processed in memory to identify foods. We do not store your photos — only the recognised food names and usage metrics are kept.
Usage & diagnostics: anonymous usage statistics via Google Analytics, and AI-call metrics (provider, tokens, timing) for cost/abuse control. No personal health data is sent to analytics.
Payment data: processed by Razorpay. We do not store card or bank details — only a payment ID and subscription status.
We do not sell or rent your personal or health data, and we do not use it for advertising.
The App's optional AI features send the relevant data to third-party AI providers to generate results:
These providers process the data to return a result and under their terms. AI output may be inaccurate — see the Health Disclaimer in our Terms of Service.
Your data is stored in Google Firebase (Firestore) with security rules ensuring only you can access your own data. Data is encrypted in transit (HTTPS/TLS) and at rest. Authentication is handled by Firebase Authentication. AI API keys are stored as server-side secrets and never exposed to the app.
We share data only with service providers needed to run the App:
We may disclose data if required by law.
Depending on where you live, you may have additional rights under laws such as India's Digital Personal Data Protection Act (DPDP) 2023 or the EU/UK GDPR. To exercise them, contact us.
We process your data based on your consent (given when you accept this policy and choose to provide data) and to perform our service to you. Sensitive health data is processed only with your consent and only to provide the features you use. You can withdraw consent by deleting the data or your account.
We retain your data while your account is active. When you delete your account, your personal data is permanently removed from our database. Limited records (e.g. payment records, anonymised logs) may be retained where required by law.
WellMate is not intended for children under 13, and certain features/regions may require users to be 18+. We do not knowingly collect data from children under 13. If you believe a child has provided data, contact us and we will delete it.
We may update this policy from time to time. Changes are posted here with an updated date; material changes may be highlighted in the app.
Questions or data requests: admin@harma.in