Consumer Health Data Privacy Policy

Effective October 20, 2026.

This policy is for anyone whose health data WellSavvy holds. It is written to meet Washington's My Health My Data Act, Nevada's law on consumer health data, and Connecticut's data privacy act, and it applies to everyone who uses WellSavvy. WellSavvy is run by its two founders, Anna Nosova and Michael Solomonik. Write to hello@wellsavvyapp.com about anything on this page.

1. The health data we collect, and what we use it for

Body and life stage. Your date of birth, sex, height, weight and how your weight changes, and, if you tell us, whether you are pregnant or breastfeeding. We use them to calculate your calorie and nutrient targets, which change with each of these. We also keep how much sun your skin gets, if you answer, to read your vitamin D.

Health conditions you tell us about. Your allergies, and a nutrient a doctor or a blood test has flagged, if you tell us. We use them to keep foods you are allergic to out of suggestions, and to follow the nutrients you asked us to watch.

Diet. For example vegan or vegetarian. We use it to read the nutrients that depend on it and to suggest foods you eat.

What you eat and drink. Meals, foods, amounts, drinks and water, and any supplements, as you log them. We use them to estimate the nutrients you take in and to show how each one has been going. We also count how many people save a meal in their first week, and how many still log during their free month. Those counts look only at which days have a meal saved, never at what a meal holds; we keep only the totals for everyone who joined in the same week (a week with fewer than five people is joined to the weeks after it), and never read a group of fewer than five people on its own.

Movement. Exercise you log, and steps, active calories and workouts from Apple Health or Health Connect, if you connect it. We use them to show your activity beside your food and, now and then, to suggest a steps habit at a number from your own steps. A workout you log moves that day's calorie range. Once you have said yes to AI features, some of them also go to Gemini, for Savvy, your tips and your notes, as section 4 lists.

Body measurements from your phone. Heart rate, resting heart rate, blood oxygen and sleep, if you connect Apple Health or Health Connect. We use them to show your days beside your food and how you felt. Once you have said yes to AI features, your sleep and resting heart rate also go to Gemini, as section 4 lists. Your heart rate readings through the day and your blood oxygen never do.

Mood and feelings. How you say you are feeling, and your energy. We use them to show how they relate to what you eat.

Habits. The habits you set, with any reminder time, when you did them, and which of our habit suggestions we showed you and what you answered. We use them to show your check-ins, to let your phone send the reminders you set, and to suggest a habit now and then.

What we work out. Your nutrient averages, the plain-word readings, and the tips, notes and recipes made for you. These are estimates from what you log, never measurements of your body. An email about your subscription, such as the reminder before a free month ends, can name the nutrients whose averages have arrived or are still to come, with the dates. It never says how a nutrient is going, and it never names a food you logged or anything else about your body.

What you write to Savvy. Your questions to the app's assistant and its answers, which we keep so the conversation can carry on. If you report one of its answers, an AI recipe or a tip, we keep a copy of it with your reason and any note you add, to look into it, and delete it with your account.

That you use WellSavvy. Your account, which kind of tester you are if you are one, and, once subscriptions open, your subscription. We use them to run your account and your subscription. From October 22, 2026, if you said yes to usage counts, we also keep the time of each app open, to count how many people come back, and delete it if you say no. From the app's version of October 26, 2026, if you use WellSavvy on an iPhone and have said yes to usage counts, we also keep whether an App Store ad led to your install and, if one did, which ad and which search words, to count which ads work, and delete it if you say no. The app also counts a few moments of how it is used, described in section 4.

2. Where it comes from

From you, when you set up the app, log, set a habit, or write to Savvy or to us; from Apple Health or Health Connect, only if you connect them; from Apple, on an iPhone and only after your yes to usage counts, whether an App Store ad led to your install; and from our own calculations on what you log, some of which use Google's Gemini, as section 4 explains.

3. How we handle it

It is stored in an encrypted database in the United States, run by Amazon Web Services, and processed by our own software on Amazon's servers. The companies in section 4 process parts of it, each for the purposes listed there. Only the two founders have access to it, and they use it only to run the service or to answer you. We count totals across all members in our own database, such as how many still log after four weeks. A total says nothing about any one person.

4. Who we share it with

We share health data only with these companies, which process it for us, and only for the purposes in section 1.

Amazon Web Services receives all of it: it stores your account, runs our servers, handles sign in and sends the app's emails.

Google, for Gemini, receives what each AI feature needs, once you have said yes to AI features in the app: what you describe, photograph or add as a screenshot; for Savvy, your age, sex and weight, your goals, activity level, calorie target and energy estimate, your diet and allergies, whether you are pregnant or breastfeeding, your daily aims, your nutrient averages and weight change, today's meals, exercise and water, how you have been feeling, your tips, your fridge list, your earlier messages and, once you have agreed to it, the foods you logged in the last 30 days that gave you the most of each nutrient; for a recipe you ask for, your allergies and the nutrients your averages show as low; for tips, your goals, diet and allergies; and for tips and notes, your recent logs, mood and energy. If you connect Apple Health or Health Connect, it also receives the last seven days of sleep and steps, and today's active calories, for Savvy; your sleep, deep sleep, steps, resting heart rate and active calories for your tips; and your sleep and steps for your notes. It reads your meals and photos, answers Savvy, and writes recipes, tips and notes. Google keeps what it receives for up to 55 days to check for misuse, and then deletes it.

Google, for Firebase, receives the text of each notification, which can include your first name and a food, never a nutrient, and, only if you say yes when the app asks (the app asks from its version of October 16, 2026; an older version sends these counts without asking), counts of a few moments that show you use WellSavvy: that an account was created, that a first meal was logged, that the app was opened again on the second day, about a week later and about four weeks later; and, from the app's version of October 16, 2026, that setup was finished, that the subscription screen was shown, that a free month or a subscription started and on which plan, what you answered when the app asked about notifications, and which screens of the app you open, by the screen's name only. Those counts never include what you eat, what you weigh or any other answer about your body.

Google, for our mailbox, receives anything you write to hello@wellsavvyapp.com. If you test on Android, it also holds, in our testers' group, the Play Store email you give us, which shows that you test WellSavvy. Testers cannot see each other there.

Apple receives the text of each notification sent to an iPhone, which can include a food, never a nutrient. If you test on an iPhone, it also receives your name and the email for your TestFlight invitation, which show that you test WellSavvy.

RevenueCat, once subscriptions open, receives that you subscribe to WellSavvy, with your purchase records, under a random account number.

Resend receives anything you write in the tester form on this website, and delivers it to us.

When you sign in with Apple or Google, or pay through Apple's App Store or Google Play, you deal with them directly, under their own terms, and we send them nothing about your health for it. We have no affiliates. We do not sell health data. No third party collects your health data over time and across other websites or apps through WellSavvy.

5. Your choices

We collect the health data in section 1 to run the app you signed up for, and some of it, such as Apple Health data, pregnancy or how you feel, only if you choose to give it. The app asks for your consent before it keeps anything you tell it about your body, and asks separately before it records pregnancy or breastfeeding. It asks from its version of October 16, 2026; an older version does not ask. You can withdraw that consent in your profile at any time. If you withdraw it, or answer Not now, we stop using your health data within 15 days, in the app and in everything we run without you, such as your readings, notifications and AI, until you say yes again. If your account is older than that question, an up-to-date app asks it the next time you open it. Until you answer, we keep running only what you already use, such as your targets, readings and the reminders you turned on, and for no more than 30 days after we start asking; after that, nothing more runs on your data until you say yes. The app asks before it sends anything to Google's Gemini for the first time, and you can turn AI features off in your profile at any time; from then on, nothing more goes to Gemini. You can stop the app reading Apple Health or Health Connect in your phone's settings at any time. Changing your mind does not delete what was collected before, but you can ask us to delete it, as section 6 explains.

Notices by email. When you say yes in the app, you also agree that we send important notices about your account and your data by email and in the app, including a notice that your data's security was breached. You can have any of them on paper instead, free: write to hello@wellsavvyapp.com with your postal address. You can withdraw your agreement to email notices, or give us a new email address, the same way; after a withdrawal, notices come by post. To read them you need an email account and a device that opens email.

6. Your rights, and how to use them

See it. Ask us whether we hold your health data and for a copy of it, together with the list of companies in section 4 and how to contact each of them. [We email you a link to it, as one zip file. The link works until the end of the seventh day after we made the copy, UTC time; if it has stopped, ask and we make a new one.]

Correct it. Change it in the app, or ask us to.

Delete it. Delete your account in your profile, follow the steps at wellsavvyapp.com/delete-account.html, or ask us. We delete it from our own systems at once and from our backups within 7 days, and within 30 days we ask each company in section 4 that holds health data linked to your account to delete it. Google deletes what Gemini received after 55 days, and does not delete it sooner on request. An email we have already sent you stays in your own mailbox. Deleting your account does not remove it.

Withdraw a choice. In your profile, in your phone's settings, or by asking us.

To ask, write to hello@wellsavvyapp.com from the email address on your account; that is how we know it is you. We answer within 30 days. Requests are free, at least twice a year. We keep a record of each request: what was asked, how and when it came, how we checked it was you, and what we did and when, under the random number your account had and nothing else about you, and we delete it after 24 months.

7. If we say no

Write to hello@wellsavvyapp.com with "Appeal" in the subject within 45 days of our answer. We reply in writing within 45 days, or 60 for Connecticut residents, saying what we decided and why. If we still say no, you can complain to your state's Attorney General: Washington at atg.wa.gov/file-complaint, Nevada at ag.nv.gov/Complaints, and Connecticut at portal.ct.gov/ag, choosing "Consumer Data Privacy" as the subject.

8. Changes to this policy

If we change it in a way that matters, we tell you in the app before the change takes effect, and we ask for your consent again before we use health data in a new way or share it with someone new.

Last updated: October 2026