privacy.

WellSavvy is two things: this website, where you can join the waitlist, and an app that helps you understand what you eat. They collect different amounts of information, so this page covers both. The app section comes first, because it is where almost everything happens.

what the app collects

To create an account we need an email address. If you sign in with Google, we receive your email address and name from Google and nothing else.

The app then asks you about yourself, because a nutrition target that ignores who you are is worthless. That includes your date of birth, height, weight, sex, how active you are, what you are aiming for, and any allergies or dietary preferences you tell us about. If you say you are pregnant or breastfeeding, we store that too, because it changes almost every nutrient target we calculate.

We treat all of this as health information and handle it that way, whether or not the law in your country calls it that.

Then there is what you log: meals and what was in them, exercise, water, sleep, and how you are feeling. That is the substance of the app, and it stays yours.

health data from your phone

If you connect Apple Health or Health Connect, the app reads the specific measurements it needs to be useful: steps, heart rate, resting heart rate, sleep, active calories, blood oxygen, and recorded workouts. It also reads your history so the 30 and 90 day views have something to show.

This is always your choice. The app asks before it reads anything, you can see exactly which measurements it wants, and you can withdraw permission at any time in your phone's settings without losing your account. We only read. WellSavvy never writes anything back into your health records.

photos

When you photograph a meal, the image is sent for analysis and the food it identifies is written into your log. The photo itself is never stored. There is no photo library on our servers, no bucket of your meals, nothing to leak or subpoena. What survives is the text: the foods, the amounts, the nutrients.

voice

When you speak to the app instead of typing, the transcription is done by your phone, using Apple's or Google's built in speech recognition. The audio goes to them under their terms, not to us. We receive only the text it produces, exactly as if you had typed it.

where AI comes in

Working out that "two eggs and toast" means roughly 320 calories, or reading a photo of a plate, takes an AI model, and we do not run our own. Two companies process that content for us:

What reaches them is the content itself: the meal you described, the photo you took, the question you asked, and enough context about your targets for the answer to make sense. What does not reach them is your name, your email, or anything that identifies you as a person. Both companies act on our instructions and are contractually barred from using your content to train their models.

Barcode lookups go to Open Food Facts, an open food database. It receives the barcode. It does not receive you.

what we never do

We do not sell your data. We do not rent it, share it for anyone else's marketing, or let a third party use it for their own purposes. There is no advertising in WellSavvy, and no advertising network receives anything about you. We do not use your health information to build a profile for any purpose other than showing you your own numbers.

The companies named on this page are the complete list. If that ever changes, this page changes first.

where it lives

Your account and everything in it are stored on Amazon Web Services in the United States, in an encrypted database that is not reachable from the public internet. Sign in is handled by Amazon Cognito, which means we never see or store your password. Push notifications, if you turn them on, are delivered through Firebase using a device token that identifies your phone rather than you.

deleting your account

You can delete your account from inside the app, in your profile. It is not a request that lands in a queue: it removes your profile, every log, every calculated target, and your sign in identity. It cannot be undone and we cannot recover it afterwards, which is the point.

If you would rather not install the app to delete an account you already have, write to hello@wellsavvyapp.com from the address you signed up with and we will do it for you.

While your account is open we keep your data, because the app is a record over time and a food diary that forgets last month is not much use. When you delete it, it goes.

One thing outlives the account, and only one: a record of any payment you made, which tax law requires us to keep for several years. We strip your identity from it at the moment you delete, so what survives is a transaction with nobody attached to it.

your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. If you are in the EU or UK, those are rights under the GDPR, along with the right to object to how we use your data and to complain to your national data protection authority. Israeli residents have equivalent rights under the Privacy Protection Law.

One address handles all of it: hello@wellsavvyapp.com. We answer within 30 days and usually much sooner.

children

WellSavvy is built for adults and is not directed at children under 16. We do not knowingly collect anything from them. If you believe a child has created an account, tell us and we will remove it.

the website and the waitlist

When you join the waitlist, we store your email address, the time you joined, which form you used (or which link brought you here), and your browser's technical signature. If you fill in the tester form, we also store the answers you choose to give: which phone you use, whether you'd like to test, how you heard about us, and what you'd want to find out about your own body. We don't ask for your name, and we don't buy or append any other data about you.

When you join, we send one short welcome note. It asks whether you'd like to test the app, which is optional. After that, we'll only email when there's something worth reading: early access and meaningful updates. You can ask to be removed at any time by replying to any email or writing to us directly.

Your email is never sold or rented, and no one gets it for their own use. One company handles delivery for us: Resend, the service that sends our emails, acting only on our instructions.

analytics

This website uses Google Analytics in a cookieless configuration: analytics storage is disabled, no cookies are set, and nothing is stored on your device. Google receives anonymous, aggregated page-view and interaction signals, such as that a signup happened, never your email or who you are (your IP address is truncated in transit). We use this only to understand roughly how many people visit and which parts help.

hosting

This website is served from Amazon Web Services (CloudFront and S3) in the United States. Standard server logs (IP address, request time) may be retained briefly by AWS for operational purposes.

changes

If we change how any of this works, we will update this page and change the date below. If the change is significant, we will tell you in the app rather than hoping you re-read a web page.

contact

Questions about any of this, or about your own data: hello@wellsavvyapp.com.

Last updated: August 2026