Legal
Last updated: June 2026
Not a medical product. Wellness Project is a personal logging and informational tool, not a medical service or health professional. See the full medical disclaimer.
Wellness Project is a health passport built for you. Five commitments shape how we treat your data, and everything else in this policy is designed to give effect to them:
If you are a Washington, Nevada, Connecticut, or Colorado resident, our Consumer Health Data Privacy Policy describes the additional rights and disclosures that apply to your health data under those state laws.
We collect only what the service needs:
Looking ahead. The commitments in this section describe our current practices. If we ever decide to change them — for example, to introduce an ad-supported free tier, to share de-identified or aggregated data for research, or to offer any other use or disclosure not described above — we will update this policy and notify you in advance in accordance with Section 15. Any new use of personal or health data we collected before the change takes effect will require your separate affirmative consent, not merely your continued use of the Service. Where state law requires a specific form of consent (for example, for any sale or share of consumer health data under the Washington My Health My Data Act or similar statutes), we will obtain consent in the form the law requires, and you can always decline.
The app supports optional integrations with several third-party services. Each is off by default and must be enabled by you. Once enabled, any integration can be turned off at any time from the Settings page; disconnecting stops further data from flowing to or from that service going forward.
Current integrations:
When you enable a third-party integration, the third party's own terms and privacy policy also apply to how they handle your data. We do not control a third party's internal processing.
When you use an in-app AI advisor (Coach Jamie, Casey, Evelyn, etc.) or a Custom GPT integration, the text of your message and the subset of your logged data necessary to answer it is transmitted to the underlying AI provider — currently Anthropic (Claude), OpenAI, and/or Google (Gemini), depending on the feature.
Once the content reaches the AI provider, it is processed under that provider's data-handling practices, which we do not control. To protect that content we: (i) use the paid API or enterprise tier of every AI provider, with model training and data sharing explicitly disabled in that provider's settings or contract, so the provider is contractually prohibited from using your messages or attached data to train, fine-tune, evaluate, or otherwise improve its models; (ii) send only the minimum data needed to answer the message; and (iii) do not share your identifying account metadata with the provider beyond what the API requires.
Limits of our control. We cannot directly observe, audit, or enforce what happens inside an AI provider's systems. If an AI provider violates its own terms, suffers a security incident, mishandles content we transmit, or uses that content in a way it has agreed not to, that is the AI provider's conduct and not ours. We are not responsible for any AI provider's acts or omissions, and any remedy you may have for an AI provider's misuse of content lies against that AI provider rather than against us. See Sections 13, 14, and 15 of the Terms of Service for the related warranty disclaimer, limitation of liability, and indemnification.
Photos attached to AI chats. As of the date of this policy, any photo you attach to an AI chat (for example, a meal photo for macro analysis) is transmitted to the AI provider for real-time analysis and is not retained on our servers after the analysis is complete. The AI provider may briefly retain the photo and accompanying message per its own API data-handling policy. If we change this handling in the future — for example, if we add optional chat history that saves past messages and attachments — we will update this policy and provide notice in accordance with Section 15 before the change takes effect.
AI processing of photos (photo meal scanning). Photo meal scanning is opt-in per device. When you tap or chat-trigger “Find meals in today's photos,” your photos are sent to our AI providers (Google Gemini and Anthropic Claude) for analysis only. We do not retain image bytes on our servers. Our providers' contracts prohibit using your photos to train models. Providers may retain images for up to 30 days for safety review and then delete them. We retain text-only descriptions and nutrition estimates derived from your photos for up to 30 days, or until you log them as meals.
Do not type into an AI chat, or attach to an AI chat, any information you would not be comfortable being processed by the underlying AI provider.
If you enable the Apple Health / HealthKit integration on iOS, the app reads only the HealthKit data categories you explicitly authorize in the native iOS permission sheet. HealthKit data is used solely to display your metrics back to you inside the app and to power the insights, charts, challenges, and AI summaries you choose to interact with.
In line with Apple's HealthKit requirements, we:
You can revoke the app's HealthKit access at any time through iOS Settings > Health > Data Access & Devices, or by disabling the integration from inside the app.
If you enable the Android Health Connect integration, the app reads only the data types you explicitly authorize in the system Health Connect permission sheet. The categories we may request access to are:
Health Connect data is used solely to display your metrics back to you inside the app, to power the insights, charts, daily Fit Score, and AI advisor responses you choose to interact with, and to reduce the need to log the same data manually.
In line with Google's Health Connect requirements, we:
You can revoke the app's Health Connect access at any time through Android Settings > Apps > Health Connect > App permissions, or by disabling the integration from inside the app.
By creating an account, you consent to receive email communications from us:
You can opt out of promotional emails at any time by clicking the “unsubscribe” link included in every promotional email, or by contacting us. Opting out does not affect transactional emails necessary to operate your account.
We never share your email address with third parties for their own marketing purposes.
Wellness Project is operated by Wellness Project LLC, a Delaware limited liability company, which acts as the data controller for the personal information described in this policy. Your data is stored on servers operated by Supabase (database and authentication) and Vercel (application hosting). We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including transport encryption (HTTPS/TLS) for all traffic between you and the service, encryption-at-rest for the underlying database, session-based authentication, row-level security policies in the database, and auditing of privileged access.
No internet-connected service can be made completely secure. We do not promise that our measures will prevent every possible breach — but we commit to using reasonable measures, to notifying affected users without undue delay if we become aware of a breach affecting their data, and to not collecting or retaining data we do not need.
We retain your account and health data for as long as your account is active and only as long as we need it to provide the service. When you delete your account (via Delete Account in the app's Settings page, or via our public deletion-request form at wellnessproject.ai/delete-account if you cannot sign in), we delete the underlying records from our active production databases promptly (typically within 30 days). Encrypted backups roll off on a finite schedule (currently 30–90 days), after which the deleted data ages out of backups as well. We may retain a minimal set of records longer where required for legal, tax, fraud-prevention, or dispute-resolution purposes, and will keep any such retention narrowly scoped and protected.
You can exercise the following controls at any time, free of charge:
Depending on where you live, you may have additional rights under applicable privacy law (for example, the California Consumer Privacy Act, the Washington My Health My Data Act, and the Connecticut, Nevada, and Colorado consumer-health-data statutes). We honor those rights regardless of where you reside; to exercise them formally, email us at the address in Section 16.
We use cookies and browser storage solely for authentication (keeping you logged in) and for remembering your basic preferences. We do not use advertising or cross-site tracking cookies, and we do not embed third-party marketing pixels or analytics that track you off the service.
The service is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will promptly delete it.
We may update this policy from time to time. If we make a material change — especially one that narrows your rights or expands the categories of data we collect — we will provide reasonable advance notice (by email to the address on file, by an in-app notice, or both) before the change takes effect. Non-material updates (wording, clarifications, structural changes) may be made by updating the date at the top of this page. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy going forward.
Prospective vs. retroactive changes. A change that introduces a new data-sharing, data-sale, advertising, or similar monetization use of personal or health data takes effect only on a prospective basis — that is, it applies only to data you submit, or events that occur, after the change becomes effective — unless you separately and affirmatively consent to apply the new use to data we collected earlier. Continued use of the Service after such a change is consent to the new practice going forward, but it is not, by itself, consent to apply any new monetization use to data we already hold.
Cycle tracking is an optional feature that requires a separate, un-bundled, affirmative consent before any data is collected. The consent screen explains exactly what is stored and can be declined at any time without affecting any other feature.
For questions about this privacy policy, to exercise a data right, to opt out of promotional emails, or to report a concern, contact Wellness Project LLC at support@wellnessproject.ai.