Your health data should stay private, portable, and under your control.

We separate independent testing, Google’s restricted-scope verification, and our own security program because they are different things. The scope and dates below come from our assessment and approval records.

These assessments and approvals apply only to the scope described. They are not general-purpose certifications of every Wellness Project system or future version of the service.

Detailed assessment materials may contain confidential security information and are not published.

No internet-connected service can be guaranteed completely secure.

Human access to Google Health API data is additionally limited by Google’s Health API requirements.

Built-in Wellness Project AI advisor requests are routed through Vercel AI Gateway before reaching the selected model provider, currently Anthropic, OpenAI, Google, or xAI, with other providers potentially used where applicable. We send the message you submitted and the subset of profile, health, fitness, or attached content needed to answer the request.

For Wellness Project-powered AI features, our provider arrangements prohibit providers from using the data we submit to train, fine-tune, evaluate, or otherwise improve their generalized models. We minimize the payload for the requested feature and do not send identifying account metadata beyond what is appropriate for the feature or required by the provider’s API. Vercel states that AI Gateway does not train on gateway traffic and deletes prompts and outputs at the gateway after inference. It also provides centralized Zero Data Retention and no-prompt-training controls for provider routing.

Vercel is built for enterprise security, not just model routing.

Vercel’s security program includes SOC 2 Type 2 and ISO 27001, regular third-party penetration testing and vulnerability scanning, least-privilege access controls, dedicated security governance, and ongoing security assessments.

Vercel’s Data Processing Addendum describes the organizational and technical safeguards behind that program.

Wearable, health-platform, and third-party integrations are optional. We request the permissions needed for the feature you choose, and platform authorization screens show the permissions being granted. Where a platform and feature support writing data, that also depends on the applicable user permission.

You can disconnect supported integrations from Wellness Project Settings or from the provider’s own controls. Disconnecting stops future data flow with that service. The third party’s own terms and privacy practices still govern what that third party does with data in its systems.

• Export: Settings > Export All My Data creates a complete, machine-readable copy of your data in spreadsheet form.
• Delete: Settings > Delete Account starts full account deletion.If you cannot sign in, use the public deletion request page to request account deletion.deletion request page
• Production systems: Account and associated health data are deleted from active production systems within 30 days of a valid deletion request.
• Backups: Deleted data ages out of encrypted backups on a rolling schedule within a few months.
• Limited longer retention: Narrowly scoped billing, tax, fraud-prevention, legal, or dispute records may be retained longer where permitted or required.

Account deletion includes saved chat history and full tool traces. They are deleted from production systems with the rest of the account data and then age out of encrypted backups on the same rolling schedule.

Wellness Project LLC is the controller described in our Privacy Policy. Core processors and recipients vary by the feature you use. Current records include:

Sign-in providers, health platforms, app stores, and payment or subscription processors also process the information required for the service you choose.

The Privacy Policy and Consumer Health Data Privacy Policy provide the governing disclosures.

Bryan Barash, founder of Wellness Project, is a seasoned compliance and security professional with a law degree. He oversees the company’s security and privacy program, reviews material findings and remediation, and is responsible for ensuring public security and privacy statements are grounded in the company’s actual policies and practices.