Privacy Policy – WellBuddy

📋 Table of Contents

Overview
Information We Collect
How We Use Your Data
Third-Party Services
Data Storage & Security
Sensitive Health Data
Your Rights
Children's Privacy
Changes to This Policy
Contact Us

👋 1. Overview

WellBuddy ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have over your data when you use the WellBuddy mobile application.

By using WellBuddy, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue using the application.

📊 2. Information We Collect

2.1 Account Information

Name and email address (via Google Sign-In or email registration)
Profile photo (optional)
Firebase Authentication UID (internal identifier)

2.2 Health Data (User-Provided)

Daily health logs: sleep hours, water intake, mood score, stress level
Physical activity: step count, active minutes, calories burned
Medicine names, dosages, frequencies, and reminder schedules
Prescription scans (processed via AI, not stored as images)

2.3 Automatically Collected Data

Device push notification token (for medicine reminders)
App usage patterns (via Firebase Analytics)
Crash reports and performance data

2.4 Google Fit Data (Optional)

If you connect Google Fit, we access read-only fitness data including steps, heart rate, and activity. This connection is optional and can be revoked at any time.

Data Type	Collected	Stored on Server
Email / Name	✅ Yes	✅ Yes
Health Logs	✅ Yes	✅ Yes
Medicine Data	✅ Yes	✅ Yes
Prescription Images	✅ Processed	❌ Not stored
Google Fit Data	Optional	✅ Synced if enabled
Location	❌ Never	❌ Never

🎯 3. How We Use Your Data

We use the information collected for the following purposes:

Medicine Reminders: Schedule daily notifications based on your medication times
AI Health Insights: Generate personalized wellness predictions and recommendations using our ML model
Prescription Parsing: Use AI to extract medicine names from scanned prescription text
AI Chat: Provide context-aware wellness conversations via the WellBuddy AI chatbot
Trend Analysis: Show your health data trends over time (sleep, mood, steps)
App Improvement: Analyze usage patterns to improve features and fix bugs

🔒 We never sell your personal data to third parties or use it for advertising purposes.

🔗 4. Third-Party Services

WellBuddy uses the following third-party services, each with their own privacy policies:

Firebase (Google)

Used for authentication, database, and analytics. Firebase Privacy Policy →

Groq AI

Powers the AI chatbot and prescription text analysis. Messages sent to the AI are processed on Groq servers and are not stored by Groq beyond the request lifecycle. Groq Privacy Policy →

Google Fit (Optional)

Read-only fitness data integration. Only connected if you explicitly authorize it. Google Privacy Policy →

Expo / EAS

Used for building and delivering the app. Expo Privacy Policy →

Railway

Hosts our backend API and ML service infrastructure. Railway Privacy Policy →

🗄️ 5. Data Storage & Security

🛡️ Encrypted in Transit

All data is transmitted over HTTPS (TLS encryption)
Health data is stored in a MongoDB Atlas database with access controls
Authentication is handled by Firebase, which is SOC 2 and ISO 27001 compliant
Medicine reminder times are stored locally on your device and as data in our secured database
We do not store prescription images — only the extracted text and structured medicine data

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated health data within 30 days.

🏥 6. Sensitive Health Data

WellBuddy processes sensitive health information. We treat this data with the highest level of care:

Health logs (mood, sleep, stress) are stored only in your personal account
AI-generated health recommendations are based solely on the data you provide
Prescription information is only used to set up your medicine reminders
We do not share health data with insurers, employers, or government agencies
AI chat conversations related to mental health are not used for model training

⚠️ WellBuddy is not a medical device. AI insights are for informational purposes only and should not replace professional medical advice. Always consult a qualified healthcare provider for medical decisions.

⚖️ 7. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of all data we hold about you
Correction: Update or correct your personal information via the app's Profile screen
Deletion: Request deletion of your account and all associated data
Portability: Request an export of your health data
Opt-out: Disconnect Google Fit or disable notifications at any time
Withdraw Consent: Stop using the app and request data deletion

To exercise any of these rights, contact us at wellbuddy.app@yahoo.com.

👶 8. Children's Privacy

WellBuddy is not intended for children under the age of 13 years. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

📝 9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through:

An in-app notification
An update to the "Last Updated" date at the top of this page

Your continued use of WellBuddy after changes are posted constitutes your acceptance of the updated policy.

📬 10. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:

📧 Email: wellbuddy.app@yahoo.com
🌐 App: WellBuddy – AI Health Companion
🏢 Developer: Piyush Nitkkr
📍 India

We aim to respond to all privacy-related requests within 7 business days.