Privacy Policy

Effective date: 29 July 2026 · Last updated: 29 July 2026

Who we are

Wellphases is operated by Insparian OÜ, an Estonian company. Insparian OÜ is the controller responsible for the processing described in this policy.

This policy covers the Wellphases mobile app and wellphases.com. Washington State residents should also read our separate Consumer Health Data Privacy Policy.

The short version

The primary copies of your conversations, profile, health entries, reports, and patterns are encrypted and stored on your device. We do not operate a Wellphases cloud database containing your conversation history.

AI features cannot work entirely on-device. When Wellphases creates an AI response or another AI-powered result, selected content is transmitted through our relay to an AI service provider. This can include health information and the nickname you asked Wellphases to use. Those transmissions and the service providers’ temporary copies are described below.

We do not sell personal data, use it for advertising, or allow it to be used to train general-purpose AI models.

Information handled by the app

Stored primarily on your device

Conversations with Wellphases
Health and wellness entries, including symptoms, mood, sleep, exercise, diet, and menstrual-cycle information
Sleep and workout data you choose to import from Apple Health or Health Connect
Notes, reminders, summaries, patterns, letters, and reports
Your chosen nickname, age, menopause stage, and language preference

The app stores these records in encrypted local storage. They remain until you delete them in the app or remove the app, subject to your device and operating-system backup settings.

Transmitted for AI processing

Depending on the feature, Wellphases may transmit:

The message or instruction you submit
Your chosen nickname
Your age, menopause stage, language, and device region
Recent health and wellness entries relevant to the request
Relevant notes, reminders, summaries, patterns, and synced sleep or workout summaries
Technical instructions needed to generate the requested response, letter, report, summary, or structured health entry

We do not deliberately append your email address, payment-card details, or App Store or Google Play account details to AI requests. If you type identifying information into a conversation, it becomes part of the content you submit.

AI processing is used for more than the next chat reply. It may also support features you request or enable, including health-entry extraction, summaries, letters, reports, pattern reflection, and follow-up content.

Reporting an AI reply

Where your installed version offers in-app reporting, you may voluntarily report one AI reply for safety or quality review. Before you send it, the app shows exactly what will leave your device. The report contains only:

The AI reply you chose to report, which may itself repeat health information from your conversation or mention the nickname you asked Wellphases to use
The reason you selected
The app version
A random report number

We do not separately attach the message you wrote, your profile nickname field, account ID, or device ID. It is sent to a separate Cloudflare endpoint and is not sent to Anthropic, Alibaba Cloud Model Studio, or another AI model as part of the reporting process.

The report is stored in a Cloudflare D1 database restricted to the European Union and is automatically removed from the active database after 30 days. Cloudflare recovery copies age out under its ordinary backup cycle. You can ask us to delete an identifiable report sooner by providing its random report number.

Current AI routing and providers

Current released versions may use the device region to select the AI path:

Device region other than China, or unavailable: the request is relayed through Alibaba Cloud Function Compute in Singapore and processed by Anthropic in the United States using Claude.
Device region set to China (CN): the request is relayed through Alibaba Cloud Function Compute in Singapore and processed by Alibaba Cloud Model Studio / DashScope in mainland China using Qwen.

Language alone does not determine the route. A Chinese-language user outside mainland China is normally routed to Anthropic. Because older installed versions remain in use, both providers are disclosed here even if one route has very low traffic.

We do not intentionally fall back from one AI provider to the other when a provider fails. We may retry the same provider for a temporary network or service error.

Future app versions or distribution channels may use fixed provider routes instead of device-region routing. We will update this policy before a materially different route begins handling user data.

Service providers and processing locations

Provider	What it does	Data involved	Main processing location / retention
Alibaba Cloud Function Compute	Operates the Wellphases request relay	AI request and response content; network and security metadata	Singapore. The relay does not write conversation bodies to a Wellphases application database. Infrastructure may process transient content and operational metadata.
Anthropic PBC	Generates Claude outputs	AI content described above	United States. Commercial API inputs and outputs may be retained for up to 30 days under Anthropic’s standard retention unless a shorter-retention arrangement applies. Anthropic states that commercial API data is not used to train its models by default.
Alibaba Cloud Model Studio / DashScope	Generates Qwen outputs for the CN route	AI content described above	Mainland China. Alibaba Cloud states that customer content is not used for model training without authorization. Operational and security data may be retained for as long as needed to provide and secure the service or meet legal obligations under the applicable service terms.
Cloudflare	Receives voluntary in-app AI-response reports and stores them in D1	The reported AI reply, selected reason, app version, random report number, and ordinary network/security metadata	Requests may be handled by Cloudflare’s network; report content is stored in a D1 database restricted to the European Union. Active reports are deleted after 30 days; recovery copies age out under Cloudflare’s backup cycle.
RevenueCat	Manages subscription entitlement	A randomly generated app user identifier, purchase status, product, and transaction information	Processing locations used by RevenueCat; retained as needed to manage subscriptions, records, fraud, and legal obligations. No health or conversation content is intentionally sent.
Apple, Google, and Stripe	Process purchases through the channel you choose	Purchase and payment information; an app support or purchase reference where needed	Under each provider’s terms and retention rules. Wellphases does not receive your full card or bank details.
Netlify	Hosts wellphases.com	IP address, request time, URL, browser/device information, and security logs	Processing locations used by Netlify; retained for hosting, security, abuse prevention, and legal obligations.
Google Fonts	Delivers website fonts	IP address and ordinary web-request information	Processing locations used by Google. We do not use this request for advertising or analytics.

We require service providers to process data for the contracted service, apply appropriate security measures, and not use Wellphases content for their own advertising or general-purpose model training.

Apple Health and Health Connect

Health sync is optional and off by default. If enabled, Wellphases reads sleep and workout data; it does not write to or alter Apple Health or Health Connect.

Imported entries are encrypted and stored with the rest of your local Wellphases data. Relevant summaries may be sent for AI processing as described above. Turning health sync off stops future imports, but it does not delete entries already imported. Previously imported entries may continue to inform AI features until you delete all Wellphases data in Settings.

We do not sell Apple Health or Health Connect data, use it for advertising, or send it to payment providers.

Purchases

Apple, Google, or Stripe processes the payment channel you choose. RevenueCat receives a random app identifier and purchase information so the app can determine whether Pro features are available. Health data and conversation content are not intentionally sent to these purchase providers.

Website visitors

Our website host processes ordinary request and security logs. The site also requests fonts from Google Fonts. We have removed Google Analytics and do not intentionally set non-essential analytics or advertising cookies.

If you email us, we process your email address and message so we can respond and retain the correspondence as needed for support, security, and legal records.

Legal bases

Where the GDPR applies, we rely on:

Consent for AI processing of messages and health information (GDPR Articles 6(1)(a) and 9(2)(a))
Explicit consent when you voluntarily submit an AI-response report that may contain health information (Articles 6(1)(a) and 9(2)(a))
Contract necessity to provide purchases and paid features you request (Article 6(1)(b))
Legitimate interests for essential hosting security, abuse prevention, and service reliability, balanced against your rights (Article 6(1)(f))
Legal obligations where records must be kept by law (Article 6(1)(c))

You may refuse AI processing, but AI-powered features cannot operate without sending the necessary content to an AI provider.

The app presents an AI-processing notice during onboarding. You can stop future AI transmissions immediately by not using AI-powered features. Where your installed version provides an AI-processing control in Settings, you may use it to withdraw consent. You may also contact support@wellphases.com for help.

Withdrawal does not make earlier lawful processing unlawful. Provider copies already created will age out under the applicable retention rules. Turning off health sync alone only stops future imports; use Settings → Delete All My Data to remove existing local entries.

Retention and deletion

Local app data remains on your device until you delete it or remove the app, subject to device backups.
AI providers retain content according to the periods or criteria in the table above.
Voluntary AI-response reports are removed from the active EU D1 database after 30 days; provider recovery copies age out under the provider’s backup cycle.
Purchase providers retain transaction and entitlement records as needed for subscription administration, fraud prevention, accounting, and law.
Website and support records are retained only as long as reasonably needed for security, support, and legal obligations.

Deleting app data removes the local Wellphases records but cannot recall a request already processed by a provider. To make a privacy request concerning provider-held data, contact us with the approximate date, app version, provider route if known, and any request or support reference available. For an AI-response report, its random report number is the most direct way to locate it.

No sale, advertising, or tracking

We do not sell personal or consumer health data. We do not share it with advertisers or data brokers, use it for targeted advertising, or track you across other companies’ apps and websites.

Service providers acting on our instructions receive only the information needed for their service. A legal definition may treat this processor disclosure differently from a sale or third-party sharing.

International transfers

Data may be processed in Estonia, Singapore, the United States, mainland China, and other locations used by the providers listed above. For transfers from the EEA or another jurisdiction that restricts international transfers, the appropriate mechanism may include an adequacy decision, an applicable Data Privacy Framework certification, or contractual safeguards such as Standard Contractual Clauses. You can ask us which mechanism applies to a particular provider.

Consent to AI processing is separate from our responsibility to use an appropriate international-transfer mechanism.

Your rights

Depending on where you live, you may have rights to:

Access and receive information about your personal data
Correct inaccurate data
Delete data
Restrict or object to processing
Receive portable data where applicable
Withdraw consent
Appeal or complain to a data-protection authority

For EEA concerns, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority. Send requests to support@wellphases.com. We may need enough information to verify and locate the relevant processing without collecting unnecessary identity data.

Security and lawful requests

We use encrypted local storage, TLS in transit, access controls, and data-minimizing request design. No system can promise absolute security.

Insparian usually cannot retrieve your local conversation history because it is not stored in a Wellphases cloud database. Our processors may hold temporary content or metadata and may be required to respond to valid legal requests. We will respond to lawful requests only as required and permitted by law.

Children

Wellphases is intended only for people aged 18 or older.

Changes

We may update this policy when our services, providers, or legal obligations change. We will update the date above and provide additional notice where required.

Contact

Insparian OÜ
Estonia
support@wellphases.com