Privacy policy

General information

On May 25, 2018, the General Data Protection Regulation became applicable in the EU (GDPR). Privacy and lawful processing of data entrusted to us by our users is our priority. We meet the requirements provided for by law and we address the following information clause to you, in which we inform you about the manner and purpose for which personal data are processed and about your rights regarding the protection of personal data.

You do not need to contact WellMate, just read the content below.

Information clause

In accordance with art. 13 section 1 and item 2 of the General Data Protection Regulation of April 27, 2016 (hereinafter: GDPR) we provide below basic information regarding rules for the processing of personal data.

Information about the Administrator

The Administrator of your personal data is WellMate Sp. z o.o. with its registered office at ul. Elewatorska 9, 19-200 Grajewo, Tax no.: PL7191577049, KRS No: 0001046050.

The data administrator can be contacted via email: rodo@wellmate.io or in writing at the address of the administrator's office with the note "Data protection".

Scope of processing

We process personal data you provide when creating an account, using the WellMate mobile application, contacting us, or visiting our website. This includes account information, health and wellness data you enter or sync into the app, and usage data needed to deliver and improve our services.

Purpose of data processing

The collected personal data will be processed depending on the legal basis for processing, in order to:

  • Provide the WellMate health assistant service, including food logging, nutrition tracking, activity monitoring, AI-powered analysis, and personalised wellness recommendations (in accordance with art. 6 par. 1 point b of the GDPR);
  • Improve and personalise the app experience, including analysing how features are used and delivering targeted insights relevant to your health goals (in accordance with art. 6 par. 1 point a GDPR);
  • Send service-related communications, such as account notifications and product updates, to the e-mail address provided (in accordance with art. 6 par. 1 point a GDPR);
  • Respond to contact form enquiries and customer support requests (in accordance with art. 6 par. 1 point b of the GDPR).

Health Data

WellMate is a health and wellness application. As part of delivering our core service, we collect, process, and store health-related data. This section explains what health data we collect, how we use it, and with whom it is shared.

What health data we collect

  • Food and drink logs, including meal names, ingredients, and nutritional values (calories, proteins, carbohydrates, fats, sugars);
  • Body weight records;
  • Exercise and activity sessions (type, duration, distance) — optionally synced from Android Health Connect;
  • Heart rate and step count data — optionally synced from Android Health Connect;
  • Mood and activity journal entries;
  • Meditation session records;
  • Text messages and food photographs shared with the WellMate AI assistant.

How we use health data

  • To provide personalised nutrition recommendations and meal plans;
  • To track and display your wellness progress over time;
  • To analyse food images and identify nutritional content using AI;
  • To power the WellMate AI chat assistant with relevant context about your goals and history.

AI processing disclosure

When you use the AI chat feature or the food photo analysis feature, the content of your messages and/or food photographs is transmitted to third-party AI providers for processing. These providers act as data processors on our behalf:

We do not share your health data with these providers for their own training or advertising purposes. Data is transmitted solely for the purpose of generating responses to your queries.

We do not sell your health data

WellMate does not sell, rent, or otherwise trade your health data to any third party for commercial purposes.

The nature of data processing

  • Personal data will be processed manually by authorised persons and in an automated manner using information technology systems designed for this purpose;
  • Automated processing of personal data may include profiling to personalise health recommendations, wellness insights, and content within the WellMate application.

Data processing period

Personal data processed for the purposes previously mentioned will be processed until termination of the service provided by WellMate to the data subject or until the consent is withdrawn.

Transfer of personal data outside the European Economic Area

Some of the third-party AI providers listed above (OpenAI, Google) may process data outside the European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place in accordance with GDPR, including standard contractual clauses. All other personal data processed directly by WellMate is stored within the European Economic Area.

Rights of the subject of personal data

  1. The right to access your personal data, rectify, delete or limit processing;
  2. The right to object to further processing, and in the event of consent for data processing to withdraw it at any time. Exercise of the revocation right does not affect the processing that took place until the consent was withdrawn. Consent may be withdrawn by sending an appropriate statement to the e-mail address indicated above;
  3. The right to receive personal data provided to WellMate in a structured, commonly used, machine-readable format;
  4. The right to lodge a complaint with a supervisory body dealing with the protection of personal data.

Obligations of the personal data subject

Providing personal data is voluntary, however, it is a condition for the use of individual services indicated in this document by WellMate. If you withdraw consent, you will not be able to use the services indicated in this document.

Request user data deletion

When you install and use WellMate mobile applications, we collect and process some of your data for the legitimate purposes described above.

Data deletion requests

To delete user data collected by WellMate, please reach out to admin@wellmate.io.

If you also want to request the deletion of data that may have been collected by our third-party service partners, please use the contacts below:

Final provisions

This Privacy Policy applies from the date of publication, that is from March 2026.