Privacy Policy

This Privacy Policy explains how Apparent Group Limited ("we", "us", "our") collects, uses, stores, and protects information when you use the WellFast mobile application (the "App"), available on iOS and Android.

By creating an account or using the App, you agree to this policy. If you do not agree, please do not use the App.

WellFast is a wellness application focused on intermittent fasting, health check-ins, educational content, community features, and optional AI guidance. It is not a medical device and does not provide medical diagnosis or treatment.

1. Information We Collect

1.1 Information you provide

• Account information — email address, display name, authentication provider (email/password, Google, or Apple), and email verification status.
• Profile details — profile photo (optional), phone number, address, nationality, gender, and date of birth when you add them in Profile Settings.
• Onboarding answers — health goals, lifestyle questions, height, weight, sleep patterns, fasting experience, and related questionnaire responses you choose to submit during setup.
• Fasting data — fasting protocol, start/end times, planned duration, and completed fasting sessions.
• Health check-ins — meal logs, water intake, physical activity, sleep quality, mood notes, mental clarity selections, and symptom check-ins you record in the App.
• Program data — wellness program enrollments, progress, and completion status.
• Community content — posts, comments, likes, saves, and images you choose to publish or upload.
• Learn content interactions — bookmarked articles and reading activity within the App.
• AI chat messages — questions and messages you send to WellFast AI.
• Support communications — information you send when contacting us (such as your email and message content).

1.2 Information collected automatically

• Device and app information — device type, operating system version, app version, language preference, and general technical logs needed to run the App.
• Usage and diagnostics — feature usage, crash reports, and stability data via Firebase Analytics and Firebase Crashlytics.
• Security signals — Firebase App Check tokens used to help protect backend services from abuse.
• Network status — whether your device appears online, used to show connectivity states in the App.
• Subscription status — purchase and entitlement signals processed through Adapty and app store billing systems.
• Local app storage — certain preferences (such as language, reminder toggles, AI chat history on your device, and cached subscription state) may be stored locally using on-device storage.

1.3 Device permissions we may request

• Photos / media library — to let you choose a profile photo or attach images to community posts.
• Camera — if you choose to capture a photo in supported flows (the App can work without camera access).
• Notifications — to send fasting reminders and other alerts if you enable them.
• Internet / network access — to sync your account, load content, and use online features.

2. How We Use Your Information

• Create, authenticate, and secure your account.
• Provide core App features, including fasting tracking, health check-ins, programs, learning content, and community participation.
• Personalize your experience based on profile and onboarding information you provide.
• Operate WellFast AI and return responses to your wellness questions.
• Process subscriptions, restore purchases, and manage premium access.
• Send optional push notifications and in-app reminders you enable.
• Monitor performance, fix bugs, prevent fraud or abuse, and improve the App.
• Respond to support requests and communicate important service updates.
• Comply with legal obligations and enforce our terms.

3. How We Share Information

We do not sell your personal information. We do not share your data with third-party advertising networks for cross-app tracking.

We share information only with service providers that help us operate the App, under contracts that require them to protect your data and use it only for our instructions:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics, Cloud Messaging, App Check) — account sign-in, data storage, file hosting, backend processing, analytics, crash reporting, push delivery, and abuse protection.
• Google Sign-In and Apple Sign-In — authentication when you choose those sign-in methods.
• Adapty — subscription management, purchase validation, and entitlement status.
• Apple App Store and Google Play — app distribution and payment processing for subscriptions (handled under their own privacy policies).
• OpenRouter (via our secure Cloud Function proxy) — processes AI chat prompts and returns generated responses. Messages are transmitted for real-time processing; we do not use your AI chats to train our own models.

4. Health and Sensitive Information

Some information you enter — such as weight, symptoms, mood notes, sleep, and fasting patterns — may be considered health-related or sensitive depending on your location.

You choose what to record in the App. We use this information only to provide App features to you. WellFast AI offers general wellness guidance only and is not a substitute for professional medical advice.

If you are experiencing a medical emergency or serious symptoms, contact a qualified healthcare professional immediately.

5. AI Features

• WellFast AI sends your chat messages to our backend, which forwards them to a third-party AI provider to generate responses.
• AI chat history may be stored locally on your device. Server-side rate-limiting metadata may be stored temporarily to prevent abuse.
• Do not share information in AI chat that you would not want processed by a third-party AI service.
• AI responses may be inaccurate or incomplete. Always use your own judgment and consult qualified professionals for medical decisions.

6. Community Features

• Posts and comments you publish may be visible to other signed-in App users.
• Your display name and profile photo (if set) may appear alongside content you share.
• You can delete your own community posts from within the App. If you delete your account, we delete your posts, comments, and uploaded community images associated with your account.

7. Data Storage, Retention, and Deletion

We retain your information only for as long as necessary to provide the App and for the specific purposes described in this policy. Our retention practices are:

• Account and app data are stored on Google Cloud / Firebase infrastructure, which may be located outside your country.
• While your account is active, we retain your account information, profile details, onboarding answers, fasting sessions, health check-ins, program enrollments, bookmarks, and community content for as long as your account exists and as needed to provide the App.
• If you delete your account (Profile → Settings → Delete Account, or by email request), we delete your profile, fasting sessions, check-ins, program enrollments, bookmarks, community posts, avatar, and authentication record. Deletion is completed within 30 days of the request, except where we are required to retain limited records by law.
• We keep limited records of subscription and payment transactions after account deletion for accounting, tax, and audit purposes, and to handle refunds and chargebacks, for as long as applicable law requires (generally up to 7 years). These records are not used to identify you as an active user.
• Server-side rate-limiting metadata for AI features is stored temporarily and removed on a rolling basis.
• Local on-device data (such as cached settings or AI chat history) may remain until you uninstall the App or clear app data on your device.
• Aggregated or anonymised statistics that can no longer be linked to you may be retained.

8. Security

We use industry-standard safeguards including encrypted connections (TLS), Firebase security rules, access controls, and App Check protections for sensitive backend operations.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights and Choices

• Access or update profile information in Profile Settings.
• Control notification permissions in your device settings.
• Delete your account and associated cloud data from within the App.
• Contact us to request access, correction, deletion, or a copy of personal data we hold, where applicable law provides these rights.
• Withdraw consent for optional features (such as notifications) without affecting lawfully processed data before withdrawal.
• Lodge a complaint with your local data protection authority if you believe your rights have been violated.

To exercise privacy rights, email hello@apparentgroup.co. We will respond within the timeframe required by applicable law.

10. Children's Privacy

The App is not directed to children under 13 (or under 16 in the UK/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. International Users

If you use the App from outside the country where our servers are located, your information may be transferred to, stored in, and processed in other countries, including the United States.

Where required, we rely on appropriate safeguards such as standard contractual clauses for international transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted in the App and/or communicated by reasonable means. The effective date at the top of this page shows when the current version took effect.

Continued use of the App after an update means you accept the revised policy.

13. Contact Us

This policy is provided for informational purposes and does not constitute legal advice.