Who we are

Wello8 ("Wello8", "we", "us") provides the Wello8 mobile app for Android and iOS and the web pages it links to, such as shared-record pages at app.wello8.com. Together we call these the "Service". Wello8 is responsible for the personal information processed through the Service.

Wello8 is a personal record-keeping tool. It is not a healthcare provider and does not give medical advice.

Information we collect

Information you give us

• Account details. Your name, email address and password. We never store your password itself, only a strong one-way hash of it. We do not ask for your phone number.
• Family member profiles. For you and each family member you add: name, date of birth, gender, relationship to you and blood type.
• Health records you enter or import: allergies (and their severity and reactions), medications (dosage, frequency, prescriber, schedule), vaccinations, doctor visits (doctor, specialty, reason, diagnosis, clinic), lab results, growth measurements (height and weight), and your notes on any of these.
• Documents and photos you upload or photograph, such as prescriptions, reports, scans and certificates, and files attached to a record.
• Emergency card. An emergency contact's name, phone number and relationship, medical conditions and notes. The card also shows blood type, allergies and current medications taken from the records you already keep.
• Insurance details. Provider, policy number, policy holder, membership class, network, expiry date and notes.
• Sharing details. When you create a share link: the recipient's email address, the level of access and how long the link lasts.
• Questions you ask the health assistant.

When you add information about other people, such as a family member or an emergency contact, please make sure you are entitled to do so and, where appropriate, that they agree. You are responsible for the records you add about others.

Information created as you use Wello8

• Sign-in sessions. A record of each signed-in device, labelled only by a general device type (for example "iPhone"), so you can see and sign out your sessions.
• Activity log. A history of actions on each member's records (created, updated, deleted, viewed, shared, exported), which you can see in the app. It does not record your IP address.
• Share activity. When a share link was last opened and how many times.
• Service logs. Technical records of requests and errors, used to keep the Service running. Names, contact details, health information and passwords are removed from these logs, and IP addresses are not recorded in them.

Information that stays on your device

Some information is kept only on your phone: your sign-in token, your language choice, which family member you last selected, the link behind each emergency card's QR code, vaccines you have added to a schedule but not yet recorded, and medication reminders. Reminders are scheduled by your phone itself and are not sent to us. The Android app does not include this information in device backups.

What we do not collect

We do not collect your location, contacts, microphone input, advertising identifiers or browsing activity. The app contains no advertising, analytics or crash-reporting tools.

How we use your information

• To provide the Service: store your records, show them to you, build the emergency card, generate exports, and deliver the shares you create.
• To keep your account secure: sign you in, let you manage sessions, reset your password by email, limit repeated attempts, and investigate misuse.
• To provide features you choose to use, such as document scanning and the health assistant.
• To maintain and fix the Service and to answer you when you contact us.
• To comply with the law and respond to lawful requests.

We do not sell your information, share it for advertising, or use your health records to profile you.

AI features

Two optional features use artificial intelligence:

• Document scanning. When you scan or upload a document to have its details filled in for you, the document is read automatically to extract fields such as medication names or test results. You review the result before anything is saved. You can always add a record by hand instead.
• Health assistant. When you ask a question, only the text of your question and your language are used to answer it. Your records are not sent with it.

Answers from the health assistant are general information, not medical advice. Always check with a qualified healthcare professional.

Sharing you control

Your records are private to your account. They are shared only when you create a share, and only at the level you choose:

Every share also shows the member's name, date of birth, gender and blood type.

• Share links last for the period you choose, up to 90 days. You can revoke one at any time, and creating a new link for the same person replaces the old one.
• The emergency QR code links to a public emergency card that anyone who scans it can see. It has no expiry date, so that it works when it is needed. You can revoke it or issue a new one from the app.
• When you send a link through another app, such as WhatsApp, or copy it to your clipboard, that app handles the link under its own privacy policy. Some apps open links to show a preview; we record those separately and do not count them as views.
• Exports you create are saved to your device and passed to the app you choose in your phone's share menu. Once you send an export, it is outside Wello8's control.

We may also disclose information when the law requires it, to protect someone's life or safety, or as part of a merger or transfer of the Service, in which case this policy continues to apply to your information.

Service providers

We use service providers who process information on our behalf and only for the purposes above. They include:

• Microsoft Azure hosts the Service, its databases and your files, and holds our encryption keys, in the United Arab Emirates.
• Azure Communication Services sends account emails, such as password resets.

Where it is stored and how it is protected

• Location. Your records, documents and account are stored in data centres in the United Arab Emirates.
• Encryption in transit. The app communicates with our servers over encrypted connections.
• Encryption at rest. Each family member's personal details, records and documents are encrypted with a key that belongs to that member alone. Those keys are themselves protected by a master key kept in a managed key vault, separate from the data.
• Separation. Account details and health records are kept in separate stores, so neither one on its own shows whose records are whose.
• Access. Share links and sign-in tokens are stored only in a form that cannot be turned back into the original. The activity log can only be added to, not altered.

No system is perfectly secure. Protect your password, keep your phone locked, and revoke sessions and shares you no longer need. If we become aware of a security incident affecting your information, we will notify you as required by law.

Keeping and deleting data

• We keep your information for as long as your account is open.
• Deleting a family member removes their profile and permanently destroys their encryption key. Their records and documents can then no longer be read by anyone, including us.
• Deleting your account signs you out everywhere, removes your account and all your family members, and destroys every member's key in the same way.
• Where medical record-keeping rules require it, the encrypted records themselves may be retained after deletion, but without the key they cannot be read.
• Backups made before a deletion may keep an encrypted copy until they are replaced in the normal backup cycle.
• Sign-in sessions expire after 30 days. Password-reset links expire after 15 minutes and work once.
• Information kept on your device is removed when you delete your account, or when you uninstall the app.

Your choices and rights

You can do the following at any time, most of it directly in the app:

• See and export all your information, as a readable summary or a data file.
• Correct any record, profile or card.
• Delete individual records, a family member, or your whole account.
• Revoke share links, the emergency QR code and signed-in sessions.
• Turn off medication reminders and notifications, and withdraw camera or photo access in your phone's settings.
• Choose not to use the AI features.

For anything you cannot do in the app, or to object to how we use your information, contact us. We may need to confirm your identity before acting on a request. Depending on where you live, you may also have the right to complain to a data protection authority.

Device permissions

Wello8 asks for a permission only when you use the feature that needs it:

• Camera, to photograph a document. Photos are not saved to your gallery.
• Photos and files, to choose an image or PDF to upload. You pick each item; the app does not browse your library.
• Notifications and exact alarms, to show medication reminders on time, including after your phone restarts.

The app keeps your screen awake only while you show an emergency card.

Children

You must be 18 or older to create a Wello8 account. Parents and guardians can add children as family members and keep their records, including vaccination schedules and growth measurements. We do not knowingly allow children to create accounts. If you believe a child has created one, contact us and we will delete it.

Changes to this policy

We may update this policy as the Service changes. We will change the effective date above, and if a change significantly affects how we use your information, we will tell you in the app or by email before it takes effect.

Contact us