Privacy Policy
Last updated: October 2026
This policy explains how Docwellness ("we", "us") handles personal data in the Docwellness mobile app and on docwellness.fit. We are the controller of the data described here. You can reach us at support@docwellness.fit.
In short
We collect the health and food information you give us so a dietician can build and adjust your plan. We do not show ads, we do not sell your data, and we do not use it for advertising. You can delete your account and data at any time — here is how.
1. Data we collect
We collect only what the service needs. Health information is special-category data; we process it only with your consent, which you give when you create your profile and start a consultation, and which you can withdraw by deleting your account.
| Category | What | Why |
|---|---|---|
| Account | Email address, password (held by our authentication provider, never readable by us), account role and verification status. | Creating and securing your account, sign-in, password reset. |
| Profile | Full name, gender, date of birth, WhatsApp/phone number (if you provide it), profile photo (optional). | Personalising your plan and letting your dietician identify and contact you. |
| Health & body data | Weight, height, BMI, target weight, primary goal, activity level, health concerns you select (e.g. diabetes, thyroid, PCOD/PCOS), body measurements, optional body and before/after photos. | Building your diet plan and tracking your progress. |
| Consultation | Answers to the first-consultation form (including dietary habits, allergies and foods to avoid) and any lab reports you upload. | Allowing your dietician to create a plan that is safe for you. |
| Diet & activity logs | Meal logs (including what you actually ate), water intake, exercise logs, check-ins and goals. | Showing daily progress to you and your dietician. |
| Messages | Chat messages and attachments exchanged with your dietician; reviews you write. | Delivering guidance and support. |
| Payments | Subscription status and any payment proof (e.g. a screenshot) you upload. We do not collect card numbers in the app. | Activating and managing your plan. |
| Device & usage | Push-notification token, device platform, a security signal (whether the device is rooted/jailbroken), crash reports, IP address, and in-app usage events such as screens viewed and meals logged. | Delivering notifications, keeping the service secure, fixing errors and improving the app. |
The app asks for access to your photos/camera only when you choose to attach a picture, and for notification permission so we can remind you about your plan. You can decline either; the rest of the app keeps working.
2. How we use data
- •To provide the service: create and adjust your diet plan, track meals, exercise and progress, and let you chat with your dietician.
- •To manage your account and subscription.
- •To send service notifications (plan ready, dietician replies, reminders). You can switch these off in your device settings.
- •To keep the service secure, prevent abuse and fix errors.
- •To understand how the app is used so we can improve it (product analytics, see section 4).
We do not use your data for advertising, and we do not sell it.
3. AI-assisted features
Dieticians use AI tooling to draft diet plans, recipes and translations. When a dietician generates a plan draft, the information needed for it — such as your name, gender, date of birth, height, weight, BMI, goal, and consultation answers such as dietary habits and allergies — is sent to our AI provider, OpenAI, for processing. Free text entered by dieticians is also screened through OpenAI's moderation service.
- •AI output is a draft. A qualified dietician reviews and finalises every plan before you see it; the app does not give you automatically generated diet advice.
- •We use OpenAI's API, under which, per OpenAI's published API terms, data sent through the API is not used to train its models by default.
- •No AI model makes decisions about you that have legal or similarly significant effects.
5. International transfers
Some providers above (for example OpenAI, Cloudinary, Sentry and Google) may process data outside the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised by the GDPR, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
6. How long we keep data
We keep your data while your account is active. When you delete your account we remove your personal and health data, except for records we are legally required to keep, such as payment records, which we keep only for the legally required period. Crash reports and analytics events are retained by those providers for a limited period under their own retention settings.
7. Your rights
Under the GDPR (and similar laws) you can: access your data; correct it; delete it; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting earlier processing. You can also complain to your local data-protection authority.
To delete your account and data, follow these steps. For any other request, email support@docwellness.fit; we respond within one month.
8. Security
Data is transmitted over encrypted (HTTPS) connections. Passwords are handled by our authentication provider and are never stored in readable form by us. Access to health data is limited to you and your assigned dietician, and we rate-limit and monitor our systems for abuse. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.
9. Age requirement
Docwellness is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe someone under 16 has created an account, contact us and we will delete it.
11. Changes to this policy
If we make material changes we will update the date above and, where appropriate, notify you in the app.
12. Contact
Questions about privacy: support@docwellness.fit. See also our Terms of Service and Health Disclaimer.