WellTrack Privacy Policy
WellTrack has no account and no server for your habits. Every habit, logged day, note and photo you add lives in storage on your own phone. We cannot read it, and there is nothing for us to hand over, lose or sell.
One optional thing leaves the app: anonymous usage statistics, which you can switch off at any time in Settings → Privacy. They never contain the names of your habits or anything you type.
Who we are
WellTrack is made by DevzStudio (“we”, “us”), based in India. For anything in this policy, write to [email protected] — that address reaches a person, not a queue.
This policy covers the WellTrack app on iOS and Android. It does not cover Apple's or Google's own handling of your data, which is governed by their policies.
What stays on your device
The following is written to private app storage on your phone and is never transmitted to us:
- Your habits — their names, icons, colours, targets and reminder times
- Every day you log, including the count and any note you attach
- Your streaks, statistics and tracking status
- Your answers to the questions asked during onboarding
- Your display name and profile picture, if you set one
- Your settings — appearance, haptics, language, notification preferences
Because this data is on your device, deleting the app deletes it. There is no copy on our side to request or erase.
One Android exception, in your favour
On Android, WellTrack asks the operating system to include your habits and logged days in Android Auto Backup, so that reinstalling the app on a phone signed into the same Google account brings your history back. That backup is stored in your Google account under Google's terms, not ours — we have no access to it. Your Pro purchase record, saved sign-in state and analytics identifier are deliberately excluded from it. You can turn Auto Backup off in your device's system settings.
What leaves the app
1. Optional usage analytics
When usage analytics are on, WellTrack sends product events to PostHog, an analytics provider acting as our processor. This is the only routine outbound data in the app.
What is sent: which screens you open, and a fixed list of actions with numeric or yes/no details attached — a habit was created (with its icon, chosen from our own list), a day was logged (how many, whether a note was attached, whether it was backfilled), the paywall was opened (and from which button), a purchase started, completed, failed or was restored, whether you allowed notifications, and app opened/updated/backgrounded events. Also your app version, build number, platform, OS version, device model, locale and timezone.
What is never sent: the name of any habit, the text of any note, your display name, your email address, your profile picture, your onboarding answers, or any other text you type. This is enforced in the app's own code — every analytics event is restricted to a number, a yes/no value, or a choice from a list we shipped.
Identity: events are tied to a random identifier generated on your device. It is not your name, your email, your advertising ID or your device's serial number, and we do not link it to anything that identifies you. It is stored outside the Android backup scope on purpose, so a reinstall counts as a new device rather than merging two phones into one person.
Turning it off: Settings → Privacy → Usage analytics. Collection on that device stops immediately. Analytics are on when you first install; if you would rather they never ran, the switch is there from your first launch.
PostHog processes this data on servers in the United States. Where you are in the EEA, UK or another region with transfer rules, that transfer relies on the standard contractual clauses in our agreement with PostHog. PostHog's own policy: posthog.com/privacy.
2. Purchases
Pro is sold through the App Store and Google Play. Your payment method, billing address and store account are handled entirely by Apple or Google — WellTrack never sees them, and we receive no card details at any point.
What the app does receive from the store is whether your account currently owns Pro and which plan, which it caches on your device to unlock features. Aggregate, anonymised sales and subscriber reports are available to us through App Store Connect and Play Console; those are Apple's and Google's reports, produced under their policies.
3. Support and feedback forms
Tapping Help or Send feedback opens a form hosted by Tally. Whatever you type into it comes to us, along with your app version, build number and platform, which are attached automatically so we can reproduce what you describe. Nothing about your habits is attached. If you give an email address so we can reply, we use it for that reply and nothing else. Tally's policy: tally.so/help/privacy-policy.
4. The version check
On launch the app fetches a small configuration file from
tryout.devzstudio.com to learn whether your version is
still supported. Like any web request this reaches our host with your IP
address, the time, and your app's user agent, which are recorded in
ordinary server logs and retained for up to 30 days for security and
debugging. The request itself carries no data about you or your habits.
5. Exports you initiate
Profile → Backup & sync → Export data writes your habits, logged days, onboarding answers and appearance settings into a JSON file and hands it to your system share sheet. Where it goes from there is entirely your choice — it does not come to us. Your Pro entitlement and any saved sign-in state are deliberately left out of the file, so a backup can never carry a credential.
What the app never does
- No advertising. No ad SDK is in the app, and no data goes to advertisers or data brokers.
- No cross-app tracking. WellTrack does not use the iOS advertising identifier and does not ask for permission to track you, because it does not.
- No selling or sharing of personal information, in the sense those words carry under the CCPA/CPRA or any other law.
- No remote push notifications. Every reminder and nudge is scheduled by the app on your own device. WellTrack does not register a push token, so no server — ours or anyone's — can send your phone a notification.
- No location, contacts, health data, microphone or precise device identifiers are read at all.
Permissions the app may ask for, and why
| Permission | Asked when | Used for |
|---|---|---|
| Notifications | You set a reminder, or accept the notification primer | Showing your reminders and check-ins, scheduled locally |
| Photo library | You choose a profile picture from your photos | Reading the one image you pick. It is copied into app storage and never uploaded |
| Camera | You take a profile picture | Capturing that one image. Same handling as above |
Declining any of these leaves the rest of the app fully usable.
How long data is kept
Data on your device is kept until you delete it in the app or uninstall the app. Analytics events are retained by PostHog for up to 12 months, then deleted. Support form submissions are kept while the conversation is open and for up to 24 months afterwards. Server logs for the version check are kept for up to 30 days.
Children
WellTrack is not directed at children under 13, and we do not knowingly collect data from them. If you are under the age at which you can consent on your own in your country (13 in most places, 16 in parts of the EEA), please use the app only with a parent or guardian's involvement.
Your rights
Depending on where you live, you may have rights to access, correct, delete, port or restrict the processing of your personal data, and to object to it — under the GDPR, the UK GDPR, India's Digital Personal Data Protection Act, the CCPA/CPRA, or similar laws.
In practice, most of these you can exercise yourself, immediately and without asking us:
- Access and portability: Profile → Backup & sync → Export data gives you everything the app holds, in a plain JSON file.
- Deletion: deleting a habit removes it and its history; uninstalling the app removes everything. On Android, also turn off Auto Backup or delete the app's backup in your Google account if you want the cloud copy gone.
- Objecting to analytics: Settings → Privacy → Usage analytics, off.
For anything the switches above do not cover — including a request to delete analytics events already collected from your device — email [email protected]. We answer within 30 days. There is no charge, and we will not ask you for more identifying information than is needed to act on the request. If you are in the EEA or UK you may also complain to your local data protection authority.
Security
Your habits are held in your device's private app storage, which the operating system keeps away from other apps. Any saved sign-in credential is held in the platform keychain or keystore rather than ordinary storage. Everything the app sends over the network goes over HTTPS. No system is perfect, and the honest version of this paragraph is that keeping your data on your own phone is the main protection here — it is not on a server of ours to be breached.
Changes to this policy
If we change how data is handled, we will update this page and move the “Last updated” date above. Where a change is significant — a new third party, or a new category of data leaving the app — we will say so in the app before it takes effect. Continuing to use WellTrack after a change means you accept the updated policy.