Privacy Policy

Welta: AI Wellness Insights is a general-wellness app. This policy explains the information Welta processes, why it is processed, where it may be processed, and the controls available to you.

Information We Process

• Health and fitness information you choose to make available through Apple Health and HealthKit.
• Information you enter or select in Welta, such as goals, meals, hydration, mood, preferences, app settings, Welta AI messages, and Today’s plans.
• Photos you select or capture for photo-based food analysis and short audio recordings you choose to send for voice transcription.
• Food-search text and structured nutrition information used to find or prepare meal-log drafts.
• Limited app, device, purchase-result, security, diagnostic, and usage information needed to operate, protect, and improve the app.
• Contact details and message content if you contact support.

How We Use Information

• To provide local wellness views, summaries, logs, insights, Welta AI, nutrition tools, and Today’s plans.
• To provide optional cloud and third-party AI processing only after the relevant feature and consent controls allow it.
• To secure the backend, prevent abuse and duplicate actions, diagnose failures, and enforce service quotas.
• To provide consented Product Analytics using allowlisted product events that exclude raw Apple Health data, workout routes, AI text, food photos, and free text.
• To comply with legal obligations and respond to valid privacy, security, and support requests.

Apple Health

Welta accesses Apple Health data only with your permission. Health data is used for app functionality and wellness insights. Welta does not sell Health data or use it for advertising. You can change or revoke Apple Health permissions in iOS Settings.

Workout routes and location traces obtained from HealthKit are used only for local workout maps in the current release. Route coordinates, route polylines, and route-derived fingerprints are not sent to Welta’s backend, AI processors, Product Analytics, or support systems.

Optional AI Processing

Cloud AI requires both Enable AI Features and Allow Third-Party AI Processing. You may change either control in Welta Settings. Turning either control off stops future cloud AI insight and Welta AI requests covered by those controls.

When enabled, Welta may send minimized, structured wellness context for AI insights. This may include summarized sleep, activity, nutrition and hydration observations, supplied trends or comparisons, logging state, goal ratios, a selected Time Machine scenario identifier or label (a user-selected scenario) with an optional overlay relative to a recent baseline, and bounded coded continuity markers. Welta does not send raw HealthKit records, full HealthKit history, raw goals, birth date, height, weight, workout-route coordinates, prior insight text, or advertising identifiers in AI insight payloads.

Welta AI may process your current message, a bounded recent conversation window, and sanitized derived Welta context. Welta AI chat history, local memory, Today’s plans, and action records remain local to the app and are not synced through Welta cloud services in this release. Today’s plans and logging actions use draft, review, and explicit confirmation before any supported change is saved.

Photo-based food analysis is a separate user-initiated feature. The selected image is sent to food-photo AI processors only after you choose to analyze it. Food photos are not sent to Product Analytics. Voice recordings are sent only after you choose to send them for transcription.

Service Providers

• Apple HealthKit, private CloudKit, iCloud, and App Store services for platform functionality selected by you.
• Cloudflare Workers and Cloudflare KV for backend security, quotas, temporary caches, and request handling; Cloudflare Workers AI for AI inference and voice transcription.
• FatSecret for food search and structured nutrition information only when that separately licensed path is enabled.
• Amplitude EU for optional Product Analytics when you separately enable that setting.

Cloudflare states that Workers AI Customer Content is not used to train Workers AI models or improve Cloudflare or third-party services without explicit consent. Welta does not sell personal information and does not use these providers for cross-context behavioral advertising.

Storage And Retention

Core health and wellness records are local-first. Local app data remains on your device until it is replaced, deleted through available app or system controls, or removed when the app is uninstalled. Selected app-state records may be stored in your private iCloud account when iCloud is enabled.

The Welta backend does not maintain a long-term account database of AI prompts or AI chat history. It uses limited temporary Cloudflare storage, including subject-scoped action deduplication for approximately 60 to 300 seconds, food-photo analysis responses for up to 6 hours without storing the raw image blob, FatSecret-backed food-search cache entries for up to 23 hours, quota counters for approximately 24 hours, and pseudonymous App Attest security records for approximately 90 days after the last successful authentication.

Health-derived AI calls use a direct Workers AI connection with store:false. Welta has disabled AI Gateway prompt/response logging and Gateway caching for the configured health-data gateway. Cloudflare and other platform providers may still perform transient processing and maintain security or infrastructure records under their applicable terms.

International Processing

Cloudflare and its approved subprocessors may process information in the United States, the European Economic Area, the United Kingdom, and other locations used to provide the service. Where required, Cloudflare’s Data Processing Addendum incorporates the EU Standard Contractual Clauses and the UK transfer addendum. Optional Product Analytics is sent only to Amplitude's EU ingestion endpoint. A FatSecret lookup, when enabled, sends a minimized food-search expression and regional settings rather than a Welta profile, HealthKit history, image, or stable user/device identifier.

Your Controls And Rights

• Change HealthKit permissions in iOS Settings.
• Disable AI features or third-party AI processing in Welta Settings.
• Disable Product Analytics in Welta Settings; disabling it removes Welta’s local analytics device identifier and stops future analytics events.
• Remove local app data by deleting the app and manage private iCloud data through your Apple account and available app/system controls.
• Contact support@welta.co to request access, correction, deletion, withdrawal, or an appeal concerning Welta-controlled personal information. Welta will authenticate and respond to requests as required by applicable law.

Disabling a feature stops future processing for that feature but does not retroactively remove information that a platform provider must retain for security, legal, or contractual reasons. Temporary Welta backend caches expire automatically and are handled under documented deletion procedures.

Children

Welta is not directed to children under 13.

Changes

Welta may update this policy as the product, providers, or legal requirements change. The effective date above identifies the current version.